
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json)
Hash identifier: Gk/WDiYohujlOH2oz9E/ejyCZ//hi3WywFIiiM9fOkU=
Subject key identifier: 4A:04:DD:61:B4:5F:A1:96:5C:E9:0E:F4:B0:CE:27:77:B7:A0:59:1D
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial: 0B8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
Manifest number: 0B6D
Signing time: Thu 16 Apr 2026 19:07:19 +0000
Manifest this update: Thu 16 Apr 2026 19:07:18 +0000
Manifest next update: Thu 23 Apr 2026 19:07:18 +0000
Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: E7ZVzbkP0kcXxU3TJfRWnpjM5IoKYKlEmXmuV6hQ2wA=)
2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: oxvZQxfI2lrclpcwuHvgZQ5erEVbaDSTdEtNZCqnaFM=)
3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: FlilM/koVByJN7Uw72af4g42T01so31c53bUniW9lIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2955 (0xb8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Validity
Not Before: Apr 16 19:07:18 2026 GMT
Not After : Apr 23 19:07:18 2026 GMT
Subject: CN=69e13367-2559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:6e:69:54:18:8d:47:17:78:9a:b0:bc:09:
d4:91:dc:6d:4c:e7:c1:31:d2:57:10:c3:03:bb:d9:
36:8d:58:e4:af:db:6c:78:83:23:eb:6a:2f:5b:9a:
1b:c7:f9:8b:c7:18:b3:5d:8f:40:3f:69:66:b4:0c:
5c:c3:b7:c4:58:e3:d7:81:06:54:6c:15:4f:05:02:
3e:dc:fe:86:e8:04:00:d0:5c:24:a9:d9:26:67:df:
d5:a9:86:c0:9f:ac:2d:8c:45:fd:a3:24:97:24:d4:
c6:f2:30:2b:3a:49:4e:d8:21:f0:be:e9:79:03:fd:
9d:2c:f4:79:ed:bb:65:8c:d2:d4:48:6d:f0:c7:1d:
57:53:78:f0:d3:5a:0a:b9:fe:d4:8e:86:98:17:7e:
16:03:23:6a:eb:c3:27:fd:c9:bf:b3:75:3c:eb:9d:
03:81:ea:36:77:55:32:bb:2e:e3:93:38:24:5c:8c:
d9:b4:d6:42:5b:b6:ca:47:14:7e:9d:b6:06:c0:98:
1a:ed:ed:2d:b6:7c:08:5f:4a:68:a0:e3:22:bd:b1:
23:f8:13:b0:17:12:ea:3e:cf:07:43:bb:c7:46:88:
db:38:df:36:e7:bd:2e:73:8a:f0:d3:14:df:ef:fd:
e4:92:d9:81:87:43:bf:59:47:63:fe:5c:8e:d6:95:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:04:DD:61:B4:5F:A1:96:5C:E9:0E:F4:B0:CE:27:77:B7:A0:59:1D
X509v3 Authority Key Identifier:
keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fb:f3:d2:4f:84:62:a3:56:39:bb:08:e8:8b:97:98:c5:3b:
01:50:55:25:d9:fc:c4:bf:9f:b0:3b:8b:fb:19:b3:0a:23:d2:
11:21:35:51:77:7a:07:4e:e2:dc:1b:e7:fe:5e:fb:ee:0e:21:
6f:e6:a7:5b:ba:ba:ad:ff:47:69:98:94:20:75:40:09:f5:ce:
24:d6:c7:fa:8d:62:7b:a4:18:e3:2b:ff:66:ba:64:84:a2:f9:
1a:7e:3c:2e:9c:7f:00:6a:cf:d9:47:a7:d8:09:ee:56:7f:8f:
34:4b:f4:4a:28:b7:7f:37:a8:ba:27:f9:b1:56:53:89:05:e4:
02:db:78:13:ec:b1:d6:3a:8a:da:33:3f:1d:e9:ad:db:e7:1a:
59:26:89:34:db:b0:15:4a:9e:9a:91:37:6d:8b:2b:8d:8b:19:
60:11:d3:4c:b1:56:3d:94:40:47:47:8b:44:46:9c:5c:7a:bb:
50:56:ad:80:f9:a6:8f:8e:a8:67:b2:27:77:30:c3:ef:21:2a:
e6:1d:88:4a:65:25:31:7a:04:44:51:da:93:c7:82:4a:4a:5b:
78:31:58:5b:81:f7:39:06:98:01:a1:85:7f:ca:96:3b:61:25:
b7:59:1e:69:d9:55:fa:de:30:6e:e5:7c:37:3e:ef:63:9c:73:
42:90:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:51 2026 by rpki-client