
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json)
Hash identifier: MQ8BiEaZqdHkCK/EsYTYuSiuKoGS+MlDAkJGQT7AV+4=
Subject key identifier: 40:0B:B2:F5:16:B8:F5:30:7C:8D:5E:73:63:D3:52:02:60:03:8B:AF
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
Manifest number: 0260
Signing time: Fri 17 Apr 2026 02:02:01 +0000
Manifest this update: Fri 17 Apr 2026 02:02:00 +0000
Manifest next update: Fri 24 Apr 2026 02:02:00 +0000
Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: aM3aas6B05ADR8+PBKfg8UPBd9hCv9jBkshjGnZHXMU=)
2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: 03+5kekzQmObuWmAw5F11iQvy5EJ47wIOoFNPa68NzM=)
3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: tHSDJxi9sVsTRoz1reKONBiKsyiwl7G8bqwueLtrVHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Apr 17 02:02:00 2026 GMT
Not After : Apr 24 02:02:00 2026 GMT
Subject: CN=69e19498-22df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:a8:03:87:73:70:8e:93:08:2b:86:5a:ed:
8f:fe:e9:18:61:ad:3e:f6:48:44:9c:26:41:79:e0:
1d:e6:aa:5d:da:f2:c5:a0:40:1c:9b:b9:f7:0c:a4:
ed:0f:b8:df:2e:67:5b:c6:68:4f:a1:b8:b1:22:f2:
4c:75:10:ae:58:3a:84:87:3d:9b:bb:76:f7:5a:85:
b5:27:80:fd:5b:b0:7b:12:1d:9f:6c:21:df:77:7b:
0c:e7:1d:46:78:83:9c:d3:ec:f4:42:f0:48:af:cb:
ba:db:11:d9:67:78:cf:fd:4a:2c:61:17:01:22:c1:
b2:8a:1e:2d:4f:75:43:d2:32:ac:23:10:08:7d:91:
23:be:1a:5f:ed:2f:d6:43:ef:cf:80:56:c9:2d:2b:
32:7c:5a:ce:f2:0e:92:72:90:f3:39:96:c4:0e:a4:
88:d0:68:12:08:76:a5:30:c6:d0:31:72:c4:06:e4:
cb:4a:3b:57:ba:bc:27:5e:21:e5:5b:bd:d0:db:e7:
e3:2b:2a:fd:9e:11:e2:a4:65:41:b2:90:7a:dd:8d:
c8:9c:88:40:78:75:1c:72:31:95:0b:4b:9e:48:9a:
c1:74:a5:d7:13:f0:c8:66:28:ef:6f:16:52:d7:6f:
0d:11:e1:d2:0b:23:77:b6:5e:7a:cb:1e:5c:57:93:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:B2:F5:16:B8:F5:30:7C:8D:5E:73:63:D3:52:02:60:03:8B:AF
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:68:07:5d:27:54:fa:1e:7a:5f:09:1c:21:5e:c1:01:85:8f:
5e:e2:33:d7:80:cb:fa:e9:a7:a9:cc:68:47:b7:b1:5e:01:f6:
28:3c:4f:f2:78:59:43:e8:c3:3f:b7:ba:b1:fd:5f:9b:56:16:
3c:3f:af:33:96:94:c8:3a:a8:b4:a8:55:2d:fd:61:34:b9:6f:
97:00:ad:84:ac:16:4b:c5:ab:44:b7:63:4d:f4:a0:47:0a:5e:
5d:1d:6b:0f:6c:78:5d:ab:7d:9d:b1:c8:6b:a0:fc:1d:da:f4:
5f:3e:7e:a2:91:00:6c:0f:a5:54:60:53:63:8c:e2:3b:b9:26:
85:b2:eb:b8:04:e1:56:e0:bd:cd:94:91:5b:49:c8:15:7a:00:
41:31:82:3e:66:79:4f:a5:80:60:67:08:ca:a4:f4:f6:10:b4:
17:19:2c:32:71:77:11:90:04:bc:3a:08:51:d9:86:25:c7:18:
ee:01:89:7c:b9:4e:9e:7c:bc:df:fa:37:3e:af:85:fa:1d:90:
0e:09:58:62:8b:fa:e9:cb:be:fc:fd:73:06:a5:f3:04:6c:dc:
8a:1f:03:4f:33:57:2e:6e:6b:5e:7f:62:ca:33:53:55:e3:f8:
19:2d:b9:03:40:46:9f:5f:71:c9:cf:5a:90:3c:46:96:da:e7:
60:66:e0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:35 2026 by rpki-client