
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier: O622DlkguI8057g7LfBuYhqcwKsATusz8Qry7TyAX7Q=
Subject key identifier: 12:9C:B4:67:1B:42:52:E5:6F:7D:C5:A4:7B:96:B0:13:BE:FE:1E:6E
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number: EE
Signing time: Fri 27 Mar 2026 05:56:09 +0000
Manifest this update: Fri 27 Mar 2026 05:56:08 +0000
Manifest next update: Fri 03 Apr 2026 05:56:08 +0000
Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: Mb+kVZYVqGt2lHo87XniiUAFBITSZsuWzA1MOVY4WjY=)
2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Validity
Not Before: Mar 27 05:56:08 2026 GMT
Not After : Apr 3 05:56:08 2026 GMT
Subject: CN=69c61bf8-fd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:e7:22:77:4f:de:63:19:0b:87:88:1c:0d:
49:59:5b:6f:b4:bc:5b:f0:72:50:08:71:ca:8d:2d:
76:dc:e6:33:89:fc:33:6e:d1:8e:bc:d2:26:81:5a:
5c:86:10:9f:54:98:ae:5f:79:58:5a:78:f9:1c:5f:
fd:8d:14:d3:aa:32:c8:c1:d4:5f:3f:16:45:ca:6b:
d0:d6:e5:73:9c:e1:57:05:1b:c3:51:9c:b5:10:9b:
6d:bf:df:83:72:1c:ce:9d:8b:8c:0b:b4:27:84:8c:
2d:67:92:21:8a:44:a0:9f:f0:cd:95:4c:c2:cb:7f:
07:16:fa:96:3b:8e:5f:d6:ae:0c:14:92:a4:98:d8:
90:5e:4b:1e:54:52:f7:87:c1:62:6e:be:65:c9:c8:
b1:55:19:de:9c:c7:f8:99:15:61:8e:0f:0e:e3:c3:
4f:98:37:a6:c7:6f:01:3c:03:6f:ef:7c:fa:c2:a9:
50:ed:ab:1a:8f:2b:98:52:78:27:62:af:e0:cf:1e:
12:5c:d3:ed:43:60:67:b4:1a:92:34:2b:c0:35:70:
dd:c2:21:d3:de:2e:c9:9e:eb:ac:38:c4:73:79:4b:
1e:68:42:a5:5c:a1:2a:8f:87:80:fb:2c:8c:8b:a1:
b6:71:3c:de:e7:ee:e7:3a:bf:21:05:d1:e8:67:31:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:B4:67:1B:42:52:E5:6F:7D:C5:A4:7B:96:B0:13:BE:FE:1E:6E
X509v3 Authority Key Identifier:
keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ae:20:31:a2:7f:9e:57:74:56:40:3e:8e:43:26:98:61:4c:
4c:9a:8f:df:e9:10:bb:9a:15:18:e0:f1:06:b5:89:d5:70:bf:
c3:f4:bb:1b:55:f0:2a:b9:a3:4e:52:b7:b6:c5:8a:dd:ec:43:
c6:ed:2f:b0:d2:d9:44:e4:b4:15:ea:ba:9e:00:44:b4:79:3d:
ba:44:9f:9f:32:42:7c:84:83:93:39:bf:07:4d:63:12:7f:37:
0e:ba:93:d1:cf:fa:7e:cd:38:97:c8:c5:e7:0b:63:f5:c5:75:
fb:6f:87:43:60:cf:19:47:07:50:e4:c8:ba:b3:32:19:53:ae:
38:b4:22:ed:df:4b:ac:65:fe:ac:ba:67:01:25:24:a9:8d:7b:
f8:60:ad:d7:4f:da:5b:ff:87:22:4c:f9:28:92:80:0c:76:0d:
82:46:9d:14:64:56:e3:0b:d0:95:e7:76:1b:08:cc:b8:64:c4:
f5:4e:d9:9f:ee:aa:7b:7c:b4:14:ce:18:51:32:2a:3e:00:99:
11:ff:1a:62:9d:eb:19:cf:54:ad:55:56:9b:27:b0:48:6d:71:
92:1f:a3:8d:ad:3e:11:37:70:84:63:84:ca:31:8e:11:90:eb:
5d:cc:ef:88:23:f7:06:10:b4:89:48:45:38:d4:21:9e:8b:5f:
a1:37:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:28:29 2026 by rpki-client