
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
File: -n7ee2K0e4fdE5hqjnLD_jZWtcw.mft (raw, json)
Hash identifier: BtbebfozO3ySVzd5BpXSJFA9AcdskEOTK6/bUaap1Kg=
Subject key identifier: A8:4D:36:64:3A:FF:F7:E6:D8:A9:8B:07:C7:DF:2A:5E:0A:3D:E0:07
Authority key identifier: FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC
Certificate issuer: /CN=A91E4743/serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
Manifest number: 096A
Signing time: Tue 24 Mar 2026 19:57:27 +0000
Manifest this update: Tue 24 Mar 2026 19:57:26 +0000
Manifest next update: Tue 31 Mar 2026 19:57:26 +0000
Files and hashes: 1: -n7ee2K0e4fdE5hqjnLD_jZWtcw.crl (hash: lb4YCZh2/hvrRlwMtUsSi2/Q+ovN2uVr0GLr7XmkCWs=)
2: ECC7CA2EF1AA11F0885E8853736F56BC.roa (hash: oWetRFPONyPjhz2G1P+9aSesJu8FRJYWjRGlV512qhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl
rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4743, serialNumber=FA7EDE7B62B47B87DD13986A8E72C3FE3656B5CC
Validity
Not Before: Mar 24 19:57:26 2026 GMT
Not After : Mar 31 19:57:26 2026 GMT
Subject: CN=69c2eca6-780a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:82:ed:06:26:6c:d9:16:66:36:5b:76:f5:6d:
6c:fc:35:5f:dd:9e:81:96:87:3a:60:a0:7f:ec:a9:
c5:98:82:17:a8:35:91:bd:8a:eb:a7:1b:0d:54:f7:
c9:ad:98:f2:9a:7f:c2:81:25:e2:4e:79:18:1a:b6:
6c:3d:10:5f:23:1e:3e:a9:e0:43:aa:0c:a8:ed:91:
ba:bf:63:d8:bb:f7:82:ce:f1:78:0f:92:ee:a7:5d:
d8:94:9f:29:0b:06:28:71:fc:a9:55:fe:4c:a6:3a:
9a:7c:67:95:67:e0:54:a5:4c:ce:f2:85:6b:b3:2c:
de:c9:37:a8:76:28:a2:1f:26:8a:d0:cf:8d:31:82:
1d:ec:9c:87:04:42:58:22:1d:81:c5:5b:13:f9:93:
0a:a8:ce:8f:d4:e2:d6:ba:83:14:a9:f3:dc:6e:52:
f4:e9:96:b6:73:dd:bb:0e:c2:f8:ca:a1:8b:8d:27:
40:8d:a5:c6:2b:55:d8:e2:6e:fb:29:3c:51:ea:ef:
a0:51:06:63:0e:15:a3:56:1e:18:4c:49:ca:ad:bc:
c2:d8:4a:03:83:de:01:10:2c:85:ef:d1:f7:52:94:
9a:36:b1:3a:26:7a:27:9f:0b:bf:c1:5b:26:e0:57:
11:58:63:57:2c:3f:7b:83:d4:24:4f:f9:23:50:31:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4D:36:64:3A:FF:F7:E6:D8:A9:8B:07:C7:DF:2A:5E:0A:3D:E0:07
X509v3 Authority Key Identifier:
keyid:FA:7E:DE:7B:62:B4:7B:87:DD:13:98:6A:8E:72:C3:FE:36:56:B5:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-n7ee2K0e4fdE5hqjnLD_jZWtcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/-n7ee2K0e4fdE5hqjnLD_jZWtcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:45:fd:fb:17:5b:ac:bd:ff:03:cd:17:b2:97:29:0b:d8:0d:
74:ed:a9:b8:98:20:ae:97:0d:ba:64:90:c4:de:a9:4f:fa:2a:
2d:61:8a:62:43:58:bb:06:ae:d2:62:85:a4:49:1c:28:74:27:
03:5a:43:b8:25:3d:d7:32:5b:85:08:6a:42:6d:52:fd:26:fc:
ce:3b:54:ed:a8:3a:f9:05:7c:be:eb:bb:eb:4b:fa:9c:98:c6:
3f:4b:6a:9f:7a:d8:92:ee:d3:08:43:d8:ec:b1:94:9d:e9:e8:
41:14:58:8f:60:a2:94:c1:cd:29:a5:22:36:9a:94:1f:e4:0e:
b6:fa:bc:8f:6f:b6:8d:a4:43:be:63:f1:37:ee:d3:77:8f:54:
84:f2:7f:18:d1:34:2a:62:11:41:e3:cd:47:10:d8:fe:bc:79:
9c:e1:a3:3a:30:c9:9b:d8:6e:ea:b4:4a:85:c0:ed:8f:4c:be:
cf:50:9b:8f:22:7b:b9:d3:81:8a:9a:05:8c:13:66:d6:39:9d:
dd:a6:f5:67:7d:a3:06:f4:60:2d:25:5e:48:07:a7:21:8e:78:
c3:a4:7e:65:df:b3:e4:5f:cd:da:cc:9f:48:a9:ce:cf:ec:51:
27:ac:50:67:2a:bf:dc:86:26:30:c9:c4:7a:27:a4:e6:c3:6d:
23:fc:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:39 2026 by rpki-client