
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json)
Hash identifier: C45wVpD1a/Qb6A9Ooj0Clzaos7PQqgd40/6KGfI1ZbY=
Subject key identifier: 1A:A4:F5:0C:B9:D5:79:96:C3:F2:DC:3B:05:0A:07:89:68:FF:05:A1
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial: 1530
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
Manifest number: 150C
Signing time: Thu 16 Apr 2026 16:46:49 +0000
Manifest this update: Thu 16 Apr 2026 16:46:48 +0000
Manifest next update: Thu 23 Apr 2026 16:46:48 +0000
Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: pEyC3+Gx1G0YhYavdtIPhcS6nh01lHDRe4eiO9rECgU=)
2: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: 9thasJHdgQQ3RXCs+BHPjiNfWZD4NYRuTQ+ayukgtLg=)
3: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: UOD9amObCmIqDiXfNM0JkH+AqrUmQZuay9hIXFnISTk=)
4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: iHRpBY8mTgfogKkV6RLUH1pT9Rubnqiw6gX0z2kYfjk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:46:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5424 (0x1530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Validity
Not Before: Apr 16 16:46:48 2026 GMT
Not After : Apr 23 16:46:48 2026 GMT
Subject: CN=69e11278-acda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:88:b8:ab:59:42:6c:0d:cf:98:23:2e:0b:
12:e3:0c:e4:0c:d9:8f:93:3d:88:6c:a8:e5:93:0c:
34:3a:b4:8c:5b:61:57:b1:5f:0d:49:13:2e:63:10:
af:00:a1:62:dc:62:cc:f8:a5:79:03:8e:34:2c:26:
2d:3f:6a:1d:c4:eb:bb:8e:7f:a2:ab:d6:23:44:8c:
8e:97:c5:f0:bf:69:bd:48:13:81:ec:ce:36:3b:e2:
01:15:ec:d2:b1:86:a2:4c:ba:a5:86:57:e3:b0:93:
5b:e4:f0:97:fc:2b:47:b5:94:cd:d5:e7:9b:fa:17:
d0:ec:59:27:4c:5d:ca:50:64:e5:bf:f2:9a:e2:80:
74:eb:66:81:b4:25:91:96:76:67:e7:83:16:65:ba:
73:e0:fe:af:6c:3e:3e:49:3c:97:d0:60:0f:1b:59:
7a:3e:17:cf:69:98:8b:3f:09:e8:fe:17:ba:aa:fc:
21:79:5c:cc:e6:9d:72:96:86:cc:97:e7:25:22:e5:
c1:88:c3:d9:c6:d9:24:b9:b5:9b:b1:3b:de:34:1e:
6a:79:40:f1:ab:42:20:dd:68:ae:45:67:8f:cc:f3:
50:dc:3f:c3:36:c8:3b:00:cc:83:22:94:c3:51:8a:
7c:22:7a:5b:90:97:ea:6d:b8:21:e4:e5:ad:45:ff:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A4:F5:0C:B9:D5:79:96:C3:F2:DC:3B:05:0A:07:89:68:FF:05:A1
X509v3 Authority Key Identifier:
keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4e:7a:49:d2:d8:d8:d7:fb:8d:72:d2:4e:8e:a5:39:c0:63:
ee:35:56:8c:51:cc:cd:6f:0e:24:f3:84:80:5e:6b:af:c5:50:
89:f1:50:17:19:19:63:68:20:39:d3:43:c8:56:c7:c0:ac:c9:
ce:d6:38:e1:d1:25:53:e5:da:04:10:a2:4b:f6:f6:55:1a:4c:
77:54:ed:a4:91:ab:3a:26:fc:15:81:08:a3:f2:51:3c:c0:ec:
c2:80:be:d1:47:19:0f:fa:b1:d0:3d:64:71:4b:00:61:17:d6:
ba:c4:7a:af:4b:4f:4a:82:c5:b0:ca:ed:1c:f5:95:70:e6:80:
9a:2b:54:14:f0:af:2a:bf:5a:af:79:fe:aa:b4:f3:f1:b8:dd:
5f:7d:cb:79:a0:23:6a:fd:69:32:ba:8c:0e:bc:60:21:d0:76:
5f:8d:a8:c8:dd:d6:1a:4c:41:98:55:fa:3a:ec:73:41:d7:fc:
a4:9f:06:63:6a:f5:93:a9:6b:dc:a4:4a:df:e9:d1:d1:4f:c1:
79:b6:86:af:48:bf:c0:07:a7:b2:89:f3:4c:73:02:a1:f8:cd:
89:64:5c:d2:8a:00:7b:d1:a2:ab:d0:f9:db:0a:10:f0:a6:ac:
82:5c:6c:5d:12:ae:2f:62:5d:f0:5e:ed:ce:af:51:74:ad:8b:
25:23:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:08 2026 by rpki-client