
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json)
Hash identifier: aAPfE6TlkJXiQmSFGdmOehNjwjkQdNv8Z5DCB6M4bX4=
Subject key identifier: 09:B2:FE:71:BA:9E:32:7A:D9:3D:FA:D2:17:F7:EB:BE:12:2C:75:AC
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial: 0B1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
Manifest number: 0B16
Signing time: Mon 02 Mar 2026 00:19:54 +0000
Manifest this update: Mon 02 Mar 2026 00:19:53 +0000
Manifest next update: Mon 09 Mar 2026 00:19:53 +0000
Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: Qq5f/NCskpE0YL+xlbZ2HzA5/KAlYN13W0xknxUbMi4=)
2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: ZWPcFrTL/W8/hSHPoCLkwWIX68mMSRrbQ6m2PomlMlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2847 (0xb1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Validity
Not Before: Mar 2 00:19:53 2026 GMT
Not After : Mar 9 00:19:53 2026 GMT
Subject: CN=69a4d7aa-27f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:3a:c4:d0:73:5b:b7:f1:02:9b:73:51:7c:
b3:04:9b:73:17:cd:18:a0:c7:96:70:5f:c4:ef:6c:
25:99:3b:84:13:0c:00:9a:09:49:a3:df:76:52:bc:
1d:9c:7b:b9:05:92:60:45:13:8f:71:96:a7:ef:f6:
c5:9f:c1:a0:db:94:1a:39:93:f5:d6:81:1c:f2:fb:
0b:91:42:54:d3:c7:08:32:64:ac:36:80:11:28:ad:
77:80:a1:0d:19:cf:83:50:f5:c9:49:51:54:b1:b1:
d9:ec:71:09:ff:78:d8:4f:f0:ba:6f:30:fc:03:27:
16:a6:29:6f:fe:cc:25:05:f4:2d:4f:7c:43:80:48:
4b:67:f7:f3:c3:30:82:3e:c6:44:e6:f1:9f:3c:66:
15:ac:01:4a:db:7f:d4:77:72:a7:b0:4e:91:e9:1d:
a6:df:c8:a1:be:60:3c:13:1f:eb:e1:45:71:de:a3:
cf:86:e3:cc:54:a6:4d:73:99:27:49:25:0c:2a:ea:
67:a0:7c:cc:5c:68:47:ef:83:1a:6a:e8:ef:0a:2a:
d0:7d:29:71:ed:c9:d5:6f:df:da:07:7a:43:20:16:
a9:b2:bb:59:a2:d0:d2:4b:63:4d:86:37:18:3a:ad:
ee:50:d3:17:c3:a9:82:b1:63:11:ea:bd:2e:bb:22:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:FE:71:BA:9E:32:7A:D9:3D:FA:D2:17:F7:EB:BE:12:2C:75:AC
X509v3 Authority Key Identifier:
keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:07:64:0a:e4:7c:ff:57:4e:7e:38:0a:75:dd:fa:ae:81:50:
3f:c6:60:6f:19:54:b6:ec:44:fc:e1:74:33:d1:f7:95:da:aa:
fc:81:f9:77:55:21:cd:59:96:4d:9d:05:f5:aa:e1:44:64:5a:
02:b2:d2:2d:54:99:0f:33:63:32:66:9b:cb:ec:20:34:ea:b7:
48:39:a0:15:1e:17:d3:64:dc:e9:c9:ca:40:49:b0:9d:00:d4:
81:e0:91:fb:e9:55:09:98:af:4d:04:6a:43:44:b6:5a:80:21:
8d:30:38:da:07:b8:5c:15:e2:79:22:d6:d6:4f:52:ef:83:96:
1a:88:e0:68:fc:1d:1d:b7:5a:94:85:93:80:01:71:d6:60:d0:
5c:7c:16:11:63:89:bc:be:f6:15:d4:9c:f0:fc:20:b9:81:84:
aa:43:a6:62:43:a0:0f:65:b7:cc:b1:1d:3b:37:47:88:c6:89:
77:54:f5:d8:88:a9:26:fc:fe:58:25:4c:b4:14:a3:ef:03:81:
ff:91:c7:26:c6:12:de:ee:be:70:80:d9:c1:ff:95:19:0b:a8:
0a:4b:f8:02:bb:d5:28:88:a3:ab:ab:62:ed:92:0d:4e:d7:ce:
a2:a2:08:3b:4d:ed:00:34:fd:4f:cb:17:99:23:34:ad:bf:3a:
a7:29:04:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:31 2026 by rpki-client