
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
File: _-7mekM0ZWGI_qX2-dfnpwWUnj0.mft (raw, json)
Hash identifier: swP53r/7NsUsrWXBZnLrGLrty3DDOR+ik/oiPfWUvfE=
Subject key identifier: AA:CD:D4:DC:42:F0:98:5E:B1:4A:02:34:12:E3:E8:70:07:2B:4C:1F
Authority key identifier: FF:EE:E6:7A:43:34:65:61:88:FE:A5:F6:F9:D7:E7:A7:05:94:9E:3D
Certificate issuer: /CN=A91ADCB5/serialNumber=FFEEE67A4334656188FEA5F6F9D7E7A705949E3D
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
Manifest number: 0D
Signing time: Wed 15 Apr 2026 08:42:49 +0000
Manifest this update: Wed 15 Apr 2026 08:42:49 +0000
Manifest next update: Wed 22 Apr 2026 08:42:49 +0000
Files and hashes: 1: _-7mekM0ZWGI_qX2-dfnpwWUnj0.crl (hash: B2mmaCqkKDYWBtDFof1Rxo8KXEv5Q+ldi1SOg4I96m8=)
2: 100631B8285311F189E6C14D98833773.roa (hash: OnSEmhCuD0RbgJQkhNAMR74l52P/16L6+HgI2JOjkDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.crl
rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADCB5, serialNumber=FFEEE67A4334656188FEA5F6F9D7E7A705949E3D
Validity
Not Before: Apr 15 08:42:49 2026 GMT
Not After : Apr 22 08:42:49 2026 GMT
Subject: CN=69df4f89-01fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:fd:d5:0c:02:95:98:2b:5d:04:78:fb:72:
01:10:02:a8:48:ae:c6:d8:4a:ee:85:22:33:a7:f8:
52:3e:35:03:0c:45:27:3f:19:7f:eb:aa:24:cb:c6:
32:12:31:6f:c2:ed:6c:c4:9f:21:b7:2c:8e:49:32:
8b:8f:14:c0:c9:21:d8:be:55:98:11:50:98:ae:72:
38:de:cd:92:e2:25:f7:78:28:f7:c1:58:ed:a0:97:
01:07:c8:4c:b2:06:9f:da:70:c6:c8:de:a4:2e:41:
99:de:87:a7:de:41:04:8a:bf:ec:b5:42:54:7c:07:
2b:6a:a6:6f:06:45:95:7d:34:e1:0f:ba:36:99:89:
5b:3b:3d:29:58:ee:34:a2:da:59:1a:b8:fd:73:7c:
c1:0b:8d:f2:ec:48:92:68:87:58:88:a2:08:b8:6c:
cd:b2:4f:6a:10:31:0f:72:c6:af:ae:78:66:85:86:
9d:34:6a:b7:90:af:bb:8e:67:c0:fb:bb:9c:71:2d:
24:76:a9:f8:cb:8e:7d:67:4b:f4:62:7a:45:67:f5:
c2:be:0c:ac:ac:fd:9a:21:d9:32:ef:a6:0c:64:78:
8c:6f:4f:19:08:e4:37:c1:e7:37:49:3f:f1:26:d2:
db:14:ac:04:f7:ca:dc:43:e0:43:57:37:82:23:6a:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:D4:DC:42:F0:98:5E:B1:4A:02:34:12:E3:E8:70:07:2B:4C:1F
X509v3 Authority Key Identifier:
keyid:FF:EE:E6:7A:43:34:65:61:88:FE:A5:F6:F9:D7:E7:A7:05:94:9E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e3:53:bf:6c:fe:d9:60:98:23:4f:b6:20:34:3c:85:fc:75:
a9:27:7b:21:41:3b:f5:6a:38:98:c9:f8:10:9c:4f:b1:d7:d8:
cc:51:09:a3:1b:81:f8:0f:ad:ce:eb:a7:58:19:fc:76:ac:a2:
0d:d6:ad:33:7c:45:48:6e:37:20:e8:61:be:0e:2d:5d:ea:4a:
89:00:61:07:f7:5b:42:87:71:5d:26:f4:73:2e:f6:23:27:44:
7b:9c:58:38:55:82:6e:bd:74:9d:b8:83:c6:0c:ed:52:71:38:
62:5d:e6:d9:3c:19:ea:5a:fa:b2:74:f8:fe:65:e7:52:e3:34:
51:59:9d:3f:50:b7:b2:34:6c:80:74:cf:e0:68:15:df:1c:c1:
fd:df:2d:9d:99:d6:f2:8d:15:93:41:d6:92:02:d4:15:5d:ec:
90:50:e6:95:da:5e:99:a9:b3:5b:98:13:78:68:12:15:3a:d4:
c2:c5:a6:f3:1d:38:3d:62:a2:d7:f2:0b:16:d1:f5:aa:4b:b8:
1f:a7:99:5f:7b:9d:72:a4:70:9a:43:6c:8e:1f:82:d3:e7:87:
f8:d8:ae:3e:fe:92:70:48:03:db:8b:6c:3d:22:a7:1c:30:a3:
39:70:86:c9:f7:90:ab:86:e6:35:13:b3:c2:f1:2b:14:64:2e:
1c:96:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:14 2026 by rpki-client