
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier: p72b3FqdhM+IMvfE2SoRFi6fwAQUUF+5EJxgffh7QzI=
Subject key identifier: 15:A1:BB:99:CE:DC:5F:A0:1F:C5:59:09:FD:42:2A:54:9C:73:BF:77
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number: 0107
Signing time: Fri 15 May 2026 06:11:49 +0000
Manifest this update: Fri 15 May 2026 06:11:48 +0000
Manifest next update: Fri 22 May 2026 06:11:48 +0000
Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: nxHFzJYcQatlM2WgpyoA2AerPuk4mkepW/4xp4uKa58=)
2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 06:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Validity
Not Before: May 15 06:11:48 2026 GMT
Not After : May 22 06:11:48 2026 GMT
Subject: CN=6a06b924-d498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:18:97:95:78:c9:69:b9:33:1b:f0:48:50:
ea:d7:31:50:ca:0e:8e:87:f1:08:d3:ef:40:c2:a1:
f1:25:77:93:bc:d3:e3:8a:a9:89:8e:2a:73:6d:c5:
87:67:26:70:85:81:a9:cc:d4:31:9d:46:e5:c2:64:
da:ff:81:1a:57:61:93:10:82:d9:27:59:24:fd:03:
be:b4:6a:6e:5c:af:e4:e5:34:c8:b8:d2:2a:86:ca:
39:b1:88:69:91:54:ab:4f:f5:e9:86:cd:38:69:54:
61:79:88:b6:cf:d9:3a:f7:a4:5c:0b:6e:4f:31:db:
0f:b7:10:0d:55:46:14:52:d6:cd:da:fa:5e:b8:7d:
fc:57:0a:30:79:e9:24:14:ac:49:d3:1d:c8:94:6e:
f3:1c:69:17:fb:47:81:35:9c:b7:c2:c3:05:30:c9:
4a:73:a6:f4:50:c4:1e:88:57:e2:8d:78:b7:75:3a:
bf:a8:11:89:e2:f7:fa:d8:be:4c:6c:79:07:2e:d5:
dd:1c:b3:e6:12:c9:29:64:44:96:93:51:89:e8:e0:
8c:f2:5f:ef:81:02:d5:52:f2:bd:1b:a5:d7:9d:e7:
cc:04:31:f2:e3:e6:01:33:fb:72:7c:53:ac:2a:fa:
81:4b:c2:64:40:50:c1:8f:3a:3e:98:8d:fc:1c:f8:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A1:BB:99:CE:DC:5F:A0:1F:C5:59:09:FD:42:2A:54:9C:73:BF:77
X509v3 Authority Key Identifier:
keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:f1:50:e4:45:c5:f4:5a:a0:ab:cb:39:3a:4f:d6:ed:9c:51:
1a:64:35:4b:53:96:8f:ec:7a:d6:c7:77:f9:1c:0f:ce:43:72:
25:40:94:93:61:87:56:20:8d:f3:89:19:70:b6:1c:d0:54:2b:
70:0d:62:db:21:e7:5b:07:d1:8c:49:e3:6b:11:fb:fc:1e:f0:
43:d0:81:e6:c6:c9:a3:3a:46:31:bd:8f:cb:97:e4:16:47:4c:
43:d9:87:02:fe:bb:f0:e2:a7:c0:c7:c0:ba:72:b3:8b:99:ec:
d9:33:5a:b1:b2:52:4e:5d:69:62:43:9f:60:30:33:39:11:4c:
02:df:cc:9d:0b:ed:0a:85:ca:d8:2f:e8:24:ca:5f:d6:b6:3a:
9f:19:88:f9:c6:59:16:8f:09:01:9a:07:ed:50:58:c8:a8:a8:
3d:ef:07:c8:b6:c0:c8:35:a6:61:d7:ca:23:a8:3f:52:2d:92:
17:b5:d6:86:8c:d2:e8:86:e8:e8:2a:3c:70:17:fd:dd:0d:f9:
4d:da:64:e3:73:3c:2c:2a:fc:4a:91:21:09:53:0c:7a:af:88:
06:c1:95:25:03:78:45:7f:8d:c6:10:1f:75:63:17:7c:b9:c5:
9b:fb:5a:96:3c:05:55:6d:18:7c:29:64:77:74:ce:d9:a7:60:
24:f8:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:29:53 2026 by rpki-client