
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
File: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json)
Hash identifier: L5i6dnjRlp7mxjWHHjMiBD0zz1+WPiqj1QmXlaTeGTg=
Subject key identifier: 93:11:14:20:F5:A8:E3:3A:42:96:9C:A7:DD:3C:A1:31:8C:DB:2A:B2
Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4
Certificate issuer: /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
Manifest number: 0132
Signing time: Sun 01 Mar 2026 06:28:33 +0000
Manifest this update: Sun 01 Mar 2026 06:28:32 +0000
Manifest next update: Sun 08 Mar 2026 06:28:32 +0000
Files and hashes: 1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: U7YXNMt3Hdguv8+zd88APSCxacEfYZiZ6qcM6QNl7NM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl
rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4
Validity
Not Before: Mar 1 06:28:32 2026 GMT
Not After : Mar 8 06:28:32 2026 GMT
Subject: CN=69a3dc91-8d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:ce:34:cd:be:49:46:94:35:c6:e3:eb:19:
a9:73:2b:4f:c9:b2:db:d5:6d:c4:02:20:8c:b7:19:
ce:ba:5a:df:70:1d:02:c9:18:5e:cc:1e:42:cb:4b:
fa:56:24:3d:b4:ef:54:a5:1b:d0:a6:7c:40:c5:0d:
55:88:e9:cf:41:d9:4f:87:11:a9:21:97:6e:64:24:
b1:c5:51:1f:4c:95:b0:c1:82:0a:2a:84:71:be:d6:
f0:e6:b1:64:eb:12:68:04:cd:2b:54:55:34:86:ae:
9b:27:48:3a:a0:86:ae:1d:84:e5:39:fa:5f:da:c0:
e2:10:13:14:f8:ff:3b:f6:e7:e3:63:8c:fd:9c:03:
60:f6:46:7b:91:ea:fb:61:34:0f:42:c2:32:4a:33:
02:cf:21:8c:15:36:e6:a8:14:dc:b7:92:98:f9:b8:
1b:78:65:81:06:ea:48:d0:da:f2:a7:08:6b:6f:1e:
16:f1:31:32:c0:bd:f8:07:2c:16:65:21:87:bb:e1:
2e:c3:a2:7d:a4:f6:28:7a:52:2b:73:40:ab:ba:42:
ce:47:de:42:d8:cb:c2:5b:76:2b:df:e4:8d:66:02:
4f:af:e6:93:cf:81:ca:af:be:e0:57:59:f0:3c:63:
fd:cd:d5:e6:2b:83:74:db:2b:ae:ee:9d:46:6b:1e:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:11:14:20:F5:A8:E3:3A:42:96:9C:A7:DD:3C:A1:31:8C:DB:2A:B2
X509v3 Authority Key Identifier:
keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:ba:3d:c1:48:dd:fc:27:45:0c:d1:0a:44:a9:43:eb:5e:6c:
40:4a:1e:3b:34:c0:4d:0f:d3:22:77:91:b6:d6:16:fa:af:ba:
a6:fe:55:20:a1:e2:73:b6:e3:99:16:9d:a5:aa:e1:db:42:24:
68:61:75:e0:a7:d9:66:8d:80:cc:48:89:2b:fe:0d:6a:6b:b8:
5f:3c:18:cb:e1:6e:e0:59:3f:0d:36:0c:05:f0:4b:dd:28:5e:
9e:4e:ac:c1:db:15:1d:ce:ff:4f:60:68:cf:3f:67:18:2c:3d:
d3:a2:f1:7c:c0:96:c7:65:fc:bd:3d:b9:66:9e:71:f6:5e:fe:
62:c3:68:1d:c3:6b:f8:29:a3:24:ef:d8:72:df:8b:b9:dc:12:
2a:a1:5b:49:93:53:18:8c:63:eb:43:d5:42:ae:e9:74:14:fb:
df:a7:d3:31:15:5c:5e:c9:e6:d2:7e:11:bb:3c:9a:2d:d5:7d:
a2:b7:1e:ed:ad:e9:f9:4d:9b:04:c7:34:49:d2:aa:82:4b:a0:
03:21:6e:7a:eb:44:4b:39:96:99:71:da:53:28:c7:4a:26:5d:
20:b5:c3:59:b1:13:fe:75:de:1b:84:de:fb:aa:2b:62:59:21:
cd:b4:15:09:58:00:3b:e3:38:b4:cb:25:03:c8:d0:eb:96:06:
1a:10:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:20 2026 by rpki-client