
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json)
Hash identifier: Ps2XlAQww3ASWV8Kezry2toXOrzRbs1ZtUEVyZdLo9k=
Subject key identifier: 4A:F8:CE:B6:18:2E:48:75:D5:90:C3:98:A1:DB:5C:4B:F4:7C:1A:A6
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial: 036A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
Manifest number: 0346
Signing time: Fri 17 Apr 2026 00:58:44 +0000
Manifest this update: Fri 17 Apr 2026 00:58:43 +0000
Manifest next update: Fri 24 Apr 2026 00:58:43 +0000
Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: DK/ND/WDINgq5dWlzQGv7Mzf/iiXHsq2pHE8IVc7Myc=)
2: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: qmSYFXBCxcqxkM5XH4uaUEDVYEJ9yUrEsaElHySAxKw=)
3: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: PP03+ns0fvbCbNTOcKnxUs6dGDBO7IGi9AfJ5ZcdUYQ=)
4: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: QKkyT4YbWo+H3D3PvJrtIZvYmn8vhyqDknx0lWhaPew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874 (0x36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Validity
Not Before: Apr 17 00:58:43 2026 GMT
Not After : Apr 24 00:58:43 2026 GMT
Subject: CN=69e185c3-a3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:1b:17:e8:1d:d0:27:43:4d:aa:82:20:de:
d3:9c:46:63:a5:b9:3f:d9:48:e5:d1:bf:c6:98:c1:
55:05:bb:00:01:7c:28:7d:be:09:c0:1e:dc:e5:f0:
25:69:0d:c0:db:13:be:06:39:8b:13:6b:6a:10:d9:
ed:0f:04:c8:da:c8:7b:ad:86:ec:e7:d3:59:4c:f6:
6b:27:0a:bc:92:82:7b:06:4c:ad:3c:8f:27:9a:c7:
37:05:f1:6a:d0:36:04:8d:96:9a:53:d9:59:b5:e6:
4c:5d:8c:e7:19:97:79:31:21:70:4a:8a:b4:64:27:
5e:51:0f:db:ef:bd:08:cf:25:14:6b:52:b4:20:d8:
6d:14:6e:7b:ef:a0:e2:d5:31:75:f8:bf:5c:27:09:
9c:de:cf:8e:17:29:5f:0d:e3:41:05:99:56:7b:6b:
e6:08:00:50:5a:09:dd:3b:b5:53:4c:bd:61:0d:b7:
9c:57:f4:7b:97:75:49:9d:7c:79:ff:ef:40:e0:e7:
b8:c1:8c:d5:1a:cb:e6:e9:c1:49:cf:48:cc:f7:68:
65:14:98:eb:f8:b4:11:4d:6e:1b:b7:45:2a:7f:23:
68:34:46:81:3c:2f:88:6d:47:38:bc:4c:4e:99:6e:
2e:f8:98:26:82:45:67:7b:1c:17:92:12:bf:a3:fb:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:CE:B6:18:2E:48:75:D5:90:C3:98:A1:DB:5C:4B:F4:7C:1A:A6
X509v3 Authority Key Identifier:
keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:50:3c:e9:3b:c5:12:fe:73:9d:7c:69:22:68:1c:77:14:4d:
88:f3:17:0d:7e:7c:2d:85:44:15:b4:60:b2:9a:9d:86:5a:dc:
03:f4:6f:92:a9:21:8f:58:b7:3f:47:cf:9a:d0:2a:57:40:d4:
43:ef:1e:cc:16:93:60:99:11:e1:60:cb:5d:ec:2b:b8:8b:a5:
2f:93:48:6a:75:8d:25:c0:ef:1d:c2:de:4c:03:b6:ea:39:cc:
92:e6:60:f9:58:b4:b0:44:c9:7d:86:0c:4c:11:cd:66:de:68:
41:9c:4a:07:66:34:3f:df:05:5f:92:f5:c6:af:92:76:cd:d1:
e6:a9:88:78:82:ba:6a:53:04:b0:0f:43:1b:c2:7b:2e:76:1b:
b5:5f:8d:4b:94:a8:f0:ba:17:45:a1:68:ed:8c:f5:6f:56:7a:
a3:9a:fd:d9:f9:1c:cf:46:3b:1a:b7:c3:de:d6:2d:db:03:5a:
f2:6d:d1:8d:83:03:68:25:e1:65:76:0b:84:de:37:5b:be:c3:
99:2f:20:0f:27:98:55:4b:4e:1e:d4:45:16:c5:e0:89:9f:7a:
24:36:2d:91:f1:69:ec:eb:14:36:4e:91:08:46:c8:a8:37:56:
e2:05:9b:fb:fd:23:61:b8:30:06:ca:3b:1a:6e:d2:b2:5c:a7:
21:0c:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:36 2026 by rpki-client