
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json)
Hash identifier: 6KjzwiZpmaDTOTywKmHebrGcDomWHiBVBiPso3fpKzs=
Subject key identifier: 7E:B6:99:67:33:49:75:DF:9B:A0:40:23:62:F7:09:D7:0F:91:BB:63
Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
Manifest number: 015F
Signing time: Fri 17 Apr 2026 04:40:29 +0000
Manifest this update: Fri 17 Apr 2026 04:40:29 +0000
Manifest next update: Fri 24 Apr 2026 04:40:29 +0000
Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: 9HuswDV6CNB7z7EaONQyASxVlXAkaOfAwGtj6OactI8=)
2: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: ooDmK99ixwmZHb01igd9edAZRWXI26i5vbPS7c6NFw0=)
3: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: Ug9ILiDXqWcLa6yuD4ODzV/AkZeAMrnjdmuMuL/P0OM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Validity
Not Before: Apr 17 04:40:29 2026 GMT
Not After : Apr 24 04:40:29 2026 GMT
Subject: CN=69e1b9bd-2224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:61:da:7c:1f:9f:a3:0c:eb:a2:e4:2c:83:
b5:bc:c5:65:8a:dd:db:b1:70:45:32:ec:a5:6f:df:
b7:af:4d:9e:d9:7a:f9:df:61:2c:11:45:00:98:98:
2c:ab:0e:2c:ee:24:9a:af:53:f2:49:6f:c0:df:c0:
23:36:5c:8f:a1:7c:62:99:6a:a0:28:25:b6:73:87:
49:4c:da:e3:c4:54:89:2a:96:e9:a0:5b:26:9e:a5:
df:d8:6f:c2:08:07:8f:1a:b2:c7:a7:c7:25:08:e3:
18:64:13:53:f5:8d:4d:78:21:94:e1:9a:43:b4:85:
75:88:11:f3:65:6b:02:08:62:e5:35:64:b0:2c:66:
cb:22:98:77:96:25:a2:52:76:78:2d:95:c1:2a:d9:
db:84:3e:f4:79:15:43:ba:87:e1:b9:bd:cb:24:b3:
44:5c:ed:df:69:51:c2:7f:59:84:68:71:10:77:89:
40:2c:1f:27:b7:c3:a3:20:52:b2:64:b0:63:b6:7b:
16:5a:bf:28:09:53:5f:73:c7:c9:8c:f6:87:1f:d4:
1b:72:1e:23:bf:c0:ae:26:04:db:ec:24:df:60:a3:
b0:c5:0b:ca:1e:fa:07:86:e1:61:cd:43:63:ad:67:
7b:65:eb:3c:9f:8b:01:3a:8f:f5:dd:de:c7:42:fa:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B6:99:67:33:49:75:DF:9B:A0:40:23:62:F7:09:D7:0F:91:BB:63
X509v3 Authority Key Identifier:
keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:cb:f9:f4:fe:cf:9c:35:0e:60:15:22:47:ea:68:d2:8f:
84:72:a3:fc:c0:5e:16:58:bb:73:3d:a9:50:03:46:a3:70:d2:
a5:6a:79:8e:a4:54:d7:67:31:77:4a:54:99:a9:eb:52:d1:fa:
68:f1:97:dc:6f:d4:38:f2:8f:09:1f:ae:8e:f5:12:43:7c:93:
ef:02:ba:89:8c:e7:2b:72:7d:9d:4f:cd:47:bf:c9:7f:cd:79:
fd:87:a9:93:46:42:39:2a:aa:75:1d:9d:5e:5a:06:02:c6:07:
14:ff:97:a4:c6:91:4a:b8:85:d3:bd:3a:d7:72:07:3b:0d:c7:
76:0d:fc:cf:70:d7:03:e6:ac:b2:df:ad:66:d4:08:46:ca:4c:
99:50:2f:06:85:6d:a6:5f:33:e9:8c:73:a1:4c:33:69:55:3c:
99:fa:05:86:74:07:31:11:29:be:b4:fc:73:b5:ee:80:ba:0a:
18:9b:a7:f7:b6:7f:bd:55:3e:aa:aa:05:4c:b3:3a:f3:29:3c:
62:3e:0d:cb:3a:e9:fd:b4:6d:a2:0a:19:43:21:5f:15:f1:f4:
8d:2d:d2:f5:e8:5a:1b:63:bf:cb:0a:4f:7b:6e:b2:4d:87:73:
66:02:00:41:ad:8c:21:61:22:e9:b8:dd:8c:75:d5:db:77:1e:
aa:48:76:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC
QzdDMTg2Q0MwHhcNMjYwNDE3MDQ0MDI5WhcNMjYwNDI0MDQ0MDI5WjAYMRYwFAYD
VQQDEw02OWUxYjliZC0yMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0kVh2nwfn6MM66LkLIO1vMVlit3bsXBFMuylb9+3r02e2Xr532EsEUUAmJgs
qw4s7iSar1PySW/A38AjNlyPoXximWqgKCW2c4dJTNrjxFSJKpbpoFsmnqXf2G/C
CAePGrLHp8clCOMYZBNT9Y1NeCGU4ZpDtIV1iBHzZWsCCGLlNWSwLGbLIph3liWi
UnZ4LZXBKtnbhD70eRVDuofhub3LJLNEXO3faVHCf1mEaHEQd4lALB8nt8OjIFKy
ZLBjtnsWWr8oCVNfc8fJjPaHH9Qbch4jv8CuJgTb7CTfYKOwxQvKHvoHhuFhzUNj
rWd7Zes8n4sBOo/13d7HQvo1mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH62mWcz
SXXfm6BAI2L3CdcPkbtjMB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB
QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo
c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm
Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO87L+fT+z5w1DmAVIkfqaNKPhHKj/MBeFli7cz2pUANGo3DSpWp5jqRU12cx
d0pUmanrUtH6aPGX3G/UOPKPCR+ujvUSQ3yT7wK6iYznK3J9nU/NR7/Jf815/Yep
k0ZCOSqqdR2dXloGAsYHFP+XpMaRSriF070613IHOw3Hdg38z3DXA+asst+tZtQI
RspMmVAvBoVtpl8z6YxzoUwzaVU8mfoFhnQHMREpvrT8c7XugLoKGJun97Z/vVU+
qqoFTLM68yk8Yj4Nyzrp/bRtogoZQyFfFfH0jS3S9ehaG2O/ywpPe26yTYdzZgIA
Qa2MIWEi6bjdjHXV23ceqkh2og==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:14:25 2026 by rpki-client