
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
File: 7yfjyfFbWDsVypzMPJBdIpzi8NA.mft (raw, json)
Hash identifier: A+SQD25rNGz3GoVgVAGTTxVj9qtMgsh15OCLLIB492U=
Subject key identifier: 58:AB:7E:AE:BD:1D:92:5C:5F:24:69:22:E0:E4:52:D9:E7:A2:32:F9
Authority key identifier: EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0
Certificate issuer: /CN=A91C1814/serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0
Certificate serial: 0686
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
Manifest number: 067E
Signing time: Thu 16 Apr 2026 22:26:40 +0000
Manifest this update: Thu 16 Apr 2026 22:26:40 +0000
Manifest next update: Thu 23 Apr 2026 22:26:40 +0000
Files and hashes: 1: 7yfjyfFbWDsVypzMPJBdIpzi8NA.crl (hash: 1GUrQ7jFnd4yV9UZAjNgvOy3tHqJe7J9hsunzrYkD4k=)
2: 38378A3EBA3411EBB94A527CC4F9AE02.roa (hash: Dbe7f6X4+CPJEylNpNLDJwF1y5Hhd5iHSBe5Hc4QBYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl
rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1814, serialNumber=EF27E3C9F15B583B15CA9CCC3C905D229CE2F0D0
Validity
Not Before: Apr 16 22:26:40 2026 GMT
Not After : Apr 23 22:26:40 2026 GMT
Subject: CN=69e16220-b6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:08:76:9b:7a:61:7d:eb:72:c4:42:20:6e:
3e:6a:c6:cb:c2:c3:5c:58:e1:ce:e0:98:ec:dd:3b:
e0:3e:e2:73:f1:13:d9:99:9c:55:8b:d7:fb:8f:ce:
b2:5d:c3:4a:27:da:03:2e:1c:7e:64:ce:7a:9e:26:
4d:2c:5b:88:1a:75:8c:0b:be:14:75:76:3b:98:5e:
26:e6:bb:d4:4f:87:ff:62:2a:db:6a:94:ad:66:3e:
fc:50:0b:16:72:d0:b5:9e:4e:0b:7f:ef:e1:b0:5d:
f9:3b:84:7d:1e:17:d4:22:b7:a7:4f:f5:c4:38:24:
fa:85:99:c0:bd:eb:e3:ea:1f:45:b8:14:f1:49:f6:
12:4b:38:1c:c7:39:fd:de:4d:da:d0:eb:5c:93:95:
96:e3:84:c6:88:44:37:9d:d4:41:26:56:ef:1a:66:
7f:cf:ac:0a:24:4d:bb:90:0b:da:8a:4b:69:7c:d1:
a8:c8:fe:5d:e3:ee:b6:de:4a:64:be:02:8c:6c:f9:
60:c9:2c:e9:51:d0:54:d0:4a:80:44:0a:b0:dd:4e:
98:34:9f:c3:5b:ed:6e:8a:13:bd:2b:b4:cc:e4:47:
df:5a:2d:6c:6b:8e:8e:fc:d5:8a:b3:eb:46:fb:6b:
4b:cd:1e:a7:18:55:88:7f:f0:69:40:fa:07:1a:30:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:7E:AE:BD:1D:92:5C:5F:24:69:22:E0:E4:52:D9:E7:A2:32:F9
X509v3 Authority Key Identifier:
keyid:EF:27:E3:C9:F1:5B:58:3B:15:CA:9C:CC:3C:90:5D:22:9C:E2:F0:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7yfjyfFbWDsVypzMPJBdIpzi8NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1814/F3C8539EBA3111EB9C69C178C4F9AE02/7yfjyfFbWDsVypzMPJBdIpzi8NA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a8:ec:ec:30:4d:3f:af:c8:11:b6:f8:10:4c:49:89:bb:1f:
1a:c6:ec:c9:e7:c4:37:60:ed:b1:17:94:a1:8a:d5:ad:35:0c:
6a:9d:c3:57:e7:a1:9d:25:d3:fc:c7:c0:ff:cc:37:ff:4d:19:
f3:be:8e:8d:47:9b:61:8f:01:a7:03:87:62:94:cd:25:c7:e5:
f9:6e:c7:fb:cd:ad:a4:22:d0:2f:4c:6e:84:e7:24:79:78:1a:
03:16:c1:29:81:72:02:71:5a:bf:90:53:e8:cd:e1:e5:73:91:
2b:ab:9e:ef:86:c8:25:f2:fb:c0:49:78:98:bf:ae:dc:f3:e4:
d1:67:59:fd:42:b4:b8:b1:85:06:b9:57:71:59:29:01:d0:88:
5a:55:aa:2b:9c:9c:ad:44:21:2e:ce:e6:f7:3b:24:7e:fd:76:
09:b4:16:b6:60:60:1f:e4:16:85:59:9a:37:c3:2e:a2:70:52:
34:75:6a:c3:45:48:3d:f4:4d:58:aa:2a:28:f2:04:31:c7:b6:
ba:d9:ec:f4:26:ee:4d:50:8c:9d:3a:5c:bd:ee:ab:b0:74:e2:
8a:1d:3d:4c:bb:8c:2f:1d:b6:5a:76:25:ba:43:51:6e:09:44:
c4:ff:ad:2d:b0:60:54:4d:db:7d:42:7f:eb:c9:64:ef:74:38:
a4:82:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:53 2026 by rpki-client