
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
File: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft (raw, json)
Hash identifier: IO4bxMifpQ4pob9jS2QnT9JwIA+Sq4THU/mvitb9W6Q=
Subject key identifier: 94:9E:79:A5:23:3A:41:7A:4A:05:A9:50:29:B1:1B:E4:ED:F6:80:7A
Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Certificate serial: 06FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
Manifest number: 06F3
Signing time: Thu 16 Apr 2026 22:01:50 +0000
Manifest this update: Thu 16 Apr 2026 22:01:49 +0000
Manifest next update: Thu 23 Apr 2026 22:01:49 +0000
Files and hashes: 1: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl (hash: pLazepj3MoaikBeSDmbSJtc0w0LO7hZCLXrd69zIph4=)
2: 0665D2328D1A11EB80593760C4F9AE02.roa (hash: 4BP9RA5edvRIYEOJDfl9qmd/eccUjRwBS2/hmKl9/us=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907
Validity
Not Before: Apr 16 22:01:49 2026 GMT
Not After : Apr 23 22:01:49 2026 GMT
Subject: CN=69e15c4e-c6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:54:5f:3f:2e:5c:43:f5:70:77:54:3e:93:
84:72:44:ab:32:e7:b0:22:8d:ae:c5:f4:12:a4:ed:
98:01:06:88:b0:56:91:ae:db:07:d3:3d:c2:c1:f9:
3b:5b:1c:8d:18:4c:af:fe:3d:38:a6:d2:4f:d3:9d:
60:6f:40:02:b0:1a:59:f6:e6:85:26:33:62:b5:64:
b2:02:22:76:3b:48:11:a3:f5:d2:5f:d2:76:bb:fe:
27:04:c7:03:6b:c2:4f:dc:d4:16:7e:cf:c5:52:46:
c7:27:3c:37:90:8e:a6:92:39:c5:8f:12:dc:6f:33:
14:86:d0:fa:9d:d5:55:28:e6:3f:3b:fb:02:ed:04:
ac:d0:9e:a5:9e:15:60:8a:57:22:ea:ba:93:b9:e7:
f7:ce:e1:f4:31:0c:f4:f7:81:f7:83:0a:38:7c:dc:
56:64:4e:c0:e3:1e:4e:27:fc:cc:7a:78:4e:58:99:
1c:d9:40:35:fb:c6:1d:32:28:fb:88:eb:38:d9:f3:
08:a8:74:fd:f6:5d:a4:a8:f2:5a:9b:76:58:4c:bf:
1c:be:5e:2c:91:55:b9:f0:90:52:93:ba:3c:be:3d:
c3:1d:fb:d0:5b:99:f8:73:bf:e8:87:89:67:f8:a8:
6d:70:f9:a6:0c:82:bd:be:08:80:d8:e7:4c:ce:bc:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9E:79:A5:23:3A:41:7A:4A:05:A9:50:29:B1:1B:E4:ED:F6:80:7A
X509v3 Authority Key Identifier:
keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:34:4a:b6:cf:b7:c7:97:c8:91:60:ff:d0:60:83:5b:09:03:
c4:a9:05:5b:40:56:26:44:38:99:cf:8d:db:53:7f:b5:4c:7a:
20:15:9b:20:91:8d:ef:86:6e:55:52:f5:08:b1:46:29:2f:18:
2c:06:e4:93:c4:e1:c8:fe:67:dd:94:a6:af:58:bb:6f:3d:e7:
c4:3a:9f:0e:0c:e7:a3:56:6b:57:ff:5d:a0:86:55:9e:75:c0:
4d:8c:b6:fe:2c:0d:be:e9:b1:af:82:2c:8f:4f:10:87:d5:29:
39:7f:42:a7:ca:ff:1b:21:8a:74:8a:b0:fb:68:da:b1:1e:2a:
6e:a1:23:da:6e:44:2c:b4:57:90:5a:9b:f8:fe:5e:72:20:89:
93:b2:a6:52:77:e4:25:b3:bd:50:e1:8c:42:30:13:9e:0e:46:
f2:d7:c5:ba:59:ed:dc:d9:3c:66:69:c5:37:7e:a0:4e:e6:b2:
1e:0f:9e:f6:06:87:8a:fd:71:bc:e9:90:d4:a5:cc:b1:33:3b:
10:de:a5:55:c1:c6:3c:d2:72:51:78:b5:d0:69:d4:a9:5a:23:
5b:1a:8d:b1:ea:27:c2:92:ca:b5:a5:65:74:24:ae:79:3d:20:
d8:34:75:b1:81:e3:23:e1:c5:46:de:e3:5a:1e:b9:cf:d9:24:
6e:ef:03:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:35 2026 by rpki-client