
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json)
Hash identifier: ch31yCCVkIK40M1fJQK6xpaITYawkhKW9iC7Go71P0I=
Subject key identifier: 20:FD:05:BC:11:75:F2:17:82:70:A4:83:E4:AD:2A:F4:4E:50:77:70
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
Manifest number: 0178
Signing time: Fri 17 Apr 2026 04:23:39 +0000
Manifest this update: Fri 17 Apr 2026 04:23:38 +0000
Manifest next update: Fri 24 Apr 2026 04:23:38 +0000
Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: wZLic/0GW4ABf4iYo9iMA2RXhWwvmUxHpCtxiLgyp94=)
2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: hsvg83rgR4LLPwkP5NM04Dace/cP92iXdlcSROFWaew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Apr 17 04:23:38 2026 GMT
Not After : Apr 24 04:23:38 2026 GMT
Subject: CN=69e1b5cb-fef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:98:b5:bb:a6:7f:ed:8a:58:df:3d:ed:09:
2e:50:77:86:6c:2d:35:99:dd:7d:9b:42:7e:86:67:
db:20:bf:af:e2:2f:2d:eb:69:bf:d7:ff:3c:1a:76:
62:14:27:56:ac:3a:2b:fc:c9:60:b1:e5:2b:e1:48:
77:7e:55:2c:ed:3b:3d:08:f3:d2:06:09:8b:4c:7a:
ee:ec:d0:ad:51:96:cb:c1:ef:e4:3c:5d:ae:53:6b:
e3:fe:8a:3c:df:12:0a:1a:20:b7:71:97:d0:10:9c:
42:a1:2c:76:5f:0b:e6:21:a5:7b:c8:08:fd:aa:4d:
50:16:3a:a0:0d:86:83:1e:c0:5e:5a:fd:4c:ac:75:
4f:51:88:d5:a6:3b:f5:d2:a1:f1:d6:0e:c5:d0:74:
33:53:7e:01:cd:cc:3a:19:7a:56:71:55:7e:f1:c8:
ba:f6:38:cd:b0:6d:8d:5c:9e:06:96:f4:5f:e7:08:
9c:ff:a4:65:c9:60:29:15:50:4b:13:42:c1:97:21:
e5:94:a9:1a:bf:8e:40:d7:9c:b4:d0:d1:b1:69:15:
a2:53:10:33:b6:2e:26:84:84:d3:4e:b4:90:6b:56:
fe:cd:e9:23:48:e2:11:20:5f:30:50:cb:8a:f1:2c:
69:b6:6b:0a:45:fd:af:58:fe:d3:73:df:c0:dd:0f:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FD:05:BC:11:75:F2:17:82:70:A4:83:E4:AD:2A:F4:4E:50:77:70
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c5:6d:24:ba:e3:18:cd:65:be:5a:7d:b1:41:eb:8a:a6:2e:
f6:6f:d4:0b:97:36:78:b1:5f:74:2b:4d:15:f3:bd:63:41:42:
cb:e6:79:65:e1:da:59:3e:ef:e9:45:a8:ef:08:54:79:1d:2a:
74:1e:2f:ca:62:05:78:18:4b:06:62:69:e5:be:b3:8a:5a:65:
0d:68:28:62:ff:cd:67:16:81:c5:f9:79:c8:88:00:2b:fe:87:
91:06:4f:0e:0c:4a:13:ef:17:c4:94:0b:43:ff:ad:99:7e:4b:
4e:27:da:c0:98:6c:4e:9e:a0:18:64:06:d9:14:c4:17:5a:31:
52:51:88:42:cd:3c:3e:1d:72:8c:18:d7:61:e8:8a:23:a5:0f:
e0:6c:77:2f:38:ee:20:77:4f:f6:2d:bb:d6:8c:59:ab:9e:5b:
be:5e:d4:00:b2:a9:9a:ee:8b:50:1b:19:c5:d3:5d:1f:fc:0b:
9b:90:5e:53:67:f9:48:6e:40:1f:58:6d:de:ed:bc:00:8b:dc:
7b:0b:5f:cf:63:01:31:59:92:a8:4b:9b:f5:bf:3e:f5:dc:51:
89:76:f3:30:f6:ed:b0:1a:6a:79:99:6f:88:c5:d9:2b:6f:b1:
d7:e1:b6:c7:e7:6f:ea:11:e6:b0:c9:0c:50:c6:08:62:fe:e5:
46:cf:78:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:55 2026 by rpki-client