
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json)
Hash identifier: JYXcI5PhJruIxliLfQoe/ReglS5e3Ot5FpQXS+4q+o4=
Subject key identifier: 8F:A8:BF:06:CE:1F:11:DD:3C:0A:93:47:FB:A0:16:65:E3:C3:BB:F7
Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
Manifest number: EE
Signing time: Fri 27 Mar 2026 05:56:06 +0000
Manifest this update: Fri 27 Mar 2026 05:56:05 +0000
Manifest next update: Fri 03 Apr 2026 05:56:05 +0000
Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: 1nWgidP+s66hniJdrONW7nHFEvnU9JreAV8uw3h2KG8=)
2: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: aHk0t2Hy2gHuEUEuWNA047fzWOktHu8vocVNcFbAJjo=)
3: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: qt3HSjdPuhwdbu7y+IBM5bXY+abtccfmEZI2ywYOKv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Validity
Not Before: Mar 27 05:56:05 2026 GMT
Not After : Apr 3 05:56:05 2026 GMT
Subject: CN=69c61bf6-39f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:63:17:b9:4a:de:b7:c8:8b:be:46:7b:c5:
ba:41:c5:c9:e5:b7:b7:2e:90:d3:12:d4:0b:52:60:
b8:14:1c:27:33:b7:20:43:f6:39:ca:f9:53:17:88:
79:6b:9f:6a:d8:47:c0:b8:aa:03:e9:63:18:68:ac:
78:08:d8:be:a4:b3:3a:88:9c:61:2b:3a:6b:33:17:
ba:2f:fd:2b:cf:f9:b3:19:6b:6c:3c:dd:37:78:98:
19:8f:aa:58:88:dc:d3:2b:46:39:09:cd:3d:49:d9:
64:b5:a0:c6:5c:1b:78:a7:11:31:7a:61:91:c3:74:
2e:97:ee:23:db:f4:86:7a:21:4e:66:a2:6b:61:06:
6a:71:98:9d:7b:7e:17:10:5d:59:27:1b:70:e7:7c:
c6:40:e8:95:71:ab:d5:91:58:bf:97:b0:73:8a:9c:
ed:5a:41:ae:79:37:33:a1:24:6f:ab:be:88:cf:a7:
b8:64:45:77:b1:79:bc:bc:7a:b8:74:a8:f8:35:82:
2f:2a:f4:68:f9:4b:12:71:be:a3:d3:dc:a7:88:b6:
f7:fd:14:34:69:63:3a:86:04:90:62:e2:3e:76:60:
5a:02:16:de:ad:06:97:d8:e1:36:b3:6b:5d:21:eb:
61:6b:84:df:e3:e0:3b:e9:dd:af:d6:2c:b2:a6:b2:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A8:BF:06:CE:1F:11:DD:3C:0A:93:47:FB:A0:16:65:E3:C3:BB:F7
X509v3 Authority Key Identifier:
keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:a6:5b:c8:6d:38:64:ac:ec:57:cf:3d:09:1a:2a:8a:7e:ed:
dc:98:cb:8e:6f:d7:e1:42:29:f0:b0:00:73:66:cd:b0:ff:9e:
b2:52:24:a8:9d:05:2c:88:55:5f:3e:84:73:a9:aa:7e:29:66:
33:6f:97:0c:54:4f:82:68:19:24:6a:58:d6:1d:29:f9:03:b9:
c6:39:f9:db:f2:99:7e:96:ee:73:8e:ce:52:ab:a0:a8:33:f4:
af:8b:e7:db:9e:f9:a9:91:f1:b0:f3:b6:44:00:43:b0:cf:ea:
8a:9d:e3:46:31:4e:2d:2d:dc:c5:9c:b2:13:0a:bc:f9:3d:be:
43:93:21:ca:ab:95:24:5f:c3:7e:4c:68:22:57:5e:a1:69:21:
90:6a:33:70:0e:bb:59:af:86:fa:b4:ff:7c:60:a4:78:25:ff:
00:1d:60:38:a2:6f:70:a8:3f:eb:4f:23:20:f4:7d:4d:c1:9e:
80:0f:9a:e1:31:8c:3a:a6:fd:1a:f3:a7:cc:a8:51:34:13:7e:
a3:3b:4f:8e:69:10:d1:2e:44:f4:41:a1:0d:53:d4:0d:46:9e:
dd:3a:93:71:7d:09:67:90:3a:c7:18:c2:e8:9d:c7:17:a7:68:
0d:37:0a:ca:2b:9a:58:ad:e2:c0:33:09:66:d7:ba:a7:39:03:
be:e0:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:27:20 2026 by rpki-client