
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier: QvxzaTy7VwTqbIp+QdDwwQEsu8DNbd01jjEH5FNnzGY=
Subject key identifier: FD:48:51:29:BA:AB:17:03:C6:25:B0:22:77:4C:FE:60:E5:80:FE:78
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial: 0BC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number: 0BB7
Signing time: Thu 16 Apr 2026 18:58:30 +0000
Manifest this update: Thu 16 Apr 2026 18:58:30 +0000
Manifest next update: Thu 23 Apr 2026 18:58:30 +0000
Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: OMuaXQ+lf+zhNOYX8wyx3qi9njK91iqV0IMe3rqyv1s=)
2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3017 (0xbc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Validity
Not Before: Apr 16 18:58:30 2026 GMT
Not After : Apr 23 18:58:30 2026 GMT
Subject: CN=69e13156-d170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:cc:0d:eb:a6:d2:40:28:dd:09:23:7e:66:
a3:db:d8:31:09:5f:aa:b0:67:cd:05:77:aa:e9:f5:
78:5f:9d:77:7c:39:b5:6c:4c:45:32:3d:f6:67:15:
be:be:41:90:97:d1:b6:af:1a:e8:78:f3:eb:eb:22:
3b:52:91:83:d7:12:ee:cf:e2:b0:95:06:17:07:76:
06:14:bd:65:97:23:01:6f:ab:d0:51:e5:60:ca:28:
56:53:19:ae:5a:58:db:66:55:74:15:b2:40:9a:72:
49:78:ab:c3:33:54:a8:46:66:02:6b:9c:47:d4:c8:
2d:f3:ce:53:61:cc:05:06:62:13:6b:b7:e7:b4:6c:
3a:f4:fa:e0:f9:0e:a6:4a:29:c4:98:0b:eb:97:fe:
83:f8:31:30:21:fe:2a:2b:01:82:59:cb:96:85:25:
74:1e:c1:82:2f:ae:e1:2a:21:2c:f6:91:7b:80:ad:
57:39:f0:ec:f9:c4:da:39:8e:05:17:72:6f:8b:ee:
09:25:38:c2:eb:8e:91:55:22:90:4c:30:9b:94:8d:
89:7f:72:fc:7f:c6:7d:3b:aa:ae:d3:b0:87:c4:f1:
65:83:b7:ea:5a:05:61:72:8a:13:93:40:6d:fd:98:
71:37:13:e5:89:b7:b3:8d:08:74:79:4f:c8:8e:60:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:48:51:29:BA:AB:17:03:C6:25:B0:22:77:4C:FE:60:E5:80:FE:78
X509v3 Authority Key Identifier:
keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ed:8a:c9:f7:73:02:5f:47:bc:3e:94:d0:84:f8:0c:c2:53:
8c:26:3d:d6:17:b0:00:e7:00:82:d6:29:41:41:59:c5:c9:8d:
1d:e0:25:84:7f:17:97:58:f0:6c:5f:52:b6:f8:e4:f9:b0:e7:
06:60:bb:3f:3f:cf:d8:c8:24:d0:bf:e6:f4:fb:38:b3:2f:c7:
1c:ac:39:cb:9b:2c:bf:f2:87:d9:68:58:cd:68:b9:bb:de:64:
f7:cd:38:e6:58:ad:53:79:72:2b:36:98:91:cc:3d:06:62:10:
bf:b0:6d:a8:a9:69:9f:fc:d3:05:eb:0c:87:e7:5e:60:ac:2f:
d5:e5:df:6d:79:26:83:c3:b7:ee:5a:d1:4a:16:37:b2:52:a2:
43:f0:1f:41:c9:d1:f5:9b:96:3e:c3:8d:1a:dd:84:e1:ce:48:
a9:32:2b:dc:75:90:2f:67:ef:28:44:b3:d7:0a:ae:dd:2d:d7:
29:ee:2b:7d:e5:bc:cb:20:5e:e6:ec:24:11:df:50:84:75:24:
f5:e0:c5:21:5d:b9:b8:9f:bf:6e:91:4c:cb:48:67:ce:4b:cc:
bf:22:3d:4d:71:61:19:c1:bb:ec:5a:93:20:47:33:73:82:1d:
70:8b:ec:2c:f2:cc:d3:40:ed:82:c3:db:99:7b:91:6f:a4:7c:
c9:e6:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:02 2026 by rpki-client