
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
File: 7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json)
Hash identifier: f4mwK7QBRS7RJ/JxmOswVRw4fKgtBsnX7tIf/ZQloHk=
Subject key identifier: 77:49:37:1C:00:F6:44:B7:FD:54:E1:56:E1:B4:1F:6D:7C:C2:23:BB
Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7
Certificate issuer: /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
Certificate serial: 3394
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
Manifest number: 3D24
Signing time: Sun 01 Mar 2026 23:07:34 +0000
Manifest this update: Sun 01 Mar 2026 23:07:33 +0000
Manifest next update: Sun 08 Mar 2026 23:07:33 +0000
Files and hashes: 1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: cFQTbz5CWugex3wJZI9ve/Dt/9R15t8NWKtF+uKVeVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl
rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13204 (0x3394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A759F, serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7
Validity
Not Before: Mar 1 23:07:33 2026 GMT
Not After : Mar 8 23:07:33 2026 GMT
Subject: CN=69a4c6b6-4dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:d8:8e:6e:54:63:ff:1a:77:ad:e7:70:c5:
17:75:f3:67:e8:4e:4a:c8:1b:ec:b0:a7:97:f3:2a:
96:2c:8a:84:84:f5:f9:96:1e:05:0d:91:df:6d:0c:
ce:9c:bc:c9:e7:6d:5e:67:ac:ce:3a:a6:4c:76:c0:
a6:b7:cf:ac:af:7b:3c:b4:3f:26:f3:22:39:8c:9c:
bd:38:0d:85:d9:98:50:ed:4b:96:68:24:0e:b1:2e:
72:d4:41:e6:cb:48:0d:9c:26:ff:cb:42:38:b6:c7:
af:7d:fa:ee:af:59:4b:2d:2c:0e:06:c8:2f:16:67:
63:cc:24:5c:f8:63:55:19:1c:44:0a:72:aa:f9:41:
6a:e6:f0:cd:65:f2:b9:09:c6:ba:e4:d4:eb:d6:29:
81:59:34:c9:60:fe:4c:f6:ff:21:64:de:2d:04:d1:
b1:7d:fc:58:c3:f9:7a:6f:86:67:f8:25:d1:f6:26:
a3:e4:cd:7b:c9:3c:4b:32:21:39:57:ed:46:63:32:
72:2b:99:04:c7:cb:84:c3:e2:6e:44:96:08:ab:d0:
8a:d9:ca:82:79:db:93:35:a2:f0:23:7d:c1:81:97:
f0:12:b4:f2:58:6a:02:19:8c:be:dd:ae:16:9d:6e:
43:1a:87:8f:fd:60:dc:aa:87:ee:2e:ed:b7:20:25:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:49:37:1C:00:F6:44:B7:FD:54:E1:56:E1:B4:1F:6D:7C:C2:23:BB
X509v3 Authority Key Identifier:
keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:8c:6d:ec:19:35:af:da:14:96:4a:c2:b3:f4:ab:c7:13:d8:
02:a9:f9:47:b8:f6:8a:35:47:ba:98:84:2e:e4:ca:50:5a:8f:
73:88:3a:be:b9:95:33:6e:d7:e2:03:04:d9:b0:1e:6e:3f:7a:
a4:88:27:52:83:97:34:e1:55:b4:cd:5e:b1:3c:fa:d1:53:32:
3b:15:da:4f:3c:72:b8:0c:8f:d6:ee:1c:30:b9:e1:4a:2f:90:
b6:cd:55:0b:3f:82:67:1a:d6:7d:37:80:5a:e2:67:7e:fe:f6:
b5:c5:e7:de:e3:77:d3:c7:48:09:66:43:42:1c:a3:dd:f3:16:
67:19:1e:09:68:03:f5:c5:d7:c1:6c:e8:fb:a2:44:14:40:c9:
4f:f5:51:5e:6c:1a:54:bb:f6:f2:21:11:3f:0f:b9:f0:c3:b4:
20:14:fb:c4:bd:de:1e:04:d1:86:52:af:f1:65:95:61:3b:bf:
1c:51:af:59:59:62:d8:6d:55:8a:bc:05:47:10:ea:ac:94:3b:
c3:ef:d2:fe:9a:70:a1:74:b5:5a:62:bb:34:85:0a:a1:cd:d8:
33:a0:9e:b9:9a:79:a1:a6:51:83:19:fa:c4:05:06:f0:94:66:
90:cf:6b:cf:f6:ac:27:a5:e0:f0:93:06:73:b7:3e:ab:a7:94:
3e:e6:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:56 2026 by rpki-client