
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
File: 7a8emnnZ_ssQeIOv03V_qPcKMtc.mft (raw, json)
Hash identifier: YCIRBRXQ51IsQkD+X+WcCbsvvNnxZ5WqE4l/raJWE0Q=
Subject key identifier: 39:E4:1E:F5:FE:B1:AA:5A:A0:D3:49:5C:46:C7:32:12:69:CB:F2:6B
Authority key identifier: ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7
Certificate issuer: /CN=A91A2F6C/serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
Certificate serial: 0A45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
Manifest number: 0A3D
Signing time: Thu 16 Apr 2026 19:37:55 +0000
Manifest this update: Thu 16 Apr 2026 19:37:54 +0000
Manifest next update: Thu 23 Apr 2026 19:37:54 +0000
Files and hashes: 1: 7a8emnnZ_ssQeIOv03V_qPcKMtc.crl (hash: AP2rEN3rQN2cclNELmJIziywoYcQ5lq2FHn9t9BfV3U=)
2: FA7CB46C8AB411EA89D83541C4F9AE02.roa (hash: 0VT5Qaia6m9lZiwgE5nQayNqKU8C2FZbz9qJZgerMEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl
rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2629 (0xa45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2F6C, serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
Validity
Not Before: Apr 16 19:37:54 2026 GMT
Not After : Apr 23 19:37:54 2026 GMT
Subject: CN=69e13a93-efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:74:dc:21:82:b4:ef:9e:67:97:0e:78:93:
76:8b:ee:ba:4b:27:fc:9d:88:fc:64:4d:ba:56:50:
59:44:f0:9e:ba:63:2d:e6:47:8b:a3:d7:f0:d5:b6:
41:b9:57:7d:ac:b9:5e:35:83:d1:99:92:c4:27:0d:
d0:14:8c:b8:f7:1c:a5:eb:3f:16:26:dc:5e:a2:f3:
5d:b9:fe:3f:c3:b4:34:21:57:9b:45:e6:00:2e:6a:
ce:c3:df:84:c5:49:28:31:74:fd:e0:a0:dd:d6:79:
27:01:16:ca:0d:8b:e9:d9:c4:6b:bd:8a:d2:cc:9a:
e1:e1:e3:dd:00:58:0d:5d:ec:fe:e0:9a:09:8f:c5:
42:08:a0:a3:c4:7f:3a:ae:4f:a5:a5:c9:16:48:d9:
2e:1f:a3:b2:e0:18:09:3e:d3:8b:5e:35:8a:c1:85:
2d:ac:3b:ad:e6:0e:34:8a:78:3c:cb:4c:f8:15:20:
99:97:f3:95:14:99:c1:08:88:7f:99:41:a3:f4:58:
93:75:ec:00:9f:b2:8f:8d:6a:35:03:fa:d1:8b:c4:
38:3e:c6:9b:6b:46:f4:4f:ea:26:bc:83:01:49:23:
fd:23:44:b7:20:38:c6:b5:d8:57:29:67:a0:fb:da:
31:b5:89:04:00:45:c5:6e:b2:6c:c4:e7:01:37:b6:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E4:1E:F5:FE:B1:AA:5A:A0:D3:49:5C:46:C7:32:12:69:CB:F2:6B
X509v3 Authority Key Identifier:
keyid:ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c2:56:3e:2e:e9:e3:2f:98:e6:49:c4:e1:4b:71:72:da:a6:
f1:9b:18:95:ae:3d:52:21:c3:8c:4a:ba:ca:2d:bf:8e:df:c0:
b9:9a:28:70:86:44:ee:80:1c:c8:50:94:92:e6:36:3a:e2:2d:
49:94:6a:a9:73:da:74:28:6a:fd:58:8a:50:d9:ab:65:92:a1:
73:e4:7d:2f:f3:a8:23:37:f9:5d:45:66:3b:3c:76:03:de:8f:
19:0e:ee:da:aa:e2:9d:f9:f1:95:95:1a:73:57:9c:44:3d:09:
42:b6:ed:71:cf:1e:6b:e5:3f:bc:a8:06:2d:26:92:fa:4a:29:
91:74:06:2d:b5:56:e1:42:0a:3d:8c:0c:27:7c:94:99:34:3a:
47:e5:db:88:91:f4:d6:9c:b5:76:a2:10:9a:49:a8:00:86:e5:
90:72:5e:b7:02:16:11:e0:94:7d:32:b9:9b:80:75:e5:ee:21:
90:8b:e3:37:41:dd:a6:a4:b8:f5:cd:3b:74:c9:86:e3:03:17:
b8:c6:d2:8e:1a:6e:5c:00:6d:50:18:ff:48:87:70:7c:4e:8b:
a2:f2:4d:d6:65:81:fb:1c:8d:86:f8:93:10:89:00:f6:e0:47:
d4:4e:73:65:d9:8d:f1:e5:7a:0b:8d:d3:64:79:31:19:e3:a4:
0f:2a:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:54 2026 by rpki-client