
$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json)
Hash identifier: dUPol3PFHs39QYBGZrwPthcqLlax0u9k2smhSYB0FgY=
Subject key identifier: FD:4A:17:B5:D0:01:C1:FB:8F:18:68:E3:7A:AF:63:2D:86:B8:A3:A6
Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
Manifest number: 0100
Signing time: Wed 15 Apr 2026 05:44:53 +0000
Manifest this update: Wed 15 Apr 2026 05:44:53 +0000
Manifest next update: Wed 22 Apr 2026 05:44:53 +0000
Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: 89LuuSVV0oafLa2sB06XdNFSalq1oYuSdyjld0UHi0U=)
2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: IlwuqYd+V3i+RoW8n6rnlp+BLBlUeaUn1+UQMM4yK1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Validity
Not Before: Apr 15 05:44:53 2026 GMT
Not After : Apr 22 05:44:53 2026 GMT
Subject: CN=69df25d5-6c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:71:25:82:a2:5d:1a:96:c0:a4:f4:3d:ed:
b7:4d:20:0b:f0:63:66:54:1e:c3:d9:a6:ce:bc:c2:
ec:e4:ea:db:bc:70:54:93:fd:27:ae:39:86:0f:40:
a5:f2:13:67:d4:d7:c5:67:a2:7c:64:62:36:eb:e4:
e0:2d:5c:27:10:b6:09:fc:56:01:12:0a:90:3e:8b:
6b:56:ef:2d:a7:25:e3:48:12:0c:9b:15:d2:e2:57:
be:c0:4b:c6:8f:12:1a:f8:94:88:b1:35:e6:2c:53:
52:f3:05:2f:0b:2e:58:3a:44:91:03:c8:85:fe:73:
8c:09:78:b5:cd:5c:64:57:a5:dc:8c:ad:34:56:29:
f9:c5:9a:58:73:9d:74:d2:fa:e1:27:1f:27:be:d9:
a9:f3:26:e6:f4:05:a5:94:fd:49:6b:19:d8:00:67:
76:c5:ec:c4:ba:49:11:61:9f:3a:38:42:e7:6b:a7:
89:ce:9c:4e:3e:31:b2:e0:f5:c6:d7:e4:33:ba:41:
65:8e:30:7d:c8:89:ab:ef:67:d3:95:69:72:eb:2b:
6f:c6:2f:06:b7:20:da:cf:4e:16:a9:14:68:92:9a:
78:16:f1:ae:20:6c:e1:0a:81:45:94:c1:f0:db:d5:
e1:ae:85:ea:db:a0:42:d0:9d:12:b3:aa:ed:84:5e:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4A:17:B5:D0:01:C1:FB:8F:18:68:E3:7A:AF:63:2D:86:B8:A3:A6
X509v3 Authority Key Identifier:
keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ef:8a:65:1c:27:37:5f:18:2f:0e:92:b6:67:45:b1:70:8b:
cb:f2:b5:c6:cb:e1:8f:69:c3:2c:fd:a4:68:e5:fe:f4:b8:2b:
51:4b:b8:4c:5f:9b:53:55:28:3b:60:da:01:9b:16:f1:ce:35:
96:48:4e:39:c5:e3:cc:ee:69:62:88:7f:0e:2f:5c:5b:5c:d3:
9b:ca:8c:e0:c0:1f:9b:cd:2e:8a:ba:9e:17:2e:a1:dd:03:d0:
88:5a:9d:b1:69:41:a3:53:0c:5a:71:2b:ed:55:e1:23:f5:ff:
63:61:98:ac:dc:cf:3c:cf:b4:6e:1b:eb:cd:90:5f:c6:95:67:
54:d3:ba:69:7d:97:7c:ca:5d:66:5a:0a:53:70:7c:a7:36:9e:
88:12:db:11:64:52:3f:11:a7:66:7a:e3:d1:a9:ea:50:a7:e4:
d2:38:54:a4:5c:c8:a6:70:64:94:a0:38:20:8f:db:c8:1c:23:
5e:5a:35:5b:27:ad:cf:54:45:34:79:ef:be:2a:71:27:02:8e:
30:00:0e:4d:3f:99:15:fb:41:1d:65:63:b6:4e:f5:44:26:18:
ce:0c:dc:d1:b5:e7:5a:64:36:a4:d3:44:40:c7:e8:31:35:90:
60:07:91:dc:57:7a:cd:0b:e8:f6:eb:86:09:a8:05:2b:9e:e4:
19:0b:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:06:03 2026 by rpki-client