
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
File: C7u50Awy3Cf2uMqAHgDtKYM59qM.mft (raw, json)
Hash identifier: R6ust7oYAzo7IpYQP9XWBTE7wM5CPEg6rbRU/RZWG5I=
Subject key identifier: 68:05:AA:17:62:DB:2A:FA:98:AC:53:04:34:4C:EB:7B:E9:CA:0E:44
Authority key identifier: 0B:BB:B9:D0:0C:32:DC:27:F6:B8:CA:80:1E:00:ED:29:83:39:F6:A3
Certificate issuer: /CN=A913CFCF/serialNumber=0BBBB9D00C32DC27F6B8CA801E00ED298339F6A3
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C7u50Awy3Cf2uMqAHgDtKYM59qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
Manifest number: 11
Signing time: Sun 01 Mar 2026 10:36:14 +0000
Manifest this update: Sun 01 Mar 2026 10:36:14 +0000
Manifest next update: Sun 08 Mar 2026 10:36:14 +0000
Files and hashes: 1: C7u50Awy3Cf2uMqAHgDtKYM59qM.crl (hash: JekGgZ7+Yyn19YuaCG4MPLDM7G8D9jWXcKmpXoBC5mI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.crl
rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C7u50Awy3Cf2uMqAHgDtKYM59qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CFCF, serialNumber=0BBBB9D00C32DC27F6B8CA801E00ED298339F6A3
Validity
Not Before: Mar 1 10:36:14 2026 GMT
Not After : Mar 8 10:36:14 2026 GMT
Subject: CN=69a4169e-b29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:27:4a:51:0d:7f:20:55:db:2f:eb:d8:c9:
95:c4:b0:fa:98:ac:c8:f3:c2:c8:3d:cc:e8:1c:0d:
14:eb:ea:74:f3:6f:f1:73:07:db:51:05:de:d0:d0:
43:aa:49:e3:42:d3:90:e3:99:a6:db:48:60:be:89:
f6:89:62:2b:47:fd:15:c5:0a:32:51:b6:a2:aa:e5:
ba:7d:c9:07:37:0f:dc:4e:f7:d1:1b:1d:c6:e3:12:
16:d5:ad:3e:2d:ef:28:d4:3f:ba:2b:02:88:01:e0:
6e:c0:9b:80:af:aa:da:ad:a1:ea:d0:36:73:6b:e2:
2a:e3:55:15:ab:b6:f8:41:25:ba:63:84:80:e2:cd:
8e:4f:de:20:e5:80:9f:3a:de:b5:98:5e:e6:36:e8:
cc:15:a5:30:95:a8:ea:6e:ef:c1:06:6d:16:0e:09:
57:cb:c4:d2:73:c1:38:55:1d:c7:ef:e1:0e:32:88:
e6:05:82:b1:bd:b0:20:b3:65:5d:08:f4:e5:bf:63:
73:78:5e:ab:1f:15:74:3f:a6:37:9d:6f:eb:13:8e:
f4:ce:b5:4a:fd:20:16:31:b3:34:b0:27:1a:9c:48:
12:b3:de:c9:0c:87:18:d6:b4:6a:57:84:8c:e9:06:
c8:be:1f:52:e0:ff:e3:50:29:1f:4c:4a:9e:15:ec:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:05:AA:17:62:DB:2A:FA:98:AC:53:04:34:4C:EB:7B:E9:CA:0E:44
X509v3 Authority Key Identifier:
keyid:0B:BB:B9:D0:0C:32:DC:27:F6:B8:CA:80:1E:00:ED:29:83:39:F6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C7u50Awy3Cf2uMqAHgDtKYM59qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CFCF/C916A488029411F191E60C74363D8C67/C7u50Awy3Cf2uMqAHgDtKYM59qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:10:6c:fb:d3:50:68:22:9f:8f:2a:b3:c1:89:7c:9c:ea:6b:
84:bd:18:f3:b8:89:3a:2d:7b:bf:ed:8c:66:2c:8b:e7:0e:08:
51:a5:bf:dc:d6:b3:21:b8:c8:20:b6:71:aa:b9:82:2d:1b:b3:
45:8d:b8:29:35:48:2b:70:4d:aa:c1:76:dc:27:22:e8:63:a9:
0f:cc:87:1f:31:bb:4d:9e:16:9d:3c:76:3e:9f:88:fe:ec:65:
d0:f5:0e:6d:b7:08:1b:fb:b9:57:7b:fd:fb:a7:76:c7:db:01:
0f:4c:d8:2e:4b:11:ac:2f:09:7c:5f:e9:98:e7:f3:52:41:e7:
51:01:45:f6:eb:08:3d:c2:69:7c:80:9b:72:7a:a0:0f:22:59:
bc:0e:90:79:38:d6:b6:a3:45:27:af:80:2b:58:e1:f5:4d:be:
b8:84:54:22:19:34:74:2e:d2:4e:60:e6:a3:78:65:46:d9:27:
04:e2:a3:00:b9:57:60:b2:98:95:85:37:7f:78:f6:e0:e8:9b:
7c:01:ab:5d:a4:89:b8:13:28:c1:49:59:5e:6a:9d:ce:5a:4e:
a7:ec:3a:6f:b2:30:b4:04:77:92:d6:72:6c:d7:d5:e1:49:ba:
f5:90:9d:04:3c:88:d5:22:3d:fd:ed:ad:5a:3a:f0:f5:66:48:
e9:2e:72:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:35 2026 by rpki-client