
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier: mdoWN/jgfJhnPyybUqBYyXvoWExog5MjaSPZCABc5MQ=
Subject key identifier: FC:08:B7:56:99:C2:EC:23:EC:03:13:8E:35:9D:4C:61:EE:B3:6E:F5
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 0376
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number: 0353
Signing time: Fri 17 Apr 2026 00:54:38 +0000
Manifest this update: Fri 17 Apr 2026 00:54:38 +0000
Manifest next update: Fri 24 Apr 2026 00:54:38 +0000
Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: qRDVBHh7aVksMzX5PQarooAeA2EPowV5Gbc+tyFHTtM=)
2: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: nnwYsXqpriKdgHZ6F2Bjskh6Ji1AomhewkLa8SUVYYs=)
3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: 9v4NKBdRQhuU8DQv3Rod5Fcc10899zvHWabiZx6Nun8=)
4: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: QTw/GKnqOzom+7g2Vy0ugUBB+pLhZarT5O8cic2MYbc=)
5: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: WYNTjnlZgwrqZBIU4k28zQZnPO22jdEa1SzcgGRQAiQ=)
6: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: vM0A7WnGvcxI52gcg6mHL5DanZRChz8WZQbZNCoxjuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886 (0x376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Apr 17 00:54:38 2026 GMT
Not After : Apr 24 00:54:38 2026 GMT
Subject: CN=69e184ce-82f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:85:15:9c:8b:90:4e:42:57:df:a1:15:e2:
76:16:fd:2a:0c:ca:51:67:ab:e5:1d:60:b0:1d:a0:
c9:56:a1:31:94:f8:df:0c:1b:a8:66:72:b0:e0:65:
88:3e:40:85:34:e2:5d:e1:52:b7:f4:c7:4d:50:f6:
0d:9b:44:11:6f:4f:ef:61:ee:ed:46:c2:55:47:5c:
13:48:c1:6b:fa:57:1d:64:fb:18:6a:66:82:17:3a:
05:27:6a:05:53:d0:23:36:de:6b:f0:30:b6:c7:ca:
c6:43:02:38:f3:63:96:fe:b9:a8:60:14:96:9a:8a:
d7:f7:7d:ce:b5:6e:99:d0:3c:cb:2d:74:9e:ae:4e:
ea:1a:48:0b:df:49:8e:15:84:f5:10:96:a6:8c:7c:
be:85:40:3f:26:76:3e:ff:e0:1b:70:75:1f:42:70:
43:dc:58:9d:40:67:9e:20:76:b3:6b:a9:7c:35:1e:
7b:4d:8e:74:80:08:be:b6:7a:62:3d:8a:89:a5:20:
b1:26:37:7a:ba:44:82:3e:c9:18:6b:12:ae:73:b9:
50:3b:3d:5d:86:4c:6b:dd:97:b9:81:03:1a:4b:10:
8f:20:62:ae:af:da:39:52:d7:c7:5d:5a:d0:52:fe:
c6:4f:86:05:cc:8b:c7:86:8c:10:3d:99:d4:12:52:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:08:B7:56:99:C2:EC:23:EC:03:13:8E:35:9D:4C:61:EE:B3:6E:F5
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:ea:ad:31:c4:6c:da:37:08:d1:b6:2a:e4:ed:89:55:13:8e:
4c:cc:fa:1b:59:01:0d:0e:f9:ac:da:88:42:4c:1d:b6:49:30:
5e:7c:c8:00:cb:0b:89:03:07:4f:06:de:f4:86:bf:64:25:32:
56:4d:7b:cb:7c:e5:b7:9a:b9:0c:69:c0:e5:f3:41:e7:53:e6:
17:e0:2b:42:9a:2b:6d:3d:54:f0:67:60:ae:23:c2:c0:ad:37:
57:7d:02:42:9a:f9:96:16:8d:00:0b:b3:f6:66:94:b5:c8:2d:
57:7e:02:1d:3b:b0:04:69:b3:07:5d:a3:af:2f:83:18:9a:ea:
b8:58:e9:c6:3c:60:e5:c7:f8:c4:1f:cd:b1:0b:9f:50:43:fd:
ad:cd:73:58:87:b3:87:c4:a0:29:d0:18:5f:73:55:9e:94:7f:
07:ee:08:62:e2:5b:81:59:5d:80:65:b1:d9:ab:0f:8b:f8:9e:
b0:6a:1a:ff:a3:23:2b:64:a1:86:84:84:88:2d:cd:67:60:67:
b4:95:24:b2:f9:3f:2e:43:20:73:b5:96:bc:a4:e4:de:b1:b4:
00:1b:71:b8:07:3f:99:f4:24:04:eb:c1:77:39:85:3f:ee:0a:
eb:e1:e9:7f:d8:b6:1b:53:c1:82:94:8b:5f:db:be:1a:ed:34:
95:b1:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:16 2026 by rpki-client