
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json)
Hash identifier: M7r2OAZnSjcjA7HXJSmNJjOgOMu8aX23iqr5rDl7vZ0=
Subject key identifier: 9E:39:5E:6D:86:8F:2D:9C:5E:68:8F:BC:84:00:CE:6C:9D:DC:4A:7B
Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Certificate serial: 0C27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
Manifest number: 0C1F
Signing time: Thu 26 Mar 2026 18:41:49 +0000
Manifest this update: Thu 26 Mar 2026 18:41:49 +0000
Manifest next update: Thu 02 Apr 2026 18:41:49 +0000
Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: eT4gITHfDIlMJE50UcW4HMNAGDKPVXhLxkeWIrfUhCY=)
2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: W9bk7BWbjWm31paj/e25NULQ5EVlnx3DxH5iP28fphw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Validity
Not Before: Mar 26 18:41:49 2026 GMT
Not After : Apr 2 18:41:49 2026 GMT
Subject: CN=69c57ded-637d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:66:59:3c:d2:64:3a:3b:2b:7d:f6:fa:17:
3e:1c:0a:35:dd:89:ce:3d:1d:0a:7e:cc:7b:af:53:
56:96:2f:9c:52:34:a2:79:d8:b9:dc:82:4d:ec:e4:
96:d9:c9:2b:2f:75:27:61:40:e4:ab:1a:81:07:62:
6b:38:ba:05:b0:c9:48:05:9a:e1:11:98:dc:7b:65:
2f:75:7f:7b:9e:b9:14:e5:8a:06:77:63:f0:e7:2d:
7b:2f:98:fb:e6:f4:aa:f5:6d:22:0d:55:a2:64:0c:
2f:58:a3:11:ba:9b:1c:35:69:f4:f3:d8:b9:cd:16:
af:e7:d3:ea:88:b7:cf:76:93:a1:0a:ec:bf:b5:4d:
db:32:58:60:bb:28:26:64:8a:d0:ab:fd:4c:e2:e9:
7d:bf:49:3c:f4:73:e6:89:f6:a6:c0:60:f1:3d:99:
12:79:e0:30:7c:5d:b8:ad:5a:f5:a6:6b:19:2c:b0:
30:ef:89:71:05:ea:65:30:17:54:65:ce:b7:de:eb:
9b:3a:8f:e3:d6:0e:68:08:60:32:27:f2:3e:98:2b:
27:74:60:be:79:75:92:ff:3f:0e:a1:36:f6:ae:4b:
8b:73:c6:ce:f4:40:cb:1b:14:a6:db:3d:75:36:c7:
f1:1a:da:c8:d1:65:c1:75:e5:91:e5:68:07:2a:9e:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:39:5E:6D:86:8F:2D:9C:5E:68:8F:BC:84:00:CE:6C:9D:DC:4A:7B
X509v3 Authority Key Identifier:
keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:0a:6e:32:c6:0e:4a:2d:83:6e:55:36:20:1c:b5:3c:bd:be:
7d:7a:4b:55:c6:2f:19:e3:6a:bf:c1:a9:7b:35:74:42:54:63:
b4:55:34:ad:ac:85:15:8d:72:4b:1b:61:fa:3f:55:07:c8:3f:
95:7e:47:7f:35:ff:58:33:fd:8f:16:49:be:b0:fc:34:55:a4:
74:36:51:c7:8b:d5:ec:47:d1:e8:c2:a2:b2:aa:08:fc:2b:80:
a1:9e:da:69:b0:26:fe:29:e8:24:29:89:6b:98:55:1d:ea:3a:
73:35:99:ae:8c:2d:8f:a8:ea:a6:0c:6a:10:b7:5b:9e:73:d6:
7f:ee:2e:dd:e0:e0:22:7b:4b:b5:ee:8e:25:39:a0:f9:df:c0:
f5:87:82:f1:00:d9:7f:29:63:bf:01:76:52:e1:f6:ed:7b:72:
ed:6c:d9:f2:f3:4c:06:89:55:2f:73:36:11:2b:b7:de:fd:4a:
92:cd:02:b7:25:6f:37:21:55:80:8a:05:f9:ec:52:06:d8:95:
57:b1:ad:c8:aa:8e:5e:a6:57:59:f5:7a:c9:9e:f4:5f:75:a0:
39:93:83:0e:a4:44:a2:f7:ac:b9:13:c5:ca:f8:69:ff:ea:66:
d5:08:7a:27:b8:c2:ea:52:b6:0b:37:bd:9d:bc:fe:ce:b1:84:
04:05:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:37:11 2026 by rpki-client