
$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
File: 7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json)
Hash identifier: 6lV57TEcnKKJJT5jHjbwZPhLLEvCVDHzAIuUdPFaDck=
Subject key identifier: 28:DB:7A:0C:1F:06:08:97:F8:C0:CF:6E:19:33:EA:6C:15:FA:23:28
Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C
Certificate issuer: /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
Manifest number: 01E2
Signing time: Sun 05 Apr 2026 02:59:30 +0000
Manifest this update: Sun 05 Apr 2026 02:59:30 +0000
Manifest next update: Sun 12 Apr 2026 02:59:30 +0000
Files and hashes: 1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: 94ClSAdXKyFcuDc0Fbxpx5cCgXCTFQJW+atgAdnpueY=)
2: 099FC48C854911EF8C3F5275C4F9AE02.roa (hash: Gb9t1IxBeA+qDg/3AThzDizVtxbv9G5RTclrUf28mc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl
rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912294F, serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
Validity
Not Before: Apr 5 02:59:30 2026 GMT
Not After : Apr 12 02:59:30 2026 GMT
Subject: CN=69d1d012-06eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:94:85:e7:02:e6:af:b7:ce:fa:76:2f:c4:
99:0e:f2:a9:55:f4:41:c1:bf:28:36:54:0b:b5:b6:
d8:13:b2:f0:dd:68:a0:d2:8e:28:49:7b:69:92:e4:
41:dd:71:2f:7e:dd:ed:e4:e4:76:fb:7f:0b:eb:ba:
dc:f7:ef:73:11:72:4f:55:d0:95:45:1d:bc:f0:92:
c6:00:31:ac:a9:85:43:ff:61:ca:2e:cb:40:b8:33:
b0:f4:95:43:f5:28:d2:16:40:eb:fd:9c:0d:2f:42:
45:2d:d5:3f:74:73:9c:e0:a7:56:8f:c1:6c:05:b4:
33:72:2c:c3:05:1a:e6:70:7f:0d:ef:78:9e:d1:a6:
7a:f3:4c:fe:69:e1:9c:47:85:6c:ec:47:9c:2d:0f:
12:bb:20:43:80:0c:b0:b2:41:f1:55:b9:55:ae:1b:
87:be:3a:66:96:67:07:42:12:61:a9:53:ff:d9:81:
20:ec:0e:0f:54:81:cf:9d:b3:43:ee:05:5e:d6:76:
68:64:b1:d5:bc:8a:35:f9:59:c0:c7:16:42:97:31:
c4:f5:a9:9b:0d:51:ed:26:07:f1:f6:dc:d5:da:0e:
1b:61:c7:d6:44:c2:30:6c:c5:9f:5d:7d:a8:95:64:
bf:46:81:cb:85:21:cc:a0:43:70:69:50:6d:72:e0:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DB:7A:0C:1F:06:08:97:F8:C0:CF:6E:19:33:EA:6C:15:FA:23:28
X509v3 Authority Key Identifier:
keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:e5:18:d5:91:d6:54:c6:ae:28:1e:6c:2b:7d:a4:9f:8e:4d:
a8:cf:56:94:ec:a4:e0:2e:94:65:d0:28:d0:ea:be:46:91:b7:
62:36:92:88:b7:91:d2:be:ce:00:c7:f7:de:85:2b:fc:38:d8:
ef:33:50:69:9e:15:cb:34:6b:74:6c:e4:cd:16:da:c3:b4:3f:
0b:43:4b:e2:c8:14:f6:2f:f8:10:39:8c:21:cc:1d:70:39:4e:
da:79:c4:72:a2:f6:55:55:f2:65:63:fc:58:50:33:f5:be:ea:
b2:77:31:ec:a8:c4:38:ea:b3:0a:f5:91:44:7f:26:79:64:6f:
ac:dc:b9:2d:fa:91:87:a9:b7:12:6a:40:27:f6:eb:b2:a0:d9:
30:8a:d6:06:ec:b7:74:50:4e:b8:70:ea:38:80:0b:23:df:5b:
50:d5:04:aa:af:eb:db:f4:4d:92:88:db:6d:5b:18:35:e2:bd:
e6:63:6a:49:46:6b:75:2c:88:75:75:6a:34:fc:62:0e:9a:75:
98:a4:b2:f5:c3:cc:6f:35:98:c7:05:05:1f:e2:c6:3b:3a:f2:
51:5f:e8:e5:57:05:e9:5a:0a:ec:6d:88:b2:9f:73:8b:a7:20:
79:3e:56:dd:dd:f2:31:e9:27:f6:f8:7d:da:dd:fb:27:d4:27:
fc:17:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:49 2026 by rpki-client