
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json)
Hash identifier: cDBbQFPzJ+4cCVOK/X6LC7Af8B0UkJG2Lec6wpOaW/o=
Subject key identifier: 89:25:87:2E:1B:DC:5B:A1:A0:51:6E:06:31:40:E9:C9:6C:BC:5D:FE
Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF
Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
Certificate serial: 2214
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
Manifest number: 2209
Signing time: Thu 16 Apr 2026 15:50:51 +0000
Manifest this update: Thu 16 Apr 2026 15:50:51 +0000
Manifest next update: Thu 23 Apr 2026 15:50:51 +0000
Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: bhLNPCLL0wyrrOBBqUn48EeJdSfVghdKQl3sNtiJpis=)
2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: rHC43FVwk8ATnBb6I6PL5ONQ1jxQI6Zs5uXakToizww=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl
rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8724 (0x2214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF
Validity
Not Before: Apr 16 15:50:51 2026 GMT
Not After : Apr 23 15:50:51 2026 GMT
Subject: CN=69e1055b-0607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:cf:95:5f:7f:79:cb:ff:c8:fe:8e:6a:f4:
4a:5c:c6:d6:0d:53:8f:e3:a0:81:79:71:1b:53:23:
7c:50:07:f8:55:e0:6b:56:66:08:c0:41:ef:a8:0f:
1d:83:fb:b8:c3:8b:42:9f:77:2c:b8:23:e9:cf:f9:
5c:5c:fc:4a:c4:1c:f0:97:d4:d0:7b:f5:60:22:13:
7f:7f:33:54:d5:9f:c1:f7:f3:91:e7:61:6d:83:b0:
3f:f7:24:51:60:98:81:54:b1:57:db:b1:a7:24:be:
a8:17:8a:48:ad:88:6e:47:d0:14:f6:1b:f9:7b:58:
b8:5c:4f:08:da:95:ef:de:4d:ac:da:b1:6c:f2:16:
32:0a:fc:9c:86:19:69:08:97:09:5a:8a:fe:52:48:
66:26:1c:8b:08:33:20:7c:b1:7c:74:9a:e2:37:36:
98:33:4e:2a:db:54:52:be:c9:32:ba:d8:a9:78:1e:
01:72:c2:6e:5e:b2:02:d9:63:1b:90:1b:85:ca:84:
33:31:89:c1:3b:de:c6:b3:b5:c1:86:cb:44:63:76:
6c:3b:c8:c8:f7:e2:97:90:24:93:fb:ec:dd:46:28:
c4:7b:08:ea:5d:fc:84:fd:8f:09:58:df:8e:d3:b6:
7c:fa:6c:72:58:6a:3b:27:23:cd:da:8a:06:c5:1a:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:87:2E:1B:DC:5B:A1:A0:51:6E:06:31:40:E9:C9:6C:BC:5D:FE
X509v3 Authority Key Identifier:
keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:d6:2f:c6:02:15:60:35:47:80:1e:e9:a8:29:32:40:dd:be:
36:d5:0b:4b:ee:51:37:6d:63:3e:7c:aa:91:fb:49:79:82:dc:
85:00:13:e2:b4:dd:55:27:55:28:e5:6c:04:2e:a0:6d:41:69:
17:d9:d2:41:68:34:29:cf:23:d1:18:c9:b0:f0:0f:43:25:55:
4c:cd:2e:8a:b2:b2:95:4b:b5:1e:fb:83:43:98:fa:4e:2d:2b:
a5:5d:fd:d8:66:db:a6:49:9e:46:de:91:02:f1:bf:93:62:b7:
68:bd:1c:71:b1:9b:f6:bf:66:73:c8:92:4e:a0:8b:9d:fe:b0:
90:32:21:c2:fa:bd:ff:c1:5c:89:81:41:8d:37:32:42:0b:61:
5f:b8:45:1c:5e:23:4e:94:a1:45:9c:77:05:de:ab:af:f5:ed:
26:b1:28:3f:e8:3c:cc:c5:41:6c:72:53:79:84:1b:d8:4f:f3:
af:29:92:8f:fc:43:49:61:11:97:45:4e:e9:bc:2d:8d:0d:13:
38:bf:71:e2:87:70:e0:e1:b3:8d:fa:d8:40:bb:bb:12:0e:4f:
95:f0:c5:bf:4f:15:df:d5:df:c0:ef:c9:72:72:b3:ba:89:2f:
b0:9c:7b:76:57:1f:28:0d:88:1e:02:e2:2b:0b:72:77:75:59:
6b:10:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:52 2026 by rpki-client