
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json)
Hash identifier: HHnnQwMI1UqYWMPF7RrHcS8O1xpYq+oyOoU7+1EUKh8=
Subject key identifier: 30:9C:90:05:C5:38:85:F7:AA:B3:74:B5:77:99:9F:49:35:DA:F7:04
Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Certificate serial: 0BBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
Manifest number: 0BB5
Signing time: Sat 28 Feb 2026 19:10:58 +0000
Manifest this update: Sat 28 Feb 2026 19:10:58 +0000
Manifest next update: Sat 07 Mar 2026 19:10:58 +0000
Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: oxf4vTD97P6cZYIyDIIEgOUwdr9UFj2UcyOp4RV3kBg=)
2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yf7uD6ZoAkwSZ6smBK5+++p61GtYidM7gXgm7RNFP38=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3007 (0xbbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Validity
Not Before: Feb 28 19:10:58 2026 GMT
Not After : Mar 7 19:10:58 2026 GMT
Subject: CN=69a33dc2-b70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:c1:44:a1:5a:71:f5:90:a5:f0:f2:42:93:
75:ed:17:89:0e:76:0c:a4:49:1d:99:96:53:cb:10:
72:99:84:61:86:22:05:ef:3b:16:f5:11:c4:a8:11:
e3:c7:33:be:fc:dc:c3:5b:1c:25:28:3d:3c:e3:ee:
cc:cf:cf:40:20:2f:9b:27:7f:32:b0:01:7c:60:97:
69:64:73:74:14:d7:87:5c:82:fb:df:39:83:23:8b:
58:11:40:2e:a6:9f:c4:e7:79:4b:96:a1:62:c1:f6:
50:1d:4d:06:b9:7b:2b:de:6e:6e:a9:10:c3:6f:37:
ee:a1:99:5c:63:19:f6:f5:b1:eb:9f:23:37:49:e6:
49:97:7e:48:9c:7c:ea:63:98:b6:ed:be:71:3d:a9:
c1:cc:ae:9c:fd:9f:08:c6:59:77:32:3f:b8:e2:c5:
b1:e6:3c:ac:36:2a:7d:6c:16:99:62:b2:e0:74:0f:
c2:37:45:f4:f5:aa:ab:f6:26:b6:97:4e:a6:ab:e3:
81:99:91:e0:15:2e:cb:90:0f:b6:96:17:e1:72:d2:
ac:d6:9c:21:8d:79:1f:ec:03:be:d3:a1:06:cf:65:
7d:3e:56:d3:d6:9d:06:8a:b6:e1:fb:0f:f2:73:c3:
f7:12:43:d9:cf:c5:c4:d5:83:f9:06:b7:f1:b6:d7:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:90:05:C5:38:85:F7:AA:B3:74:B5:77:99:9F:49:35:DA:F7:04
X509v3 Authority Key Identifier:
keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0b:ec:34:d3:5f:cc:24:a2:4f:61:0b:3a:a4:b0:df:a7:7a:
e3:d0:74:7a:d5:a8:3f:12:f5:07:2d:1e:ef:b2:c1:a2:d6:f4:
ba:76:c4:88:53:3c:ba:1c:7b:c1:60:63:25:20:34:a2:4f:36:
02:c7:27:9b:25:2d:bb:53:2b:05:f7:12:b6:5f:96:62:88:23:
c6:61:56:0c:13:d5:e2:93:b8:05:6d:85:8f:47:9a:b7:c4:4b:
4a:f5:25:9f:30:50:de:1e:e9:34:8e:26:70:73:4d:03:78:d6:
28:a8:86:7d:67:c0:4d:ee:04:84:21:21:cf:b2:1b:62:1b:ed:
ba:56:b0:1e:4c:7f:85:5d:73:2f:9d:ff:55:f3:01:34:24:0e:
a7:c9:fe:48:ab:1e:06:94:e9:46:b1:f6:98:37:1c:6d:7d:e1:
65:40:0a:d9:25:d3:d9:cc:a0:b9:21:cc:e8:f0:90:b4:6a:27:
6b:a1:1a:d6:a9:3a:75:d8:b9:b3:a6:41:d7:2d:5e:f2:a0:00:
5c:89:b9:e0:aa:40:1c:41:db:a7:d7:3d:e6:d9:26:62:0a:a2:
3d:a4:91:89:e5:d1:10:3f:d3:ff:e5:45:8a:03:9d:68:75:94:
70:23:ff:86:d2:be:a5:39:67:ee:d7:ab:77:3d:21:f4:ce:e3:
3c:ae:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:04 2026 by rpki-client