
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
File: d31UDhYfpnH7JFijP_5L8z1qcBU.mft (raw, json)
Hash identifier: G2bLC9D3rgboViiv51D/5Dw0m2lJO2PM1EZ3BGLrGyQ=
Subject key identifier: 5E:19:27:02:88:78:1A:E0:BD:8E:15:23:57:56:68:CF:44:22:0A:1A
Authority key identifier: 77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15
Certificate issuer: /CN=A913BA27/serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
Manifest number: A7
Signing time: Fri 17 Apr 2026 07:00:12 +0000
Manifest this update: Fri 17 Apr 2026 07:00:11 +0000
Manifest next update: Fri 24 Apr 2026 07:00:11 +0000
Files and hashes: 1: d31UDhYfpnH7JFijP_5L8z1qcBU.crl (hash: 4dyYmpj2pzSJRgc6YsficUc6Bktly/0kV5+KtvMjdAQ=)
2: 71B7688645AB11F0949A471EC4F9AE02.roa (hash: ke0eM4iCkX12hZuJQbpYZP0Prlr3aNWgiqlFHxWSZPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl
rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BA27, serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015
Validity
Not Before: Apr 17 07:00:11 2026 GMT
Not After : Apr 24 07:00:11 2026 GMT
Subject: CN=69e1da7b-9f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:f0:5e:5b:d6:69:3f:0f:a9:dd:d4:5f:f0:
19:bb:e9:36:51:51:06:b1:23:7e:ad:29:ba:40:3e:
ae:09:15:c8:5b:2d:46:14:26:14:e6:8d:74:ca:d3:
05:70:aa:13:26:9c:51:63:6d:05:48:a9:08:ab:80:
7e:66:5b:68:c1:36:65:87:0f:1a:95:55:d3:7b:10:
d2:22:e3:bf:67:5d:0a:01:cb:4f:9b:78:5f:73:21:
f4:db:cc:26:0a:e2:f0:bb:7a:28:89:1e:6e:83:d0:
89:8c:7a:ab:1d:7e:fc:8f:2f:7e:d4:cf:9e:05:a4:
90:ca:94:57:38:1c:0e:8b:15:4a:a0:93:6c:79:78:
7d:f0:8d:64:c5:de:18:d1:3a:44:e6:f2:ba:78:14:
8d:f2:ed:c7:da:05:ae:29:20:06:73:f6:3c:e8:42:
d1:3b:3a:4a:a8:70:af:1b:10:f4:11:10:d4:f2:2c:
9d:38:bd:c1:ce:e2:7b:4a:fe:7c:a7:a6:33:c4:63:
a4:69:76:2b:eb:52:c1:57:d0:ee:2b:af:d8:ae:94:
be:e9:ba:32:12:37:38:77:f0:51:a2:e6:4b:15:0a:
a6:c0:e5:0b:b8:67:37:05:f8:47:f6:21:a5:34:c0:
bb:12:05:6c:32:f9:17:76:54:9a:98:9a:18:bc:1a:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:19:27:02:88:78:1A:E0:BD:8E:15:23:57:56:68:CF:44:22:0A:1A
X509v3 Authority Key Identifier:
keyid:77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:e4:f5:94:dd:69:12:c0:83:f7:91:1b:1a:6a:54:32:15:db:
68:1d:d4:52:ca:43:92:76:74:93:fc:35:31:30:14:73:1e:71:
b6:95:29:09:1b:92:14:1a:69:1f:61:89:d0:68:76:97:9c:2b:
42:c6:e4:b9:dd:4c:81:ee:8e:a2:51:bd:20:2c:f7:17:9a:3f:
f6:f6:65:da:43:69:b4:4b:3a:16:18:65:a6:0b:f2:23:22:3b:
8d:51:8d:3f:e0:46:2a:16:18:a1:4e:01:3c:2c:27:64:27:34:
24:c1:13:20:7e:78:7e:1e:a9:dd:0c:14:b8:d6:57:98:3a:bf:
86:1b:c2:d6:84:79:cc:de:b2:fc:6a:57:8b:6f:4c:4c:29:a4:
c3:58:2a:7a:d3:a7:61:29:fa:eb:d4:27:0f:2c:91:70:81:e8:
51:f8:1d:27:7f:af:25:67:43:e4:67:e3:d4:4f:bf:38:42:7d:
94:4b:d4:b4:27:a6:2a:f2:65:8b:d4:5b:f2:d2:8c:f5:61:d4:
c7:64:65:f8:c9:ad:92:79:e2:47:cd:f5:c8:60:12:34:cd:e6:
1b:bf:62:fe:5e:95:1e:23:4b:13:46:f3:94:a4:8c:cb:1b:3c:
35:18:da:e3:c7:88:8a:49:65:bb:17:e7:a4:83:48:eb:82:7c:
11:7c:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:04 2026 by rpki-client