
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
File: B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft (raw, json)
Hash identifier: VwkYtawNbobyPiL6oMfMNMs4f05ENH9zhDlPx/AlQzw=
Subject key identifier: CB:1E:4A:94:78:2C:EA:71:AB:DD:B9:6F:AA:A3:A8:B7:3B:E8:A0:B9
Authority key identifier: 07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2
Certificate issuer: /CN=A91A00EF/serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
Manifest number: 08
Signing time: Sun 01 Mar 2026 10:43:09 +0000
Manifest this update: Sun 01 Mar 2026 10:43:08 +0000
Manifest next update: Sun 08 Mar 2026 10:43:08 +0000
Files and hashes: 1: B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl (hash: nYgcrot1R4W3n8n8vdfFBcGqzZfXPQnNQVxsybNNjUI=)
2: 964C388611F511F1B1F03794113D8C67.roa (hash: aDJ1T/8negVg13w36W/uf7MN9f6atZcUX+4QUHdvnVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl
rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A00EF, serialNumber=07B46E4CF3FE7C8C45021915801A6E53DA20ACB2
Validity
Not Before: Mar 1 10:43:08 2026 GMT
Not After : Mar 8 10:43:08 2026 GMT
Subject: CN=69a4183c-650f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:a6:62:a2:2c:b2:29:ef:15:19:a4:f5:64:
5e:af:3f:d7:2e:4d:c8:f8:13:93:95:db:a6:a7:df:
18:60:61:c0:04:7b:84:f5:43:df:ed:f3:29:aa:9b:
2d:23:ea:5c:ca:4f:2d:6f:03:56:69:f1:87:df:7b:
66:2d:91:33:c5:ab:6a:33:ad:39:b8:c7:57:4e:94:
9e:86:fb:2d:eb:fa:ec:8d:3f:69:85:5f:e3:96:53:
35:c9:a2:ed:56:60:dc:52:12:79:ac:c7:35:9c:3e:
5d:26:d8:e8:fc:f9:e6:98:42:11:bf:b3:bf:b7:93:
e3:ec:d4:5c:ac:cc:f6:d3:5d:c7:8a:23:41:3f:54:
c7:e2:62:f7:bf:3f:96:c2:83:e2:48:f8:79:7b:57:
20:31:ae:b2:49:45:42:df:5e:ff:0a:1d:18:93:98:
98:46:c3:f4:af:5f:c5:0d:04:06:6c:cd:e3:34:b5:
e7:6b:6e:bb:65:80:9b:d1:92:d8:d4:b4:da:58:45:
b8:d4:2e:13:7a:d4:c1:67:66:46:2c:8c:71:63:37:
10:40:2e:76:e4:4e:09:2d:a1:b3:df:04:fb:c4:cc:
c7:c5:6f:5c:96:49:40:c6:0c:76:75:51:7f:c4:97:
99:0e:92:bc:0c:0f:76:b8:29:c0:5b:25:99:ac:eb:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1E:4A:94:78:2C:EA:71:AB:DD:B9:6F:AA:A3:A8:B7:3B:E8:A0:B9
X509v3 Authority Key Identifier:
keyid:07:B4:6E:4C:F3:FE:7C:8C:45:02:19:15:80:1A:6E:53:DA:20:AC:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7RuTPP-fIxFAhkVgBpuU9ogrLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00EF/BD570D8A11F411F1A8DFB28D113D8C67/B7RuTPP-fIxFAhkVgBpuU9ogrLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:34:33:89:79:48:dd:2a:b4:60:13:85:50:aa:51:50:ad:d8:
cb:e8:cf:8b:24:d9:ff:f2:e0:2f:48:b4:51:db:8e:9a:79:89:
f5:0a:8f:06:9c:95:2f:17:16:e5:5e:20:2a:59:34:3c:b3:68:
7b:55:19:d9:7a:fb:3e:82:93:43:e9:f2:ac:77:1b:70:d3:39:
a2:5d:d7:39:44:53:8d:92:fc:c7:b1:b5:09:df:cc:7b:bd:75:
6d:ee:13:08:a3:6e:a9:9b:9d:01:d0:0d:de:69:e0:ce:86:b1:
fd:9e:b9:89:10:41:65:a7:d7:43:32:69:ab:07:96:38:2f:b6:
52:c3:76:54:49:2e:d7:61:2e:a3:4f:a1:9a:7c:5a:13:3a:51:
f9:97:8f:b2:58:51:7a:08:92:e5:71:28:f4:32:98:b7:d5:85:
95:eb:43:ab:a7:18:0f:93:96:89:30:39:a5:73:cb:3a:d0:4c:
8d:ce:5a:f9:ff:3e:12:ae:40:03:1c:26:c6:46:e8:fa:ac:e1:
8a:e1:4a:9e:27:6e:c6:b6:cc:45:74:65:d8:10:e5:7a:e3:2e:
ab:72:e5:d7:0c:69:36:dd:b0:19:e4:c3:d6:3a:9a:fd:63:b8:
6e:21:c0:26:a5:3d:d5:08:67:f7:bc:95:dd:00:2c:bc:e9:c7:
ac:4c:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:06:25 2026 by rpki-client