
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
File: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json)
Hash identifier: Ihl/9LVM+DiP7y2iUs+D7vhZsFmHKnpA8yan196ry+4=
Subject key identifier: DF:B6:18:E1:B4:A3:6F:A8:3D:33:03:08:00:64:04:9B:4B:98:23:65
Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
Certificate issuer: /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
Manifest number: B6
Signing time: Wed 15 Apr 2026 06:41:20 +0000
Manifest this update: Wed 15 Apr 2026 06:41:20 +0000
Manifest next update: Wed 22 Apr 2026 06:41:20 +0000
Files and hashes: 1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: Y5/fwDhz193/1csItIJ32bwxb/bGHbLu3Jk+3zstGoM=)
2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: wZY9Z53hRF1cqshdzTDBoy+lSHOx94QEX/gy6wO+8wM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C
Validity
Not Before: Apr 15 06:41:20 2026 GMT
Not After : Apr 22 06:41:20 2026 GMT
Subject: CN=69df3310-16c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:3e:74:08:3c:ad:be:5b:33:a8:61:06:85:
da:f8:d5:e1:d9:b4:e8:14:0a:29:45:8a:cf:1a:c4:
23:a4:1c:2b:6f:6c:d0:12:53:5d:7a:e5:62:15:ae:
65:1a:51:46:5b:d6:c6:d5:b1:9c:f0:b5:3b:f7:55:
7b:57:a0:d6:0f:d9:87:b7:9b:c8:e1:56:81:ef:e5:
3f:43:9f:7b:10:47:e4:56:58:de:a2:45:7b:85:94:
c8:9f:22:c4:89:32:fb:b0:47:3a:8b:5a:d0:eb:ba:
fe:3e:b4:96:bf:d6:ad:92:d6:eb:b5:9c:86:27:9c:
50:7e:0c:1f:ff:67:1a:b1:0b:e4:97:02:0d:8e:d8:
e9:44:d6:e0:6b:d4:4b:ea:4e:3e:7d:19:e2:af:cf:
f2:f8:d6:44:03:13:3f:03:40:0e:e1:7c:40:47:6b:
4e:58:13:04:2e:1b:26:fe:a0:20:a6:91:9a:32:3f:
a5:60:38:b8:9c:d6:30:6d:9a:39:45:0a:06:4b:d0:
49:57:e6:27:d0:8e:27:36:ad:54:e9:8b:de:b7:92:
b3:48:b7:04:2e:d5:1b:f0:47:7d:e4:c5:c6:2c:d3:
78:97:26:a6:ad:69:f8:69:92:44:11:19:ec:f3:6b:
12:61:fd:4e:16:8a:bd:87:5a:70:5a:db:55:c5:31:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B6:18:E1:B4:A3:6F:A8:3D:33:03:08:00:64:04:9B:4B:98:23:65
X509v3 Authority Key Identifier:
keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:97:c6:06:09:18:c2:a7:97:1a:9a:68:53:f1:ac:51:a2:2c:
da:46:bc:2f:36:cc:65:7a:f4:13:31:b6:7f:31:75:a6:bd:d6:
f1:1f:b6:f8:89:30:97:ca:82:f1:c4:8c:61:50:97:8d:bd:c0:
10:89:92:dc:49:0e:b7:6a:28:d7:71:f1:94:03:0a:95:ab:e6:
0f:6a:11:cc:70:0b:9d:36:71:d2:f5:82:67:5f:76:ef:73:b7:
ea:59:6b:1c:3a:c8:84:e7:ad:d8:43:e4:e9:1c:dd:9a:5d:4d:
20:d6:c0:da:fc:81:8a:35:e8:1b:29:fd:c8:0e:4b:d7:8b:ad:
7e:81:e7:ba:cf:26:f6:2d:8c:a9:74:86:ee:d9:22:77:d1:78:
77:17:8f:74:66:27:96:9e:2b:42:35:78:dd:12:65:f1:d0:24:
75:ea:cc:0f:77:f2:95:6d:f2:9b:da:5f:36:da:90:55:82:fe:
9d:3c:84:61:bc:fb:80:ee:38:93:88:ff:f6:67:d3:10:ad:01:
fb:e6:98:f9:63:70:ce:68:a8:82:3c:1c:56:6c:ee:be:bd:b1:
bc:91:a4:d4:52:ad:af:23:4f:b2:46:a6:ba:8c:af:ea:71:9a:
67:15:5a:b1:05:03:f9:03:5d:9f:2d:17:a5:b1:22:b1:b6:ae:
d8:6e:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:48 2026 by rpki-client