
$ rpki-client -vvf rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
File: 7DwKarkc4TMW0oQzDDgovv4qNBM.mft (raw, json)
Hash identifier: xrqFHjFDxLFA5i9xm5XXhtMzE1fnglMzlR5mDFuEyas=
Subject key identifier: BE:24:47:80:B2:3C:D7:E1:20:09:90:7E:95:09:55:45:BA:85:63:2D
Authority key identifier: EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13
Certificate issuer: /CN=A91988EB/serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
Manifest number: 28
Signing time: Sun 01 Mar 2026 10:17:54 +0000
Manifest this update: Sun 01 Mar 2026 10:17:53 +0000
Manifest next update: Sun 08 Mar 2026 10:17:53 +0000
Files and hashes: 1: 7DwKarkc4TMW0oQzDDgovv4qNBM.crl (hash: OaqCxCz7KP+LeYhlG635FKY63rRjEF19ejJK8kOECbU=)
2: 243B3BD4E58611F09F41C5B9446F56BC.roa (hash: Aj8RzUbCtaBCDWnM6UmtXq+ruFe179TzOiotm9T5UII=)
3: 8FB3AD6AE58611F0A2F174BA446F56BC.roa (hash: sTktGN5NFdYq+gsUaHWLCXYe1rpci+mF34P/YuXEE0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl
rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91988EB, serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
Validity
Not Before: Mar 1 10:17:53 2026 GMT
Not After : Mar 8 10:17:53 2026 GMT
Subject: CN=69a41252-c435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:fb:71:94:12:ea:0c:a7:03:39:ed:01:80:
0f:d7:f5:d1:c1:79:46:58:2e:44:11:47:6f:d6:2d:
cf:cb:ce:1e:86:c5:d7:f7:f6:e5:bd:c6:59:50:97:
96:5c:ae:ea:96:a2:c9:2e:cf:92:17:31:88:dc:89:
df:ba:af:b1:1c:d2:20:47:f3:20:c6:16:20:32:06:
cb:5b:5f:c9:eb:ef:d6:35:77:53:e0:c1:a2:63:c1:
b7:07:13:63:be:7d:d6:f3:d7:8e:cf:bb:f1:35:16:
11:41:af:da:80:1d:c7:d2:4d:66:c1:03:80:b9:af:
28:ed:87:34:5a:ab:74:46:46:a0:7e:10:17:b2:c8:
d0:2d:b4:fb:4c:4f:4e:03:53:51:c1:38:de:af:79:
f1:e1:e1:c2:6f:9f:e6:ea:9e:2b:c4:25:f0:71:16:
ac:0c:a0:d6:ed:3c:14:b7:1f:7b:19:65:53:03:c3:
69:b7:c3:d5:72:fa:e9:7e:eb:c1:72:d5:e8:70:56:
3b:72:95:54:4e:d6:0e:d2:a9:f9:ef:e1:dc:98:b6:
71:6d:cc:75:6b:42:bc:49:34:54:ff:07:35:f9:73:
c9:ce:a6:d7:f7:d3:be:6c:37:93:a0:d3:a7:be:79:
e3:84:59:00:68:0d:1b:bf:12:af:30:3d:5a:27:c5:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:24:47:80:B2:3C:D7:E1:20:09:90:7E:95:09:55:45:BA:85:63:2D
X509v3 Authority Key Identifier:
keyid:EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:05:ea:64:7e:e9:77:c7:d5:ca:01:35:c9:73:29:76:0a:7e:
27:43:08:33:9c:c6:6b:eb:e6:d2:a5:95:ed:92:cf:e0:09:1b:
76:b6:f3:a4:6d:e9:f5:ed:0c:07:cd:99:36:f5:6a:f5:27:59:
51:4c:0a:dd:af:14:17:cd:8d:15:3e:fd:ea:42:5b:fb:97:33:
31:73:a4:b9:f4:23:b1:d5:9a:cf:f2:8c:1b:00:e4:d5:45:d7:
4e:f7:83:ef:9f:78:8e:a3:cf:19:a7:51:e7:1e:2f:2b:d6:bb:
57:56:c2:94:b8:03:83:30:3d:1f:23:aa:40:b6:15:a7:73:7f:
fe:e9:de:22:72:ee:e7:55:27:cd:9f:c3:df:7f:d3:b0:58:cf:
b5:b8:37:d4:51:1f:88:60:34:7b:e0:0e:76:19:aa:bc:24:4b:
28:51:cd:b1:4b:f8:6c:cb:c8:b3:43:3b:27:bf:17:31:66:b7:
93:fe:5b:aa:ed:b1:cb:62:4f:dc:54:08:30:cd:b9:3f:a5:d3:
c6:a9:c2:af:be:34:80:71:ec:cd:e6:21:69:5b:a9:48:7d:0b:
8c:9f:b1:83:be:80:ce:62:b6:11:b7:cb:71:21:fc:62:5d:76:
a5:88:51:0f:9f:27:5c:e7:11:83:14:fd:89:40:0c:c3:e4:b3:
fa:b5:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:39 2026 by rpki-client