
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json)
Hash identifier: cRsvZ5VVU34ZiV6hZ0BNSRGldjFZQpOT6qhej7qLkrc=
Subject key identifier: C1:0F:CE:80:BC:C4:4D:13:E9:29:82:9F:04:B5:E3:FC:8D:F0:AE:64
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial: 0483
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
Manifest number: 0441
Signing time: Thu 11 Jun 2026 02:31:46 +0000
Manifest this update: Thu 11 Jun 2026 02:31:46 +0000
Manifest next update: Thu 18 Jun 2026 02:31:46 +0000
Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: /5MWP1+Wm+0wuy9ODal5txC4kJ6AXCAor6CwQbtW1fw=)
2: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: 1cM14NhAHexpysqpl1gCbKReRuyBQxaQgkUwJjz7qxw=)
3: 4DD5897E501911F1B9231017C2833773.roa (hash: 74iwg4T3jS20u81MSENAOAD9vyDefXzwbL5rlNQ4X/0=)
4: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: XU66OcU3fnYJls4O62nuYW+aPPgFO6XUlfyCsJCffUE=)
5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: 6txwDANkb+stD+30rgYCUnBhArG1SXPn7l/lsuR8IgY=)
6: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: gWfYJLFQiUGGCySMAATeYDsxEOK4XTc6fxDY8vUTdP4=)
7: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: klFS2EwojWiZ7PvsY5ywexl5W5eODCB0mjNce2fBPs8=)
8: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: PmWlH9hI8UDfrum8ljKdCPWBn/RfhOuKClthQ5ZzQA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Validity
Not Before: Jun 11 02:31:46 2026 GMT
Not After : Jun 18 02:31:46 2026 GMT
Subject: CN=6a2a1e12-9c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:0c:c9:2c:36:ad:0c:c8:eb:22:a4:27:e5:
3f:00:32:f5:2a:8e:a3:dc:94:cd:04:a6:d3:bc:23:
71:ad:5b:94:2f:c7:2d:59:9e:f6:0b:c5:d3:05:f3:
5b:d4:9f:68:54:ba:c4:14:87:5d:f6:fe:e8:48:00:
3a:22:fc:17:b4:df:94:93:42:f6:67:40:16:4c:3b:
05:15:0e:97:8a:76:1d:44:8a:44:ae:82:32:b2:49:
26:7d:10:15:e4:46:e3:1d:f9:fc:75:d1:aa:94:1c:
fe:31:0b:61:8b:98:4d:1f:01:d3:d3:15:b3:cf:cb:
14:49:db:7a:c5:9b:f8:e4:f2:b5:ef:f7:d0:2d:4b:
31:76:96:4c:48:31:3c:02:cc:f9:e2:d2:27:27:e9:
05:cc:24:d1:40:8c:39:a4:97:bf:21:b9:02:ba:45:
ae:b6:b1:16:48:0c:3a:b1:1f:9f:01:2c:e1:4c:82:
9f:c8:09:22:84:c3:75:1b:34:ba:72:4b:3d:89:69:
25:1c:59:32:60:17:80:95:e1:60:56:70:04:ba:d1:
85:86:8c:84:c9:10:e4:e6:39:b1:4e:7e:cc:de:96:
9f:e4:2b:0c:c8:a0:fc:16:db:27:50:46:c3:3f:5a:
9c:8e:43:12:47:84:c6:f3:19:3f:7c:0f:2e:72:d8:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0F:CE:80:BC:C4:4D:13:E9:29:82:9F:04:B5:E3:FC:8D:F0:AE:64
X509v3 Authority Key Identifier:
keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:bd:37:06:29:91:44:4c:2d:87:12:2f:10:9c:7e:80:3d:04:
c0:ac:cb:31:8e:d0:ce:87:24:50:50:79:fa:05:14:54:9c:b3:
29:e6:ac:03:10:d7:c1:b1:33:93:d2:4a:83:88:8a:ca:31:19:
f5:25:3d:84:2c:9b:99:e8:04:e1:39:a9:c8:1c:73:d1:51:00:
50:20:af:e3:6e:fd:9c:ce:12:79:1b:12:31:55:7f:52:69:f0:
c4:74:18:65:fb:0b:a4:88:8b:24:f2:07:a3:cc:7d:78:95:78:
6c:58:44:b8:16:11:26:5d:25:96:45:ab:b4:5b:a9:7b:8a:60:
4e:13:98:e6:ce:f4:52:a1:a1:b7:f5:ac:d0:79:78:65:4f:5c:
51:f6:ef:15:85:c2:87:85:43:8c:b3:fe:41:2b:af:64:5c:dd:
70:c7:d2:ca:51:72:98:14:6e:f9:5a:9a:b4:46:f9:df:52:a9:
39:23:38:75:a2:df:26:d2:63:e6:fc:d0:af:98:8a:b1:8b:7b:
27:b1:ec:7b:c2:ad:d5:d4:24:ce:de:d8:d1:94:a6:af:8b:09:
ff:be:77:3a:cd:94:78:bc:b2:69:3a:cb:c4:68:ca:8f:69:b1:
06:77:4a:67:a5:87:f1:18:b5:86:90:47:f6:36:89:31:73:7c:
e9:16:84:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:42:59 2026 by rpki-client