
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json)
Hash identifier: FyUqSepikzPqFV4g04dwpCNwN5gxnOLN8/tgeTBeipk=
Subject key identifier: 41:DB:69:61:FD:31:23:37:29:39:D8:58:4B:C5:28:D3:A0:C2:A2:3C
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial: 04C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
Manifest number: 047D
Signing time: Mon 05 Oct 2026 00:12:12 +0000
Manifest this update: Mon 05 Oct 2026 00:12:11 +0000
Manifest next update: Mon 12 Oct 2026 00:12:11 +0000
Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: JffIkdLkFYq5ZZXB0dRoJEPZyacur4A+VTvQE2fseFI=)
2: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: klFS2EwojWiZ7PvsY5ywexl5W5eODCB0mjNce2fBPs8=)
3: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: 6txwDANkb+stD+30rgYCUnBhArG1SXPn7l/lsuR8IgY=)
4: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: gWfYJLFQiUGGCySMAATeYDsxEOK4XTc6fxDY8vUTdP4=)
5: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: XU66OcU3fnYJls4O62nuYW+aPPgFO6XUlfyCsJCffUE=)
6: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: 1cM14NhAHexpysqpl1gCbKReRuyBQxaQgkUwJjz7qxw=)
7: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: PmWlH9hI8UDfrum8ljKdCPWBn/RfhOuKClthQ5ZzQA0=)
8: 4DD5897E501911F1B9231017C2833773.roa (hash: 74iwg4T3jS20u81MSENAOAD9vyDefXzwbL5rlNQ4X/0=)
9: BDD52DF26AF311F1A3F54E617547A888.roa (hash: YDvGDAvEOaQ3i1B7cemmqUz4csMi56McTSjidKVS5sQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216 (0x4c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Validity
Not Before: Oct 5 00:12:11 2026 GMT
Not After : Oct 12 00:12:11 2026 GMT
Subject: CN=6ac2eb5b-3788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:86:84:5a:bf:e4:22:c8:d3:3c:68:4d:28:
10:fc:4e:14:d5:28:cc:19:1f:99:f8:dc:c6:1d:fd:
be:d4:4f:5a:41:e5:16:37:33:6e:9a:d1:07:9f:ad:
47:30:31:eb:d9:b8:d6:0c:c6:92:4a:4f:29:55:31:
82:a5:d3:9c:49:11:69:52:a4:7b:33:c4:bc:f3:aa:
49:d9:5a:d7:e3:cf:c5:62:d9:7c:1f:89:bd:92:5e:
e0:a9:21:84:f8:1d:f2:78:16:4f:8c:20:3f:f3:1f:
3a:5b:14:0c:a3:8f:28:16:35:a9:24:55:53:7e:a2:
73:a5:4f:08:50:02:d6:a7:48:c1:eb:48:99:ae:45:
d2:3b:24:e1:ae:e4:4b:84:8e:8e:b8:a7:f3:f3:75:
33:8b:f3:46:7a:06:d4:b8:29:4d:6a:3d:f3:6a:d3:
a5:16:ef:79:93:68:a9:be:c3:2b:3b:ec:d6:3f:97:
90:91:0c:65:59:78:d6:99:44:cc:f8:12:b3:36:df:
0b:83:f2:b3:f3:e9:e9:42:67:f8:8b:7d:d8:d1:fb:
3c:81:a3:7f:5a:0f:df:69:e8:4d:8e:9d:21:9f:cb:
56:46:86:d0:d8:75:84:b5:c9:b1:25:d7:83:8c:9e:
13:3a:fa:f5:a7:7d:f8:7e:51:c5:e0:7b:fb:78:25:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:69:61:FD:31:23:37:29:39:D8:58:4B:C5:28:D3:A0:C2:A2:3C
X509v3 Authority Key Identifier:
keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a2:88:91:65:05:20:6d:fb:ac:d0:f4:06:60:53:58:1a:d3:
b0:ba:62:c9:ba:3f:d3:cd:23:b8:e6:3b:a2:6c:24:2b:b6:5a:
a5:e3:ff:a0:6f:b5:62:c2:0e:0c:03:39:f3:92:c2:9d:10:96:
a3:a4:cc:75:96:fa:cd:25:ed:c9:67:4a:52:65:de:5b:02:c5:
10:94:7e:bc:72:b1:d9:ec:a7:9b:53:74:6f:42:ed:2c:0e:d8:
66:f0:22:fa:51:17:95:04:60:9c:3b:5c:f1:34:02:2c:bf:6b:
97:d1:ef:45:1e:2d:c0:71:49:35:1e:70:8d:56:40:b7:20:f2:
70:89:f7:3f:36:81:eb:68:1c:28:36:7f:28:01:56:71:48:09:
11:98:9c:30:7f:d3:36:75:72:47:e3:2d:c2:3b:97:7f:45:5d:
33:ab:48:b4:5d:4d:ae:6d:8c:a7:69:d7:36:a3:f3:cf:1d:0b:
50:6b:00:5f:e8:fe:b3:fd:70:91:e4:58:dc:dc:96:6c:ab:88:
34:89:bf:a1:28:ab:42:5b:d4:82:f6:a5:a2:4c:33:17:9c:fc:
04:76:a3:f7:c6:30:0a:60:d5:ac:b8:35:ac:a6:44:93:f0:45:
93:22:49:ea:ad:ff:7d:f1:54:a3:10:2a:4b:bb:e7:a4:93:83:
34:30:f9:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD
N0VGRUZCMjgwHhcNMjYxMDA1MDAxMjExWhcNMjYxMDEyMDAxMjExWjAYMRYwFAYD
VQQDEw02YWMyZWI1Yi0zNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslSGhFq/5CLI0zxoTSgQ/E4U1SjMGR+Z+NzGHf2+1E9aQeUWNzNumtEHn61H
MDHr2bjWDMaSSk8pVTGCpdOcSRFpUqR7M8S886pJ2VrX48/FYtl8H4m9kl7gqSGE
+B3yeBZPjCA/8x86WxQMo48oFjWpJFVTfqJzpU8IUALWp0jB60iZrkXSOyThruRL
hI6OuKfz83Uzi/NGegbUuClNaj3zatOlFu95k2ipvsMrO+zWP5eQkQxlWXjWmUTM
+BKzNt8Lg/Kz8+npQmf4i33Y0fs8gaN/Wg/faehNjp0hn8tWRobQ2HWEtcmxJdeD
jJ4TOvr1p334flHF4Hv7eCXohwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHbaWH9
MSM3KTnYWEvFKNOgwqI8MB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC
QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5
V0drQkZ0YnV4NzNINy0teWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmqKIkWUFIG37rND0BmBTWBrTsLpiybo/080juOY7omwkK7ZapeP/oG+1YsIO
DAM585LCnRCWo6TMdZb6zSXtyWdKUmXeWwLFEJR+vHKx2eynm1N0b0LtLA7YZvAi
+lEXlQRgnDtc8TQCLL9rl9HvRR4twHFJNR5wjVZAtyDycIn3PzaB62gcKDZ/KAFW
cUgJEZicMH/TNnVyR+MtwjuXf0VdM6tItF1Nrm2Mp2nXNqPzzx0LUGsAX+j+s/1w
keRY3NyWbKuINIm/oSirQlvUgvalokwzF5z8BHaj98YwCmDVrLg1rKZEk/BFkyJJ
6q3/ffFUoxAqS7vnpJODNDD5ew==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:54:52 2026 by rpki-client