
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
File: 7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json)
Hash identifier: OyYc2DV2JlO8HYgM9KuXtI7nELLjOOFl/oWvrqtCfBc=
Subject key identifier: D5:4A:13:02:3C:29:59:CF:80:99:BC:80:85:6B:95:B6:75:50:4C:32
Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
Certificate issuer: /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
Manifest number: 64
Signing time: Sun 01 Mar 2026 09:20:20 +0000
Manifest this update: Sun 01 Mar 2026 09:20:19 +0000
Manifest next update: Sun 08 Mar 2026 09:20:19 +0000
Files and hashes: 1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: YBPHksOa5thWLASe0H0C0vNKjs2fxPphqJIn/Nl5Q08=)
2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: au2fE5QZV4wi2bNW1k3MSZSx8H26Znmq3AG3Io7itYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Validity
Not Before: Mar 1 09:20:19 2026 GMT
Not After : Mar 8 09:20:19 2026 GMT
Subject: CN=69a404d4-8c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:bd:06:d4:42:be:c7:a3:95:5f:b4:fa:c3:
7b:69:6a:7b:5d:48:33:af:81:b0:74:e8:09:ce:ae:
22:84:ac:28:5b:b3:d8:25:c7:a3:ae:29:4e:6e:22:
04:87:17:96:3f:ac:ee:3b:64:f1:85:52:91:59:16:
d3:d0:95:07:00:d8:b5:b7:82:50:b0:4e:40:0d:18:
26:d5:46:61:83:e5:88:bb:b2:d1:c8:ac:c6:9d:12:
49:86:39:6f:1f:e2:e9:fb:c4:33:85:7c:73:55:0f:
7f:b1:62:49:31:1a:a2:c5:02:86:10:31:7a:60:c9:
f2:ef:c6:45:a3:bf:5b:98:78:28:be:96:1f:74:12:
9d:cc:4f:87:57:cc:db:83:a1:6d:c3:35:71:10:69:
73:e3:56:b6:0a:e3:69:cc:e0:46:f1:44:26:c3:d1:
8a:6b:8a:33:85:44:24:9f:d6:52:f0:af:1c:de:1e:
c0:27:6b:d1:d1:79:7e:ff:d7:76:45:db:bf:a3:c2:
dc:8c:1a:1e:41:c2:ff:9f:8f:ef:4b:86:6e:32:69:
20:07:91:e6:a0:5a:23:6a:c1:6e:09:cb:bc:3d:9c:
d8:59:46:3c:f8:5c:47:4c:40:2f:86:e0:46:fe:a9:
50:2a:a1:69:dd:27:4c:5f:e1:5c:d5:14:e8:f5:b3:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:13:02:3C:29:59:CF:80:99:BC:80:85:6B:95:B6:75:50:4C:32
X509v3 Authority Key Identifier:
keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:39:19:fa:3c:e5:e8:5b:fc:48:36:14:00:72:da:14:dd:6b:
98:1c:c7:2c:c5:a9:87:e5:d8:e7:95:51:0f:25:76:5e:ec:b9:
82:80:13:8f:94:d9:25:a1:93:30:5a:54:4e:67:b3:f3:2b:67:
f6:e3:a2:db:ba:f0:d6:3e:1d:32:36:95:89:20:c2:78:be:03:
c1:af:73:0d:bd:48:59:38:4f:35:6a:8e:da:b4:fa:4a:b1:0e:
a7:cc:6e:9d:bb:cc:db:4d:39:cc:dd:21:cc:c5:75:fd:51:22:
42:9d:1f:55:1d:04:70:ef:4f:74:98:fd:00:17:ae:cf:bb:ce:
59:e5:2b:e0:62:25:78:2d:b5:d0:8e:2d:2a:b6:a2:96:e6:0d:
13:c4:bd:ff:b9:30:35:f3:9e:89:74:55:f1:c4:1d:9c:82:2e:
fc:1c:3b:52:b6:77:d5:f4:55:83:7c:a0:44:52:8c:2d:64:8b:
75:8a:19:48:92:de:21:71:37:aa:ac:79:4d:56:03:7b:59:5a:
97:5e:b9:49:03:80:05:68:a1:7d:05:90:ca:3c:67:52:9c:4f:
4f:1a:91:21:1e:8a:a2:82:8c:73:33:71:d5:a9:00:72:29:9b:
25:74:58:fe:e1:e5:cc:b5:09:ef:6a:1b:db:81:c1:66:15:27:
51:30:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:26 2026 by rpki-client