
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json)
Hash identifier: EzJ9ndeUdDX6p3MFIiFTYHYqWH9dtTkQCwPkTDJKa0I=
Subject key identifier: 0F:B1:40:C0:F3:13:2F:3D:0E:EF:3D:5E:B6:13:94:B3:AB:33:B4:06
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial: 0B1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
Manifest number: 0B14
Signing time: Sat 28 Feb 2026 19:33:40 +0000
Manifest this update: Sat 28 Feb 2026 19:33:40 +0000
Manifest next update: Sat 07 Mar 2026 19:33:40 +0000
Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: y9hAuQL3dIdUWfLb3TDOR/LnLMMBaJ0rcfeRr1MLalg=)
2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: mhhZShl5Y7yfZL9fAMr71xIHefsahB4URe/Sx9ZtMPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2843 (0xb1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Validity
Not Before: Feb 28 19:33:40 2026 GMT
Not After : Mar 7 19:33:40 2026 GMT
Subject: CN=69a34314-8442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:83:cf:15:3d:9a:82:ef:2c:79:65:c3:06:
e5:b7:bc:17:d2:03:c1:01:90:f4:93:6f:b1:9e:a9:
7a:c3:86:d1:ea:7a:b4:74:0f:b1:59:9b:4b:cb:a6:
03:ef:0b:7a:2e:39:03:8b:4e:3d:aa:ca:4a:1d:90:
93:9c:b2:d6:18:3b:4b:1e:68:0b:a2:e6:90:7c:8c:
2b:2e:f2:89:9e:b9:7b:81:52:e4:0c:cc:2a:1e:b0:
5f:69:ba:f5:b9:f4:92:62:e3:6a:54:0c:1c:4c:54:
5d:dc:04:74:b5:93:9c:24:40:d6:75:d7:97:f9:d1:
78:a7:81:a9:32:c1:de:1d:51:53:75:13:83:8f:92:
35:26:80:ba:85:83:b0:b0:c8:b7:d2:05:4c:a5:0e:
c0:1d:28:5e:86:61:7d:ef:49:70:d8:80:64:87:5c:
74:5a:2a:03:d2:00:df:e7:0a:28:14:ad:cf:ab:05:
1c:d2:db:69:54:38:b0:22:2f:17:c4:96:db:2c:cd:
96:32:cd:08:ea:28:41:25:3d:ec:8d:c4:7f:66:7b:
c6:16:60:fb:b0:11:5c:99:b2:b7:0d:a6:15:3c:a5:
04:e3:2f:8b:c7:3a:87:a2:95:f9:16:de:5b:67:a4:
20:c3:71:6a:30:e0:2b:2a:80:4d:48:2c:44:86:1c:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B1:40:C0:F3:13:2F:3D:0E:EF:3D:5E:B6:13:94:B3:AB:33:B4:06
X509v3 Authority Key Identifier:
keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a8:08:0d:01:90:05:19:7d:c0:2c:68:6f:4b:f2:4f:a4:74:
74:3f:c7:c0:76:12:46:f2:37:d3:1e:69:d9:5e:a2:01:bf:b3:
5c:c3:a3:8f:eb:e7:86:f8:aa:fe:fe:b5:a3:73:fe:f6:45:2a:
66:b2:94:20:22:9a:c5:14:79:fb:74:58:c9:38:7a:f1:02:67:
84:47:7e:c2:e2:29:13:6c:6e:29:54:ae:f9:b3:17:9d:64:f4:
9a:03:2b:27:ff:a5:0f:24:9c:04:ea:8a:a7:28:70:af:6b:b8:
df:85:a3:2d:20:0c:b2:0c:2a:ba:9a:fe:da:aa:b6:e7:e2:d5:
38:90:7a:37:c1:56:8e:57:f2:a8:50:87:fc:6a:97:0a:33:98:
08:7d:76:90:8d:13:a3:7c:b5:24:99:b0:c7:fe:16:e9:99:fe:
4f:49:5d:ed:77:21:45:57:ef:40:a1:cf:03:8c:53:6c:53:9d:
ff:bc:3e:57:ee:d6:e4:d4:5c:d1:28:da:58:0b:86:c8:74:5e:
44:6a:c4:cf:ea:d4:3d:39:ce:c3:5f:7c:af:89:9a:a4:44:3d:
d7:75:35:b3:60:b3:28:ac:9f:1d:a2:88:a9:a4:b8:ad:89:1f:
e2:48:6e:8b:19:61:0a:84:7d:c4:aa:f8:fd:9d:6d:a6:32:24:
b8:63:e6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:03 2026 by rpki-client