
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json)
Hash identifier: s9tzRAn/pRmobqALF8lgZNwjqansYW1MGieTiZ4pKvs=
Subject key identifier: E7:44:0F:D0:4D:0C:5E:E6:83:26:81:8E:7C:F6:16:79:86:20:74:DB
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial: 0AB0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
Manifest number: 0A63
Signing time: Sat 04 Apr 2026 19:34:20 +0000
Manifest this update: Sat 04 Apr 2026 19:34:19 +0000
Manifest next update: Sat 11 Apr 2026 19:34:19 +0000
Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: Vx5Dxz4YDC58VNISN1RiV1Qd5we+CpBw0yz5IJm53Zw=)
2: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: wJPqhmG5nuh5KFi1IkyAbZsHhxJ058Q16pbeljhvYhk=)
3: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: y7NLJGyijlqNL+Ovztz61BvAvfEsk7Q6tTmB6qAz1wY=)
4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: aRixXq7ui35CkBZ1WtgzAKTz2bGqo7mI3c5dVkJhwD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2736 (0xab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Validity
Not Before: Apr 4 19:34:19 2026 GMT
Not After : Apr 11 19:34:19 2026 GMT
Subject: CN=69d167bc-aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:95:0c:2e:00:ad:e2:0f:a5:99:cf:05:c2:
20:ef:68:71:7c:2f:d3:36:20:c7:82:7e:69:37:73:
7b:a7:9f:1e:11:33:47:b3:fb:f1:36:30:01:fd:60:
e8:2e:7b:38:f9:d5:b6:36:00:a4:33:b4:51:d3:26:
60:7a:94:89:4e:32:4b:aa:c1:f1:a4:97:5e:3f:0b:
fd:c8:54:d8:bd:a4:9e:cc:36:de:88:1b:40:ae:47:
e5:82:0a:b2:1b:b7:36:47:8e:6a:c1:c2:7b:38:bb:
e3:9c:cb:68:97:b6:f9:3d:8c:ac:8f:27:16:e1:80:
11:ee:67:d9:60:a7:2e:7a:62:f9:3c:32:f0:f3:db:
42:5b:09:62:7a:5b:1c:cf:10:d4:bd:aa:0b:d4:65:
21:70:d1:12:0d:c7:ec:52:1a:dd:d4:e6:fe:21:9b:
00:1f:cb:c5:e7:1d:1c:60:57:b4:67:86:40:0d:ba:
69:1e:71:a7:69:ec:58:4c:01:81:ca:ed:cf:b8:30:
e0:b0:94:b3:39:57:85:8c:15:d7:ea:e0:66:f6:82:
94:03:0a:12:1d:df:02:0a:1e:2f:bb:2e:70:ef:8d:
c6:d4:bd:d7:ca:14:c7:e3:38:2a:a4:0f:28:1d:60:
bd:e7:db:19:35:89:c5:3c:36:2e:75:ad:94:d1:41:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:44:0F:D0:4D:0C:5E:E6:83:26:81:8E:7C:F6:16:79:86:20:74:DB
X509v3 Authority Key Identifier:
keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:22:cf:e4:42:64:33:ef:85:7b:d6:7d:1c:0c:49:fc:10:8a:
e7:e4:20:97:39:f6:17:2a:30:ba:2c:45:6f:e5:fa:cc:f8:09:
50:a0:72:3f:12:92:af:9f:5f:13:65:53:cd:af:e8:20:9b:23:
19:ca:c2:6e:3a:86:95:44:52:e6:48:77:36:e6:22:f8:64:4b:
fb:62:33:2f:cc:dd:73:72:ad:b5:e5:61:be:7f:fc:e4:ae:bb:
98:2b:e1:5d:a9:27:ca:f7:3d:fe:b2:8d:b6:f0:3b:bc:9c:30:
fe:22:5b:4a:94:cf:07:33:aa:ba:43:1c:6e:41:f2:69:cc:64:
39:4d:96:0d:e0:94:23:24:ae:f6:bc:69:61:97:63:0e:c2:64:
b3:cf:ef:72:32:62:b9:3c:ad:fe:d7:66:3f:4c:df:6e:5c:0c:
1b:ab:3e:ce:16:47:ce:67:ba:aa:a2:fd:89:14:e9:ef:5a:19:
c6:77:39:22:f5:76:32:c0:db:6e:78:89:77:56:e9:7b:85:d7:
e7:e1:27:89:ed:a1:f7:42:28:75:4e:24:0d:fb:ad:7d:7d:76:
46:7c:00:df:4a:ea:e1:65:f0:95:c4:fb:4c:3f:96:01:44:08:
9e:ec:00:44:9e:fb:a9:35:37:e9:12:17:02:af:4c:19:ee:9a:
f3:30:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:09 2026 by rpki-client