
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
File: z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft (raw, json)
Hash identifier: KIkgSXzJ0EMyOl4eDxFMuysrW7sVQOKvmkegbebgb1g=
Subject key identifier: 7D:1C:64:00:6D:27:BB:66:B1:22:DA:BB:49:63:98:22:84:B3:5D:78
Authority key identifier: CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
Certificate issuer: /CN=A91F7D5E/serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
Manifest number: 27
Signing time: Wed 25 Mar 2026 07:58:33 +0000
Manifest this update: Wed 25 Mar 2026 07:58:33 +0000
Manifest next update: Wed 01 Apr 2026 07:58:33 +0000
Files and hashes: 1: z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl (hash: 37dQUZ6MVxi9Pl6wUxD3kJL7vix431EayAfjC455R/E=)
2: 75FA3D56F20311F081D1C5E2496F56BC.roa (hash: iKD/upGNnZX+RaqlnGQMRh+aU9FLucr+XYy9zJq/7P4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5E, serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Validity
Not Before: Mar 25 07:58:33 2026 GMT
Not After : Apr 1 07:58:33 2026 GMT
Subject: CN=69c395a9-89db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:ce:95:88:16:a0:8b:40:03:06:77:ca:60:
0d:17:91:b5:f9:07:ae:4f:1d:00:2a:72:88:53:b1:
2c:9e:2c:d6:28:bf:57:d5:ad:43:f6:ab:88:29:fa:
fa:6d:b5:80:2a:fb:63:20:e1:f6:28:e7:1c:0f:8a:
bf:0d:ae:f4:53:a8:9e:00:f2:a9:56:9b:00:78:de:
d6:c0:7a:bb:76:c2:5b:c2:d9:6b:44:29:c1:e5:35:
c0:28:f0:33:1d:4a:de:93:94:69:27:f8:5f:a8:84:
ab:d2:93:c8:99:cc:97:c7:f6:2a:cc:cd:5b:01:5a:
77:fb:51:2f:ca:ca:fc:64:5b:91:61:b6:25:19:21:
38:27:e6:c1:be:da:9e:05:0f:8e:13:a0:bd:ce:b8:
ec:ad:ca:c8:aa:fa:b3:39:18:76:06:a0:d3:ae:a1:
34:21:5c:c1:f2:93:47:3e:3e:79:d3:48:03:34:66:
05:ea:ff:eb:e3:f6:3e:61:1e:56:21:de:7c:41:7b:
b1:b9:c9:44:6a:6e:4b:d6:d4:1b:7b:2a:1a:c8:22:
8c:99:f0:61:48:c5:ec:8b:b8:ae:b0:c7:bd:6d:95:
14:7d:63:bd:30:b0:22:05:29:2b:b6:2e:09:c4:31:
e2:f6:4c:01:70:f5:b4:72:00:50:22:ba:67:52:9b:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:64:00:6D:27:BB:66:B1:22:DA:BB:49:63:98:22:84:B3:5D:78
X509v3 Authority Key Identifier:
keyid:CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:8b:56:21:ed:34:a0:1f:37:d0:66:cc:9f:58:76:b5:42:3c:
ca:bd:a6:a2:65:f5:76:14:ec:ee:33:6b:a2:00:2b:95:bf:8b:
a8:01:3f:e3:80:16:19:bd:f3:d0:ab:19:3a:64:80:15:9e:fb:
26:b6:91:29:38:54:ab:b0:1b:9e:30:80:e4:ec:c3:75:ca:04:
89:f7:96:d7:be:f0:99:53:18:d9:32:c1:40:90:be:84:eb:0d:
b1:51:e4:c3:2d:8b:7c:d2:6a:ec:52:43:2f:9f:c0:7d:55:3c:
4c:0f:6b:bf:af:33:14:54:12:8b:63:3f:be:d9:9c:46:81:fb:
53:ed:6e:25:c0:2a:bd:1a:3a:fc:26:94:ff:e3:19:4d:c3:59:
1f:81:f3:3c:5d:58:b9:79:9e:07:2a:90:4b:ca:3a:15:8a:0d:
17:ce:fd:df:37:4e:21:2f:3c:ba:a2:7a:fd:27:79:b1:87:89:
38:42:bc:c9:93:f4:6c:a4:4e:b9:53:aa:42:48:d0:8d:70:95:
60:63:86:4b:2f:66:55:0d:21:c4:4b:32:f2:d9:18:84:3d:ad:
f2:15:f6:8a:5a:eb:cd:ec:93:f3:cf:91:57:b5:ec:2d:81:29:
61:0b:fd:be:09:33:7e:d5:0a:00:28:1d:34:18:1f:e2:3e:9f:
4d:e0:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:30 2026 by rpki-client