
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier: ihawjy97W581ZTp7bO6oWg368ktJS/CdtLGAD/72vYc=
Subject key identifier: 33:54:35:BA:78:B0:98:87:47:46:FB:59:3D:83:DD:29:75:F7:14:D1
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number: F1
Signing time: Fri 17 Apr 2026 06:00:54 +0000
Manifest this update: Fri 17 Apr 2026 06:00:54 +0000
Manifest next update: Fri 24 Apr 2026 06:00:54 +0000
Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: Hch/Ep0K6zzgHi5eSywYqvYiplgEnc1D7W2ipJl4ujE=)
2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: 9KLT865tYEymgriQqOzA9F8VKTM5qw8pmJPKAk9mtkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Validity
Not Before: Apr 17 06:00:54 2026 GMT
Not After : Apr 24 06:00:54 2026 GMT
Subject: CN=69e1cc96-5a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:df:43:38:f8:3d:7b:11:14:1c:70:ea:ec:
19:ec:1d:7a:a6:b7:56:d1:16:a9:ba:0a:6f:75:68:
fc:57:86:74:16:0f:dd:dc:75:18:f3:38:47:b9:89:
3a:77:72:22:ea:98:ad:87:01:05:6a:2f:a3:e3:b8:
6f:d0:ae:4a:bc:57:ed:b2:96:b1:5d:61:88:10:b4:
b0:ab:31:ad:e7:3b:ef:19:7f:4a:42:f3:ff:52:04:
df:f4:3d:93:9e:89:a7:83:69:f3:63:1d:58:b3:08:
7f:ee:fd:4e:d2:c4:d5:b6:e2:c3:14:f8:b8:db:f3:
05:07:9a:df:59:1c:9f:c7:6f:50:b3:2e:08:1f:a2:
1d:cb:8e:e3:5c:15:fc:e9:71:05:00:e7:17:93:c4:
36:34:6a:2a:a0:9d:80:c8:a1:b0:18:d6:50:dd:df:
ac:9b:36:1d:b0:c7:68:22:ec:11:1a:22:1e:a1:56:
88:6e:1b:44:dc:14:a8:12:43:f2:8c:d9:df:7e:e7:
8d:7c:2e:3f:11:7b:2f:e7:c3:a1:a2:64:dd:b3:18:
5c:ca:e6:b0:c8:d5:d0:ac:b7:d2:3e:fc:a6:e3:ca:
b7:16:2b:ce:b2:00:d1:45:69:c2:87:07:3e:01:43:
8e:23:77:bf:3c:82:ba:f5:20:b9:81:66:80:69:7f:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:54:35:BA:78:B0:98:87:47:46:FB:59:3D:83:DD:29:75:F7:14:D1
X509v3 Authority Key Identifier:
keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:cc:ca:78:43:ef:f0:f2:1b:9f:dd:17:2b:8b:57:30:ed:fd:
a9:6d:0a:20:18:58:9c:39:f7:ac:45:53:87:e4:a7:aa:e2:5a:
b6:80:cd:64:d7:c1:1d:41:3d:de:1f:a5:ac:98:26:80:4e:19:
d5:62:52:e7:3d:2e:f0:03:23:74:65:ae:7d:af:14:59:ac:8c:
c2:02:74:c6:13:3a:f9:92:08:e8:01:f4:3b:48:3b:10:fb:c9:
43:ef:24:2c:52:2d:91:0a:9b:ef:bc:52:e4:00:60:ab:e2:3c:
3e:24:17:41:dd:3d:db:dc:b8:16:a6:08:eb:9c:5e:a7:ca:ca:
fa:4b:6b:2f:8d:3d:2a:54:8a:b7:dc:f4:48:d4:e2:cd:2a:4e:
6d:2b:77:cb:49:d6:49:ac:d1:92:d5:aa:e8:13:a2:8f:14:c1:
3b:d3:60:70:21:bb:b2:45:ee:69:0c:19:e8:19:60:6d:74:7c:
0a:1d:5d:90:db:5b:9a:23:78:1c:16:17:0f:1f:75:7f:9a:11:
55:7d:2b:ef:84:ea:a2:bc:97:ed:78:6a:14:96:e1:6d:96:e0:
07:cf:29:4d:17:11:01:5c:20:5d:f6:39:2b:1f:27:82:9a:e1:
6d:c8:53:b0:cf:5b:b1:a7:69:e4:e7:2e:1a:ce:8e:f6:c9:16:
24:8e:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:02 2026 by rpki-client