
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File: R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier: ct3j291XhH71US2BcjqEoCDiVnquzhmv0PO5KWwNqlA=
Subject key identifier: 0B:CA:B5:9F:CF:BA:FC:9E:CD:77:E9:B0:26:20:73:41:2D:0F:F9:04
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer: /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number: 51
Signing time: Sun 01 Mar 2026 09:38:18 +0000
Manifest this update: Sun 01 Mar 2026 09:38:17 +0000
Manifest next update: Sun 08 Mar 2026 09:38:17 +0000
Files and hashes: 1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: ylhPeQgr83kPweFEyHrIDvFZHF2M5lrAAXb9jDHhrUs=)
2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: 1KJtvHLYngoP+8r1UhG8albB+7arFBcFljE2p+6yMsE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Validity
Not Before: Mar 1 09:38:17 2026 GMT
Not After : Mar 8 09:38:17 2026 GMT
Subject: CN=69a40909-7448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:27:cd:4c:d7:ca:f6:1b:fd:d3:09:97:fd:
ac:06:53:42:c4:98:6e:de:53:89:d1:66:35:0a:6c:
dc:7b:47:42:30:15:f2:35:d6:51:a8:40:e1:66:dd:
8e:70:db:8e:22:96:c0:58:f2:f9:f2:61:51:0a:62:
13:e8:16:e8:7f:b3:b2:4c:15:78:3f:3d:9d:dd:2b:
63:72:3c:f5:6a:a3:8b:3b:53:73:a7:a2:cb:c4:33:
97:9f:47:c3:c2:a1:d7:7a:31:c9:23:b1:f7:59:19:
38:db:50:49:cc:31:3c:44:1b:e7:2c:7a:80:ed:e7:
a0:d3:ed:1f:06:d1:09:17:43:c7:31:4b:ae:b6:f1:
32:f5:42:7f:9e:e4:6d:85:91:25:a2:2b:bf:e5:a2:
3a:4d:21:7d:b0:be:11:a3:0a:c3:2d:8c:e6:15:f9:
7d:84:89:66:c8:2f:b2:21:06:51:a4:ab:f9:09:21:
f4:58:d2:7d:30:55:74:b0:55:ef:e3:36:eb:21:eb:
af:80:4d:3b:39:6f:23:0c:ec:51:a7:e5:27:f4:6a:
f5:60:0d:83:33:00:95:a3:00:b5:d9:1c:be:68:20:
1e:74:22:e0:d9:3b:79:63:19:f6:41:c4:f1:2c:51:
f8:58:55:ea:ef:4b:69:aa:1d:56:ff:e5:86:a9:68:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CA:B5:9F:CF:BA:FC:9E:CD:77:E9:B0:26:20:73:41:2D:0F:F9:04
X509v3 Authority Key Identifier:
keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:f1:d9:8e:32:04:db:ed:e1:8d:73:f1:a4:34:f1:62:80:63:
35:9e:55:7b:7e:d8:08:fc:6f:2b:ab:b7:8f:8d:ac:f2:ed:a6:
fb:0d:7e:10:02:59:a7:55:38:fc:c3:7c:e9:90:c7:66:50:48:
c2:20:37:32:d3:b3:bb:80:a6:31:31:23:98:71:50:c1:b9:74:
78:d0:57:fd:56:fa:aa:dd:85:a3:ce:6c:3e:bd:40:f1:1c:a8:
9a:74:66:85:76:e6:d8:5c:80:98:5c:32:ac:e1:f1:3c:cc:f5:
e4:7f:89:ef:1c:54:3e:bd:18:95:41:10:85:1a:f6:ae:de:6f:
c7:fe:0f:98:74:2c:53:0f:47:6b:39:1e:87:37:28:1b:c3:2b:
24:db:19:3f:39:85:99:75:a0:ed:bd:f8:d7:1c:63:45:c6:ca:
02:46:f5:f0:78:c5:75:17:28:2b:52:16:81:a7:2b:d8:84:ac:
12:b4:bf:50:5d:f8:b2:0d:6b:23:de:6e:93:1c:6f:70:21:ce:
c8:b0:d8:73:47:df:89:d0:3c:ed:00:2f:5d:4c:e9:31:7f:e5:
29:f7:3d:86:4c:8a:3d:00:6c:59:25:fe:85:4c:bf:7a:e3:e1:
fa:65:df:e8:22:97:49:a3:59:35:10:0f:ac:2e:3d:3d:6f:b9:
16:d7:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:10 2026 by rpki-client