
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
File: fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json)
Hash identifier: AcYnYTAJDDBgkrHLPf0kxfIQB9ZQwmEu5myd7U8xV30=
Subject key identifier: 8E:93:BB:15:39:B4:DC:5D:7C:09:12:87:E2:04:71:6A:6D:27:65:F8
Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70
Certificate issuer: /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70
Certificate serial: 3512
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
Manifest number: 3512
Signing time: Sun 01 Mar 2026 23:38:07 +0000
Manifest this update: Sun 01 Mar 2026 23:38:04 +0000
Manifest next update: Sun 08 Mar 2026 23:38:04 +0000
Files and hashes: 1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: sO8HF6iEGxU9L5qMlfcSerBAHij0pCZh79d/Yq07fbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl
rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13586 (0x3512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8C6C, serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70
Validity
Not Before: Mar 1 23:38:04 2026 GMT
Not After : Mar 8 23:38:04 2026 GMT
Subject: CN=69a4cddf-a6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:f5:2d:59:6d:1e:33:fe:f4:41:44:25:69:
33:38:01:a3:a4:6d:19:c7:aa:ca:67:4c:3b:1c:f4:
08:53:69:f3:b4:08:75:a1:5c:ce:55:40:ff:78:21:
04:2c:c0:48:24:68:8c:da:cb:2a:d9:7d:d0:eb:4d:
5b:7f:9e:a1:5d:00:ac:31:04:f0:54:8e:6d:40:1d:
c8:3e:ee:05:8d:ef:46:6a:68:b9:f3:92:49:6a:f9:
7f:67:b4:d8:4f:da:55:7b:d2:b3:2d:77:87:6f:82:
ab:35:15:6f:4e:36:9f:56:99:06:00:39:94:37:0f:
a6:af:f1:c9:66:a3:c9:36:ec:4f:ca:3e:85:37:4c:
92:09:e1:f0:e6:b7:f2:23:fe:94:8a:a5:85:37:e9:
f5:a9:90:72:e2:f3:de:9a:36:37:6a:55:ad:50:7e:
88:e4:2a:cf:20:4d:02:0e:01:64:dd:cc:42:b1:39:
10:ad:7a:5d:48:d1:ab:b7:fd:1a:b9:94:82:37:43:
af:ed:c6:6d:17:97:60:f0:e2:ba:0d:72:77:a8:89:
26:1e:dc:0b:81:52:f3:82:e6:c4:4d:6a:e8:8c:f4:
89:65:91:4f:e4:dd:f6:06:42:ba:e4:b0:04:0f:41:
60:3c:d8:45:98:df:10:6e:5e:1d:33:16:f5:b8:8d:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:BB:15:39:B4:DC:5D:7C:09:12:87:E2:04:71:6A:6D:27:65:F8
X509v3 Authority Key Identifier:
keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4b:2b:6c:7d:51:79:55:67:24:ba:41:8e:ee:80:70:8c:ce:
60:56:68:ca:24:2d:37:10:db:97:57:2c:8a:14:0d:7f:d0:9a:
63:ae:de:c8:1c:db:d6:b2:9b:ab:02:32:82:6a:a6:2c:1b:45:
1d:14:c2:e0:22:cf:14:6d:62:f8:48:12:a7:4c:0d:d2:b1:3a:
b5:ff:80:81:15:d7:b0:a7:48:a4:18:ee:55:8c:ab:28:e4:09:
a7:b3:6c:6c:35:32:c8:fb:22:f3:29:3c:b0:1c:77:e1:60:fb:
a1:59:69:82:35:7f:4f:e1:97:ed:c1:b2:4b:01:a8:c6:d2:14:
8c:eb:32:4d:fb:3a:ba:5b:02:c5:a2:49:65:f0:4e:c6:04:89:
46:5a:5f:7b:87:dd:d0:75:69:5c:b9:94:23:39:c0:31:ce:ea:
15:c1:10:0d:0c:54:a7:d9:8e:10:1a:d8:f3:f3:ab:3a:fa:95:
75:ff:9c:60:39:89:88:4d:67:d2:49:84:17:59:9a:cc:ec:77:
24:a6:ec:71:3a:25:bd:ac:5e:5a:3c:86:e9:a9:ab:99:32:f5:
49:01:16:b1:aa:eb:ee:1c:ec:cd:18:c2:a3:e6:92:8b:ae:58:
24:8b:80:36:cf:46:62:bc:ae:3a:8a:3e:58:2a:56:d2:d7:04:
30:6e:30:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:17 2026 by rpki-client