
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json)
Hash identifier: NrNunALy9plJLOxW6ZuhKydrLGT6O7Tp7ag5IaMVIx0=
Subject key identifier: 05:B6:DC:1E:1E:C7:54:98:17:50:54:9D:6D:3D:77:4F:69:97:BF:FF
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial: 0B38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
Manifest number: 0B2F
Signing time: Sat 18 Apr 2026 19:09:54 +0000
Manifest this update: Sat 18 Apr 2026 19:09:54 +0000
Manifest next update: Sat 25 Apr 2026 19:09:54 +0000
Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: /wYNnh20HXsO9wLEk3MruxtYMRQTJKHKsXdYXBuxU/I=)
2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: ZWPcFrTL/W8/hSHPoCLkwWIX68mMSRrbQ6m2PomlMlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Validity
Not Before: Apr 18 19:09:54 2026 GMT
Not After : Apr 25 19:09:54 2026 GMT
Subject: CN=69e3d702-7c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:14:3a:05:45:3f:a0:3b:f8:d5:3d:c0:14:
b7:88:fd:7b:46:27:87:6f:ca:8a:52:be:0f:d1:f0:
d3:8b:48:36:c0:76:ce:68:59:36:43:7b:b6:d1:83:
b9:5f:1e:38:f1:13:75:9c:9c:6e:38:fc:54:2d:54:
1e:af:de:7d:d4:71:9e:8c:ec:45:cc:89:d1:ea:7a:
32:48:b9:d2:51:e9:9b:b1:c6:30:f6:07:9a:63:12:
80:5d:9c:fe:48:b8:98:50:ce:b4:16:ab:0b:0d:c2:
f9:e6:a5:1e:ea:0b:a9:b2:54:b2:cb:b2:e8:5a:61:
e8:d6:e9:dc:03:39:38:69:3c:85:33:6e:ce:a5:00:
86:16:1f:73:be:7f:2d:13:a9:db:1c:78:66:e5:be:
b2:4a:cc:24:5d:fe:9f:f9:37:92:b8:af:1b:05:76:
42:03:40:e5:3d:b3:53:92:2a:56:3a:7f:f1:ee:f5:
56:d3:33:c7:5b:fe:83:1d:53:e1:87:f4:35:45:88:
cd:33:c9:e5:5d:a7:12:12:9e:65:18:c5:eb:1e:12:
45:9a:35:b1:ed:5e:4c:c4:cb:ca:d6:ab:d6:ae:f2:
ce:f9:5c:62:b9:7d:3f:25:c0:c3:da:3c:5f:f0:6e:
4c:21:fe:b0:0f:d7:b4:01:64:3d:91:d9:d6:cf:61:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B6:DC:1E:1E:C7:54:98:17:50:54:9D:6D:3D:77:4F:69:97:BF:FF
X509v3 Authority Key Identifier:
keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:09:61:f8:07:09:68:db:66:51:27:97:ca:c8:d7:65:3c:2e:
e1:3f:b3:cb:48:90:dc:99:c4:cb:a5:49:97:a1:e9:78:d2:4e:
6c:e8:8f:a0:b9:19:36:57:6f:60:de:e7:15:d0:2c:9d:09:06:
64:35:24:4b:d4:d1:a1:dc:32:f7:7b:e7:81:32:7d:02:65:bf:
39:3d:98:c4:b6:55:09:a4:35:eb:34:42:fd:d4:25:d0:47:83:
db:ab:55:9e:27:b8:ff:86:7f:e0:d7:8c:98:04:ec:7c:b4:c9:
ac:6e:ad:8d:83:15:57:a2:09:a2:4d:95:55:2f:7d:89:b0:0c:
5d:c3:78:1a:31:e5:4c:8e:19:bd:cd:69:83:f9:8c:d6:c5:5b:
ad:e6:b1:66:17:4c:3a:a3:e9:de:cf:af:a3:d8:50:17:fc:05:
6a:b3:66:ba:d6:8e:3b:71:97:f4:26:b8:d3:e9:cb:ca:58:9d:
a1:06:55:2e:df:80:42:a2:22:f5:5b:ad:0e:c9:10:ca:59:3a:
a5:3d:4f:52:c5:d2:70:3a:51:0b:5a:70:31:52:d0:a9:bf:86:
2a:c3:47:04:db:46:63:d0:00:f4:7b:59:82:e9:50:95:e3:f0:
f7:e0:28:dc:8e:01:3a:5b:43:2f:52:44:63:cf:59:bb:d2:39:
0f:61:5a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:32 2026 by rpki-client