
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json)
Hash identifier: zejQM/8ia6gceqL5xAc3IeRTzvtPI0kE9X8J0w2u2CE=
Subject key identifier: 2B:00:F1:1F:65:1D:04:7C:F5:E1:74:C5:23:A3:12:9A:98:48:35:00
Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21
Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
Certificate serial: 0BCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
Manifest number: 0BA1
Signing time: Sat 04 Apr 2026 18:55:47 +0000
Manifest this update: Sat 04 Apr 2026 18:55:47 +0000
Manifest next update: Sat 11 Apr 2026 18:55:47 +0000
Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: txfTlRol7r1Py6OyZxDhLmmUPV7ITCPF17OObzqDTVc=)
2: 81B5E70C18B511F1AC11CD310A3D8C67.roa (hash: 5Ie3ZIxlQpY2pGzYYtHErJYraDQp8xSopPGehYawBBk=)
3: B7F0310EBCB911F08FEDBF33C4F9AE02.roa (hash: iBHWKuOva34+z/8UqtOgV0qkI2D/34heB6aVlSgkcj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl
rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3020 (0xbcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
Validity
Not Before: Apr 4 18:55:47 2026 GMT
Not After : Apr 11 18:55:47 2026 GMT
Subject: CN=69d15eb3-9847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:63:a7:bf:a6:c2:6c:34:bb:a1:18:bb:b3:
cd:64:2b:12:45:eb:f2:64:2a:0a:65:70:6f:3e:13:
8d:8c:e4:fa:27:c4:d8:a3:bf:f8:ba:ff:62:8f:65:
e7:10:ac:db:bd:b4:ef:a2:92:1f:ca:5d:4e:9c:b5:
9a:bb:4b:68:30:a9:77:f9:20:2e:d3:b4:29:ba:8c:
79:8d:9d:e7:9a:70:92:80:95:10:ff:ca:62:94:1d:
39:3c:9f:4e:51:ea:19:f2:21:11:1e:59:92:18:52:
14:2b:bb:47:23:93:3f:85:41:b7:12:26:16:41:cf:
20:76:f4:a9:a7:5f:91:67:c7:1b:d6:20:83:6d:45:
21:b6:fc:17:24:07:44:08:aa:63:8d:e4:d2:13:1f:
4b:53:5b:2e:4e:9c:eb:d3:c3:87:2e:9b:96:70:79:
47:00:08:da:33:fb:7e:af:f3:79:7c:57:07:07:9d:
0a:51:ef:6c:d5:3a:98:c3:53:db:58:4c:d9:c6:8a:
b3:5d:33:3d:a9:11:c9:97:03:59:d8:4b:09:34:05:
9a:e5:5c:9f:ab:32:79:25:db:89:fd:b7:92:7e:66:
08:fd:d8:e8:61:69:35:d1:42:20:88:c2:14:14:a4:
27:8c:6f:4f:0d:6f:ef:cf:23:75:2b:62:b6:4a:84:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:00:F1:1F:65:1D:04:7C:F5:E1:74:C5:23:A3:12:9A:98:48:35:00
X509v3 Authority Key Identifier:
keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:73:fe:c7:cf:f6:5b:c5:6d:62:c3:37:9e:a2:54:73:16:3c:
e7:40:65:69:f5:b3:22:96:d7:52:c5:fd:72:22:23:b0:5c:aa:
e7:52:b5:a0:d8:de:1e:a4:49:97:eb:e0:e4:9f:a3:88:db:81:
6c:fa:72:ed:4e:d2:7b:97:5b:46:47:07:32:1d:bb:f0:2b:5a:
3a:cb:02:78:54:12:f7:41:39:cf:e4:05:68:27:72:46:87:22:
6d:a1:5e:bb:cf:93:a7:57:f9:ee:fa:bf:4b:7a:93:a1:3f:64:
f3:51:67:d3:8f:f8:54:9c:03:2f:73:59:db:4d:eb:51:3f:5f:
7d:24:5a:0f:27:82:9f:c8:15:03:20:cf:36:63:23:7e:09:46:
6b:05:10:d6:48:f1:82:b6:f6:d4:0d:78:2e:6d:19:8e:33:92:
05:63:d5:c9:d4:ce:bd:1f:a5:c4:63:b3:60:8c:59:36:18:b8:
b9:ab:dc:cc:d5:35:00:21:32:60:9b:61:ea:cf:cc:e8:0a:7f:
77:21:40:d9:17:a8:91:68:1f:a9:25:a2:7b:98:83:22:7c:ce:
9b:c5:78:62:ee:56:d9:95:be:98:10:3c:52:1a:7a:f5:08:4a:
76:ff:56:99:b0:83:11:51:de:98:88:12:a6:ed:a4:71:28:f6:
a2:29:55:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2
Qzk0MjlGMjEwHhcNMjYwNDA0MTg1NTQ3WhcNMjYwNDExMTg1NTQ3WjAYMRYwFAYD
VQQDEw02OWQxNWViMy05ODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMtjp7+mwmw0u6EYu7PNZCsSRevyZCoKZXBvPhONjOT6J8TYo7/4uv9ij2Xn
EKzbvbTvopIfyl1OnLWau0toMKl3+SAu07Qpuox5jZ3nmnCSgJUQ/8pilB05PJ9O
UeoZ8iERHlmSGFIUK7tHI5M/hUG3EiYWQc8gdvSpp1+RZ8cb1iCDbUUhtvwXJAdE
CKpjjeTSEx9LU1suTpzr08OHLpuWcHlHAAjaM/t+r/N5fFcHB50KUe9s1TqYw1Pb
WEzZxoqzXTM9qRHJlwNZ2EsJNAWa5VyfqzJ5JduJ/beSfmYI/djoYWk10UIgiMIU
FKQnjG9PDW/vzyN1K2K2SoSZDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsA8R9l
HQR89eF0xSOjEpqYSDUAMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3
NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0
dU14RHN0MzVxbDlzbENueUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANHP+x8/2W8VtYsM3nqJUcxY850BlafWzIpbXUsX9ciIjsFyq51K1oNjeHqRJ
l+vg5J+jiNuBbPpy7U7Se5dbRkcHMh278CtaOssCeFQS90E5z+QFaCdyRocibaFe
u8+Tp1f57vq/S3qToT9k81Fn04/4VJwDL3NZ203rUT9ffSRaDyeCn8gVAyDPNmMj
fglGawUQ1kjxgrb21A14Lm0ZjjOSBWPVydTOvR+lxGOzYIxZNhi4uavczNU1ACEy
YJth6s/M6Ap/dyFA2ReokWgfqSWie5iDInzOm8V4Yu5W2ZW+mBA8Uhp69QhKdv9W
mbCDEVHemIgSpu2kcSj2oilVww==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:58 2026 by rpki-client