
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json)
Hash identifier: A8/qYEOOWeX+uO1vJRTqkVmcHdY7smHq2wpaBAKJpGk=
Subject key identifier: 42:EC:70:CA:DE:06:ED:67:60:4E:8B:21:BA:E9:59:EF:9F:87:8C:76
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
Manifest number: 015E
Signing time: Sun 01 Mar 2026 05:59:09 +0000
Manifest this update: Sun 01 Mar 2026 05:59:08 +0000
Manifest next update: Sun 08 Mar 2026 05:59:08 +0000
Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: WMhCTaGDlSDGwlafgMUxUMjYhCUKnSoGDYCjfgqR6nU=)
2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: 7/3ODwQ2dlZbxqeVnJstobH8SWsvoF3IBlCZtLMYHu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Mar 1 05:59:08 2026 GMT
Not After : Mar 8 05:59:08 2026 GMT
Subject: CN=69a3d5ad-38b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:7e:51:15:6d:6f:70:1c:4d:47:bf:64:f3:
43:66:02:a8:34:93:f0:13:8c:08:9f:4f:ca:f1:3d:
80:04:78:2f:73:55:1d:58:34:88:04:25:b3:c6:31:
ac:6e:1e:1f:40:91:a1:07:f5:9f:f3:29:ee:43:4a:
39:02:04:68:ae:7f:89:1c:50:22:0e:78:72:d6:1a:
e0:ad:79:d9:e5:4e:74:36:1d:28:90:db:70:e5:69:
a6:dd:e6:5b:aa:91:70:e8:15:b6:ce:9d:0f:60:b0:
91:66:85:62:23:56:34:27:98:d9:d7:95:15:8e:28:
6a:5d:f6:5b:a5:97:e4:71:a3:c4:e9:23:ab:11:fd:
48:cf:0b:44:82:4e:7a:ae:c8:4c:41:ca:a7:63:59:
3c:78:6a:7e:b0:6f:c2:a6:a1:6c:ab:e9:e7:53:05:
1e:1d:00:24:9b:b8:d6:77:bc:83:b7:4c:25:49:5e:
f4:fa:df:f6:02:57:d5:6e:e1:af:95:6b:19:63:6c:
4e:db:df:42:ae:7d:3b:ee:aa:12:e3:12:7e:52:eb:
30:c3:13:d6:ec:8a:1c:c6:3c:97:52:66:90:0f:4d:
eb:18:f1:d1:84:70:36:6f:cc:4f:e7:86:6f:ab:c5:
8e:78:19:52:38:74:cb:92:7f:a3:9e:41:77:e9:5f:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EC:70:CA:DE:06:ED:67:60:4E:8B:21:BA:E9:59:EF:9F:87:8C:76
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:20:0c:0d:aa:aa:e1:78:00:94:70:94:94:6f:e8:31:dd:26:
54:b7:50:a2:1f:73:40:6d:ab:74:21:d6:3e:31:8d:47:64:66:
1d:f8:09:0d:5f:51:d3:60:9c:1c:2a:bc:6b:af:ec:0f:88:42:
03:3f:19:40:c0:2a:b4:20:57:ac:de:9e:1f:89:a4:20:cd:e8:
18:ae:fa:3d:6d:0e:6a:4d:af:b3:e7:47:75:80:be:18:da:4f:
54:37:24:4b:6c:08:be:0b:a4:b9:a0:d7:53:fa:f3:25:bf:33:
eb:11:35:25:9e:79:45:0e:78:28:ce:76:59:76:03:ed:7c:39:
d8:c8:e5:0b:38:0c:32:53:ae:88:94:24:c5:79:33:dc:d9:56:
46:17:64:e4:c6:64:9b:df:82:b1:cc:93:f9:29:b8:9d:f5:29:
ab:5a:07:f2:b4:ed:32:b0:bb:41:29:10:c6:aa:e3:bc:38:85:
2c:cd:73:d9:7c:59:19:0b:dc:57:cc:91:2d:a1:8d:cd:a3:ca:
b4:46:50:f6:89:00:c7:7b:a5:9e:11:b7:51:6a:38:de:da:25:
4b:53:16:ce:ba:19:d4:4c:ed:cf:17:af:fc:74:c3:f4:44:7e:
6b:02:38:5a:e6:b3:ea:9a:f2:76:79:04:e0:a7:dc:44:ef:3c:
80:1f:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:57 2026 by rpki-client