
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json)
Hash identifier: Qa6iXHxtwz0xb/4MiY2AIV0aQTvLE0ouactYSexbgt0=
Subject key identifier: 30:96:04:B2:EF:77:7F:20:8F:71:EB:A2:BF:C3:35:08:9D:B9:A3:B1
Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
Manifest number: 01C7
Signing time: Fri 17 Apr 2026 03:28:29 +0000
Manifest this update: Fri 17 Apr 2026 03:28:28 +0000
Manifest next update: Fri 24 Apr 2026 03:28:28 +0000
Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: BapEAWZkS8yt1TnxnYPbgIKciCAjlHwl06skTMo6GQA=)
2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 0ULeWis5k5ScEy2JfIawyIstIOTvRt9YF0f+ToPSQIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Validity
Not Before: Apr 17 03:28:28 2026 GMT
Not After : Apr 24 03:28:28 2026 GMT
Subject: CN=69e1a8dc-1c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:38:d1:30:40:ce:68:17:77:2d:8c:fb:09:
cb:16:5c:92:0c:ba:6f:23:de:ce:d6:96:ed:e1:58:
45:f2:95:a4:3f:49:fc:56:c0:9d:2e:49:7f:79:5e:
73:c7:a8:36:2e:77:4d:ed:02:37:0d:37:43:71:7d:
f3:5e:22:d3:79:15:50:fe:7d:a7:2b:f7:e9:dd:7f:
df:29:a1:a8:11:e5:5a:18:fd:30:35:b9:cc:01:ae:
6c:60:f9:77:c8:a2:45:e7:f1:d0:10:af:9d:74:44:
8d:45:e3:a9:3e:2f:de:da:4e:0f:e9:f0:52:15:9c:
79:02:0c:ed:9a:6b:54:93:e8:81:97:52:dc:d4:48:
f0:a9:d1:ad:bd:99:87:84:ed:0b:25:5d:3f:0c:d2:
47:1c:1c:e3:0a:e9:bb:06:5c:58:c6:bb:72:a6:15:
e3:5a:e6:de:72:ca:8d:79:b2:2c:00:e7:c8:84:24:
96:95:44:67:a4:d2:d3:b0:87:b5:c6:92:42:e9:5b:
19:03:b6:cc:55:bb:cc:bb:19:74:88:52:b6:de:df:
f3:8a:ce:13:2b:80:ec:94:9f:ae:6a:78:a9:e9:de:
ea:fc:97:e1:0f:26:84:f3:53:d6:8f:e7:5b:d8:68:
8f:06:79:d1:9e:42:16:44:fc:fe:b3:50:c6:3c:af:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:96:04:B2:EF:77:7F:20:8F:71:EB:A2:BF:C3:35:08:9D:B9:A3:B1
X509v3 Authority Key Identifier:
keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:da:fc:e6:90:5a:d7:78:7b:e0:65:9a:33:1e:82:b7:31:12:
f7:38:c2:49:94:c0:d7:5f:2c:cc:ee:3d:2e:a8:e4:85:38:a0:
64:a2:cf:95:7b:49:3c:57:64:11:3b:5e:3b:80:99:54:d2:24:
90:8e:10:b9:3c:ed:75:08:86:78:ce:3b:eb:aa:3b:42:9e:33:
a0:44:48:66:1e:5d:79:e6:f3:d1:6e:b1:22:b1:31:a4:36:87:
76:bb:60:17:9c:47:2a:dc:4e:6f:64:d5:b8:0b:3d:64:64:9a:
aa:17:63:f0:5d:ce:99:dc:f7:2c:fc:9c:af:61:8d:dd:b8:8c:
f8:96:8b:0b:d1:92:4c:8d:76:56:1f:bd:93:f4:91:01:4b:a1:
9a:db:06:ca:45:e8:09:ef:81:df:97:25:3e:98:6a:1c:1d:f3:
c3:a1:8f:1a:a9:f4:d1:a6:89:27:60:07:d8:66:ec:f7:77:c3:
ba:51:d1:50:21:47:f1:cf:c1:7c:33:98:fe:4c:b4:7d:23:88:
40:c8:dd:b0:73:ef:81:6e:0d:70:1e:eb:d2:b1:07:65:69:80:
e3:4f:6f:83:e6:84:a4:83:a5:d8:ea:3b:b1:9b:85:9b:9b:03:
86:9f:7b:d6:16:25:e1:17:f7:a6:45:9f:8f:bb:bf:48:50:9a:
35:51:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:45 2026 by rpki-client