
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json)
Hash identifier: uonH/KnYsMUeta5DmjR8KjntImxuOfv6JkIKATKDB3w=
Subject key identifier: C7:4E:3A:31:EE:7F:15:25:A6:1B:D4:FC:8C:E1:C4:16:68:9F:20:6D
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial: 0B73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
Manifest number: 0B55
Signing time: Mon 02 Mar 2026 00:51:45 +0000
Manifest this update: Mon 02 Mar 2026 00:51:43 +0000
Manifest next update: Mon 09 Mar 2026 00:51:43 +0000
Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: Mpz+Y8CTvuo9lNwoWq8NCVlc4csG9ufKu/Z/xEVTtPw=)
2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: oxvZQxfI2lrclpcwuHvgZQ5erEVbaDSTdEtNZCqnaFM=)
3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: FlilM/koVByJN7Uw72af4g42T01so31c53bUniW9lIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Validity
Not Before: Mar 2 00:51:43 2026 GMT
Not After : Mar 9 00:51:43 2026 GMT
Subject: CN=69a4df20-a6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:13:c2:d3:7b:62:88:68:28:42:92:ea:8b:
05:47:17:77:ee:34:b2:b8:a3:ae:88:c0:06:7e:5d:
93:fe:49:4a:a3:e7:3c:4e:ff:96:8f:db:ea:37:32:
bc:8d:ad:d3:4b:6c:51:92:00:11:75:55:79:ff:85:
21:44:55:5e:e8:3f:11:22:dd:b8:8e:09:b1:38:16:
cc:a4:29:11:4c:06:96:b3:0a:66:93:72:38:6d:ec:
1d:37:6f:8b:41:3e:6c:05:17:dd:f8:0b:fa:0c:fe:
0d:cf:3d:cf:c5:5b:a4:73:36:fa:90:ff:4e:27:29:
57:3c:17:32:84:f9:24:34:0b:49:fe:21:34:4a:4b:
a0:c9:89:ad:14:98:f7:44:64:a5:61:5c:1d:56:a8:
46:d3:37:3b:5a:8d:2e:e5:df:1e:57:0d:41:cd:08:
37:73:68:03:1e:10:1f:e4:ce:f6:8c:fd:14:16:ae:
4d:c2:80:e2:54:26:77:d6:ed:c4:fd:aa:12:7b:73:
96:8a:83:6e:60:30:b1:1f:69:9e:fc:fc:45:5b:89:
6e:ff:1a:25:d8:d3:bb:74:9e:bc:0b:a2:fb:27:48:
f4:d5:a3:ec:8a:67:bb:4e:1f:01:e8:30:c2:b6:5d:
68:8a:cd:7d:97:c1:c9:00:59:bd:e0:55:22:d0:8e:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:3A:31:EE:7F:15:25:A6:1B:D4:FC:8C:E1:C4:16:68:9F:20:6D
X509v3 Authority Key Identifier:
keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:ce:58:93:1a:7f:ba:a9:b9:f5:f6:e2:d1:fa:82:be:e1:be:
0e:36:fd:26:81:24:23:4f:83:e2:b9:4f:73:28:14:e6:8c:61:
15:95:3a:53:c6:3c:30:9e:8c:c8:f0:10:4f:58:f2:22:bd:42:
50:9e:82:a0:56:28:56:06:f5:df:89:c7:da:76:2f:86:e2:13:
b5:0b:40:b3:da:b4:e1:9a:f4:28:eb:ff:dc:b6:d7:28:22:58:
83:45:32:9b:f4:08:c9:d1:27:67:22:9f:3a:27:d2:bd:19:ed:
d8:a9:cd:51:7a:82:42:c9:6b:09:09:03:1a:45:62:02:1b:a4:
77:39:9f:73:90:a5:f9:72:ef:bf:d2:14:2e:ba:65:47:2d:12:
87:0e:b0:4d:0c:8e:53:20:f5:e0:9d:27:81:46:61:db:af:d1:
24:32:d3:51:b0:11:e8:9f:f9:12:55:19:56:fd:43:be:aa:3f:
35:b4:1b:9f:03:fb:ce:3a:f4:4a:90:59:fb:43:04:33:a4:5e:
bb:d2:48:0e:75:a3:6e:f2:17:2f:b0:a8:f1:8d:1f:aa:ec:72:
94:50:fc:4a:89:27:16:c2:ad:f6:03:e3:73:77:ff:c8:01:26:
0d:69:75:41:ec:73:35:e5:bc:68:3f:d4:01:09:84:4a:f8:61:
dc:ad:3d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:57:43 2026 by rpki-client