
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
File: 7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json)
Hash identifier: aSFpCS400DVENTm/fBEli0t13MOMy5XHvA8twKEbZW0=
Subject key identifier: F8:54:17:BC:D7:84:2D:C9:A0:3E:D2:3C:62:C2:B8:35:93:04:0C:73
Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
Certificate issuer: /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Certificate serial: 3512
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
Manifest number: 40DF
Signing time: Mon 02 Mar 2026 00:59:30 +0000
Manifest this update: Mon 02 Mar 2026 00:59:27 +0000
Manifest next update: Mon 09 Mar 2026 00:59:27 +0000
Files and hashes: 1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: pO0dEm/CnaK0DWNypaa0tFSNrTA41rdJUzAQmboOL1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13586 (0x3512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AAA, serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Validity
Not Before: Mar 2 00:59:27 2026 GMT
Not After : Mar 9 00:59:27 2026 GMT
Subject: CN=69a4e0f1-3765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:e7:a2:35:60:8b:8e:98:88:a5:80:85:46:
38:de:df:95:9a:89:a8:31:f9:2f:61:95:9b:62:6b:
cc:63:eb:a9:e2:68:79:fd:8b:99:54:7d:6f:73:ca:
0a:12:39:33:14:91:c8:d0:f9:37:7e:8e:4b:bc:2e:
45:ab:3d:c2:45:42:4e:a7:2a:9f:7a:82:22:c8:96:
45:85:78:b1:6f:36:03:cc:ea:84:f0:d0:a0:72:ac:
b0:13:a5:0b:44:9a:58:d7:00:5f:2a:80:da:89:24:
77:d6:19:37:a1:bd:7f:70:b4:fa:e0:8c:67:85:a2:
11:ff:cc:0a:57:60:96:c1:52:44:0c:16:b6:4f:f5:
4d:46:d4:97:c4:15:8d:2c:e9:f5:91:50:32:e7:a6:
9f:39:a1:ea:e8:12:93:52:0b:62:bd:9d:0b:44:bc:
0e:04:cb:48:f1:74:16:7c:42:28:37:75:ff:c6:4b:
61:47:d1:e9:79:d0:f2:3e:1e:e2:44:53:79:ce:16:
1c:ec:fa:57:09:a2:08:6f:fc:b3:53:24:28:5c:f8:
47:7f:3e:b0:97:b4:ad:9f:cd:41:04:67:91:ad:25:
21:7b:6f:3f:a9:6e:5d:ae:1a:78:b0:7c:d9:b8:28:
33:88:b2:14:01:7f:6a:6c:ad:7e:7b:78:03:cd:fc:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:54:17:BC:D7:84:2D:C9:A0:3E:D2:3C:62:C2:B8:35:93:04:0C:73
X509v3 Authority Key Identifier:
keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e9:95:8b:70:8c:05:e6:ec:72:81:7b:ab:b8:d0:22:d6:d8:
e0:bf:7c:cd:39:39:07:12:a4:c0:d8:9e:60:af:32:ee:ed:5e:
8c:e5:20:92:a9:4c:cd:27:40:e8:15:74:12:ea:39:ac:55:6f:
f7:7e:91:a0:ac:72:e2:03:25:28:a0:3a:24:b0:cc:36:41:b4:
24:7b:b3:72:e2:1c:03:fe:04:fa:5a:75:d5:96:38:17:96:b5:
50:6d:49:09:5a:76:3f:ff:fb:87:57:49:6c:f4:55:48:5c:1d:
0e:38:0f:06:bc:58:dc:bb:6b:66:ef:4f:c6:f4:d2:ed:15:18:
6f:d1:5f:a8:8c:ee:90:95:de:f1:d2:9b:71:53:1c:c5:ba:0c:
06:fd:0f:a6:14:c4:40:1f:d2:64:cd:18:28:5d:17:c9:20:b7:
d4:6a:58:e8:48:ff:c4:2b:b8:2f:2a:19:a1:88:57:d7:20:3e:
0b:c6:1b:7d:a0:3d:04:50:16:21:ed:df:6c:7e:c7:fd:f2:cd:
22:a8:b2:86:fb:f1:37:32:9d:22:62:db:94:95:f5:11:4e:c2:
b5:21:de:1c:dc:20:4b:8a:02:6f:57:c1:b9:fa:47:e1:a1:15:
44:f9:e4:48:54:4d:1e:94:fb:46:7e:6b:1c:d4:78:7b:b6:5b:
a9:4d:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:43 2026 by rpki-client