
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json)
Hash identifier: IZSc/YGCp1hCmHwwmXsl9+AfkfyzFPEX7hR4J7WDKiU=
Subject key identifier: 41:51:36:27:C6:83:27:5E:C9:D2:B5:CB:9F:8F:F6:17:2B:66:D2:F5
Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF
Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
Certificate serial: 21F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
Manifest number: 21EF
Signing time: Sat 28 Feb 2026 15:55:11 +0000
Manifest this update: Sat 28 Feb 2026 15:55:10 +0000
Manifest next update: Sat 07 Mar 2026 15:55:10 +0000
Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: Pg75zFx1VZ99JfABnQAPYNmIkoS/4PyDtrwWqLa47pI=)
2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: XfZ0SicsgqkXIdjgixNgz1nANxeNT0A/HYEmAYRcIaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl
rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8697 (0x21f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
Validity
Not Before: Feb 28 15:55:10 2026 GMT
Not After : Mar 7 15:55:10 2026 GMT
Subject: CN=69a30fdf-f24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:59:f8:e1:1c:6a:dc:7a:f5:07:4b:b1:22:
64:d7:f0:ef:c2:5a:87:5d:ad:39:22:2b:e7:1a:4e:
84:bb:8d:51:de:3a:63:01:1e:8c:df:24:d5:5b:16:
a5:7d:bc:77:de:4b:5e:14:7d:45:6a:a8:fe:43:d4:
ba:08:94:c4:88:c2:eb:a5:43:82:81:89:ce:6a:3d:
7a:2d:83:80:31:4e:d4:97:9a:00:e5:b4:c3:0e:87:
f9:0a:0b:6f:b5:93:d8:62:d8:fa:f1:f5:24:01:42:
72:e4:81:64:85:45:66:e7:de:77:69:a9:7c:4b:a2:
00:5b:da:7c:c5:14:5f:76:02:e0:53:df:e5:30:a8:
37:4c:6d:e6:b6:7a:97:2e:95:ac:5a:e7:2c:cd:e7:
ee:be:f1:f8:6d:9f:43:6c:51:27:1e:5b:ac:b7:dd:
7f:41:28:8c:ac:ba:a8:96:c7:9b:83:41:f2:7d:09:
ec:15:d5:49:33:3e:ba:02:94:7b:d0:04:6c:0c:8d:
7b:7d:a3:73:15:ab:9e:cf:62:e8:e6:62:0e:82:ee:
e1:0a:83:8c:0b:75:22:0a:1c:d3:08:5b:b0:bf:21:
0c:36:25:37:8d:b6:dd:93:05:28:12:c4:d0:7a:a9:
25:8a:eb:23:64:fe:d3:82:f4:ac:04:14:da:e1:8e:
55:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:51:36:27:C6:83:27:5E:C9:D2:B5:CB:9F:8F:F6:17:2B:66:D2:F5
X509v3 Authority Key Identifier:
keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:38:bb:cd:48:be:ef:b4:90:77:af:ec:c4:fc:3a:c7:af:a8:
00:ae:97:39:50:de:70:75:6b:b2:04:0e:b8:77:a9:7e:4a:5f:
83:8c:eb:ba:04:f0:48:af:d3:99:51:18:59:50:04:d8:e1:1e:
fe:f8:32:9d:81:57:37:d8:11:51:c2:09:41:45:c5:af:23:f2:
a5:05:a8:1e:6c:cd:10:5c:43:02:0e:2b:47:7a:23:c2:40:00:
48:a0:d5:54:e3:df:6c:48:cb:58:fd:a9:6a:77:c2:85:c1:13:
6a:69:9e:77:83:65:af:ea:7d:ad:dd:37:28:0e:14:db:31:b0:
49:cf:d4:bf:a9:6f:17:e0:63:04:b3:99:31:ae:fa:28:ee:86:
f6:76:f5:d0:03:a4:9d:e2:2f:34:1f:e9:cd:a1:de:aa:bc:4d:
33:06:36:ee:81:32:84:9a:df:fd:a8:40:65:6c:f5:80:be:5a:
43:7f:08:7c:45:db:1d:c7:4b:cb:7e:f2:c2:3b:da:4a:2e:c0:
ce:e9:61:09:9d:cf:da:d0:74:01:5c:69:ac:1e:5b:ed:01:7c:
6f:32:e2:f1:54:91:3c:1a:14:90:52:e2:ae:d9:3f:e2:fa:b2:
f8:ad:f7:04:2e:3b:48:40:2e:5d:1e:ae:f8:81:58:2f:bc:9c:
23:05:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:29 2026 by rpki-client