
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
File: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft (raw, json)
Hash identifier: tEKmL/LgltyCH0O5BV+Yc2/50Uu/tKmgowKOUIOXGKs=
Subject key identifier: C9:95:76:79:39:40:FA:8C:A7:24:C6:F8:F5:0E:DE:A7:42:AD:B3:03
Authority key identifier: EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
Certificate issuer: /CN=A91A45C3/serialNumber=EEC1462457141B83FD3DFC25896A76023DE84739
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
Manifest number: 04
Signing time: Thu 16 Apr 2026 22:52:10 +0000
Manifest this update: Thu 16 Apr 2026 22:52:10 +0000
Manifest next update: Thu 23 Apr 2026 22:52:10 +0000
Files and hashes: 1: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl (hash: v6nu4y6qG8G7Lsy00lb6lQlObEe1G2wzv4ol6N80VxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl
rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45C3, serialNumber=EEC1462457141B83FD3DFC25896A76023DE84739
Validity
Not Before: Apr 16 22:52:10 2026 GMT
Not After : Apr 23 22:52:10 2026 GMT
Subject: CN=69e1681a-233b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:7d:b6:c2:c5:b5:4f:ca:04:ee:02:48:ff:
10:40:0e:dd:12:8a:12:b4:56:64:72:93:28:2d:c5:
af:53:e7:0e:a4:c0:d1:91:bf:8d:c8:d1:f5:28:da:
61:6f:e7:49:72:06:55:83:c1:cf:03:6b:d8:c4:bf:
35:01:a9:74:d3:c0:db:10:c8:ee:d8:fc:48:f3:89:
ae:5b:cd:f4:b5:c2:7e:a8:9e:0c:9c:be:a6:a3:ce:
3b:a1:9b:53:25:79:28:a6:79:46:a3:4c:1c:19:c2:
89:e8:2b:da:ee:52:07:bc:2e:6c:6c:96:c9:5b:83:
6f:f9:19:26:11:1f:f2:62:70:a8:65:61:80:b2:0e:
09:4e:78:9c:a8:76:ee:68:ed:84:63:30:b2:61:6a:
55:4f:93:ff:3c:b0:d8:df:05:ff:6c:9b:2c:55:ab:
97:bb:bf:08:12:c4:d4:f5:0f:91:85:33:e3:42:5d:
b9:ae:3b:14:e3:9a:33:c7:7b:a7:2e:b7:3b:e4:97:
95:38:35:95:67:30:68:3c:7e:7d:50:57:ba:ed:b9:
15:f4:75:0d:7f:b9:63:e2:56:41:d3:5f:50:61:ab:
4d:cf:a4:22:95:38:62:98:1d:27:63:2b:0b:c3:95:
48:4d:e0:71:77:f8:4d:e4:c2:61:46:81:42:97:64:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:95:76:79:39:40:FA:8C:A7:24:C6:F8:F5:0E:DE:A7:42:AD:B3:03
X509v3 Authority Key Identifier:
keyid:EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b9:ae:27:08:d6:a9:71:d5:2c:4a:64:0f:6b:ca:88:ea:4f:
55:64:bd:29:f9:b1:b0:4d:2d:e9:94:0a:40:85:1f:db:b4:b1:
f7:91:b9:62:46:d0:f0:cc:2e:86:c7:39:a1:6e:2d:74:7c:f5:
ad:ca:5a:80:f0:40:70:9d:fe:82:e7:47:a4:72:d5:48:89:35:
28:dc:cb:6a:01:03:8a:90:15:40:78:5f:27:49:5c:fb:bd:bf:
b3:dc:fe:c6:af:bb:79:ba:56:2e:5f:42:c8:f9:0e:db:71:5f:
8d:98:9d:9c:de:1c:d2:72:3d:14:60:a7:c0:9d:46:c6:f8:f1:
00:5d:4a:37:93:73:9c:2b:ee:53:13:1f:01:00:c9:ee:9d:3e:
ea:b8:c2:7b:bc:35:b8:d0:9f:bb:86:b5:ac:8b:95:da:03:e7:
67:8b:a1:89:2e:29:06:65:69:d1:cb:a4:ea:2f:28:24:54:a1:
f7:3d:b4:0c:81:28:0e:32:3b:3f:1d:b2:bf:60:8b:8f:8e:a1:
1b:53:5b:61:d4:4f:35:46:8a:4b:a0:bf:51:15:ac:13:8b:f0:
c5:83:92:d3:d0:08:5b:f2:dc:a9:3e:e6:da:e8:6e:62:78:d7:
a0:38:cf:4a:2f:e1:e4:8c:cb:7a:e3:d4:cf:fd:1f:93:d5:94:
e8:55:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:18 2026 by rpki-client