
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
File: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft (raw, json)
Hash identifier: mOdW91c6cDDjW8Y1C5ICiiEsENSyMZSzyh1sk+ab41Y=
Subject key identifier: AE:1B:16:65:C2:D7:E4:FC:95:D0:8F:6F:51:95:4C:43:F9:1C:D2:DE
Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF
Certificate issuer: /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF
Certificate serial: 06EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
Manifest number: 06E8
Signing time: Mon 02 Mar 2026 01:09:27 +0000
Manifest this update: Mon 02 Mar 2026 01:09:24 +0000
Manifest next update: Mon 09 Mar 2026 01:09:24 +0000
Files and hashes: 1: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl (hash: 3I1ttGVGFtHNzi9sd1piy0VVFBW0d+IcsxwbiwyA+f8=)
2: 22009BF2854111EBA0658B42C4F9AE02.roa (hash: noKuoeiHOnGKfqqGIFSmXAvo6SNhLKVozyzlAk2N6uU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl
rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7083, serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF
Validity
Not Before: Mar 2 01:09:24 2026 GMT
Not After : Mar 9 01:09:24 2026 GMT
Subject: CN=69a4e347-47bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:84:fc:42:02:f8:df:d4:b9:2e:28:10:62:
9d:bc:82:e8:6c:53:97:7d:f4:8a:92:88:75:86:37:
31:59:f2:f8:27:d4:ca:30:cd:55:aa:f5:a0:49:bf:
72:68:c0:b0:ab:71:fb:a8:72:8f:24:a1:f0:65:65:
28:23:cc:7b:56:4f:2b:18:ed:ed:40:97:fe:61:ec:
a2:83:44:8e:1e:fd:c8:5e:30:9d:26:9d:73:0b:af:
08:67:d2:60:be:c4:79:d2:ea:26:4f:7c:46:51:14:
b3:50:16:15:dc:88:9a:52:5c:8b:c6:61:b9:86:fb:
d9:8e:cc:3c:51:b3:be:ea:dd:55:09:25:a2:7a:f6:
e8:46:cc:f7:0b:c7:d8:02:00:13:5c:18:16:06:10:
1e:d9:ff:b5:ff:22:68:43:3e:16:f7:17:cc:a0:da:
68:fe:e4:a7:fd:02:ca:13:99:f4:0b:e6:35:e6:2e:
48:9b:bd:5e:45:d7:ae:ac:7e:89:5a:21:72:b4:12:
61:f3:c7:ed:b9:1e:24:b9:ed:2e:0a:ee:bf:06:cc:
6e:c8:e4:95:a4:03:21:1a:13:41:6e:f8:51:e8:91:
a3:d6:07:3d:68:e0:35:50:cc:eb:a7:b5:d3:42:d0:
f2:7f:a3:f5:75:8e:c1:33:e9:4e:17:54:34:26:8e:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1B:16:65:C2:D7:E4:FC:95:D0:8F:6F:51:95:4C:43:F9:1C:D2:DE
X509v3 Authority Key Identifier:
keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:21:f0:ca:08:e6:d6:22:bf:a4:49:b1:11:af:b9:16:8b:88:
c5:75:f5:59:7a:66:4b:43:ea:35:4b:b5:b8:93:d9:34:e9:57:
09:15:8d:3f:fd:fa:b3:67:bc:af:a8:df:a2:8e:0e:56:27:21:
8f:2e:52:86:b9:95:b9:91:3d:40:07:93:96:bc:32:17:83:6e:
34:9d:54:37:59:0c:ea:ba:30:d1:6b:e5:8e:ee:3c:8b:ef:3c:
c5:76:82:92:ab:3f:e8:fc:70:38:f0:3c:53:80:03:eb:54:f1:
a4:c8:b6:ee:96:83:e1:52:7f:f3:34:ba:3b:7f:fb:73:42:76:
6a:08:b7:71:76:1c:60:4a:d0:89:53:68:5c:23:98:fb:35:09:
38:d5:67:a5:a8:e8:8e:f4:3f:f2:bc:74:4a:fb:5a:53:86:d7:
af:8b:9a:44:06:6a:5d:ea:d4:2d:e6:ea:ad:98:9c:16:11:bc:
33:39:8b:93:38:b4:05:f6:c8:99:e8:b4:f1:78:c6:f1:2e:f3:
15:b4:57:8a:da:43:85:4a:7e:b2:fb:c5:f8:e8:99:21:08:f9:
f6:3a:cf:03:ca:29:cb:2b:eb:db:5c:bc:fc:14:f0:94:e0:78:
55:6e:73:96:70:ae:eb:57:bc:61:94:98:de:32:05:93:49:13:
3c:91:39:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:00 2026 by rpki-client