
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
File: f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json)
Hash identifier: x08cX2iDYxzFhFFUocbI31HrZDG4sECRUlmqStyv/ek=
Subject key identifier: 86:C8:60:D5:51:AB:AC:7A:45:1B:B7:C0:73:52:21:02:7C:D4:A3:7E
Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
Certificate issuer: /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Certificate serial: 0248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
Manifest number: 0242
Signing time: Fri 17 Apr 2026 02:12:56 +0000
Manifest this update: Fri 17 Apr 2026 02:12:55 +0000
Manifest next update: Fri 24 Apr 2026 02:12:55 +0000
Files and hashes: 1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: yGS2Vy4/04sHUJF9KI9RQCqWyFN6sV0qRReAlnneP8U=)
2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: UmgIXHzfkXMqKWVff6849jzy9LFm+7q1hZgvaLwPQ/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Validity
Not Before: Apr 17 02:12:55 2026 GMT
Not After : Apr 24 02:12:55 2026 GMT
Subject: CN=69e19727-d05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:75:ad:b5:bb:f3:ba:f5:4a:71:ba:a7:d6:
81:d0:9a:5e:fd:cf:68:59:0c:6e:ad:e8:63:46:8b:
6f:f4:ad:2a:ab:e7:ca:6e:4d:06:d3:69:96:a7:14:
5f:e3:17:a7:f4:6c:16:ec:d9:08:5b:f8:91:c7:c0:
63:12:ff:c9:79:50:01:14:5b:5b:41:f1:fe:b3:a6:
ef:de:0d:0a:69:cf:fb:e5:ad:d6:f6:4d:a2:06:6c:
82:a8:84:54:62:26:c2:01:ac:16:13:a6:ee:fe:fd:
b6:61:59:15:af:22:95:81:15:1a:7b:74:fd:33:6f:
68:84:03:08:71:10:55:3c:01:65:a2:a9:1e:8f:75:
76:e0:64:c2:b5:c6:13:a8:5c:f8:54:50:4f:85:48:
bd:28:6c:da:23:e2:82:6c:4b:c8:92:67:d7:ae:db:
2d:5f:1e:98:f7:20:0b:01:be:1c:7f:1a:51:71:36:
74:ab:91:68:7b:f1:a6:9e:da:21:5b:46:f6:b7:47:
7c:2f:fe:ce:1b:f1:81:63:11:1f:c4:2b:ee:9f:52:
40:de:0b:2b:f4:b9:53:ff:df:2f:c5:62:85:4e:ce:
81:e0:df:4e:c3:47:47:9e:2f:6d:54:1f:67:21:27:
02:ce:12:62:80:52:46:e2:82:9b:ab:5f:ca:a2:ec:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C8:60:D5:51:AB:AC:7A:45:1B:B7:C0:73:52:21:02:7C:D4:A3:7E
X509v3 Authority Key Identifier:
keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d8:58:71:37:47:cb:c8:b9:4c:a6:cb:a9:40:0d:54:80:2b:
50:a5:7e:55:22:2c:eb:7f:a1:48:9f:c6:4d:d5:0a:39:56:2a:
2a:28:57:8b:bf:eb:b5:48:df:75:13:77:56:e8:da:24:a1:c1:
1c:b4:14:b3:24:9f:b6:90:4e:98:b9:cb:d0:2e:2e:14:f0:90:
15:60:98:62:64:6e:20:77:03:1f:56:4b:2c:e3:f4:67:67:43:
84:62:64:7b:1b:bd:a7:18:98:22:21:63:09:70:e8:ed:06:99:
67:ec:7e:b7:53:cd:cd:df:f7:7b:41:16:91:0a:ed:e0:bb:5b:
c4:ae:b6:04:10:47:4e:de:ad:9a:bb:51:a1:ee:ad:b6:b7:8c:
b3:f4:30:2f:5b:3d:71:85:ba:ca:48:c0:5a:1d:bc:da:83:9a:
f4:5a:a1:6d:cf:1b:96:ae:1c:14:db:ab:50:bb:93:cf:e5:80:
76:6c:94:26:60:8a:d1:d4:8b:ff:57:c0:ae:e3:8c:25:d8:6c:
2e:08:9c:8a:68:2c:06:c2:92:e4:3c:92:c2:48:20:60:0f:f3:
d8:7d:9c:c9:25:71:ad:b7:f2:b9:b0:fa:05:bb:38:90:dc:f3:
d2:e0:5e:eb:c6:2e:fb:2d:1d:0c:df:ac:f6:1d:46:41:3b:2e:
90:23:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:41 2026 by rpki-client