
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json)
Hash identifier: rivLvYAPHQ/9+Gt8C1FekragpY6vQUZyk1qmlfw4NW0=
Subject key identifier: 7A:D7:E0:83:72:CB:C5:56:6A:38:46:61:9A:1A:98:5B:19:FD:9C:8A
Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Certificate serial: 0135
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
Manifest number: 0125
Signing time: Mon 01 Jun 2026 06:33:15 +0000
Manifest this update: Mon 01 Jun 2026 06:33:15 +0000
Manifest next update: Mon 08 Jun 2026 06:33:15 +0000
Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: oqdyBl/XeNPSQmS+D30ETa5LDMvIqXDufKtpD5IafQU=)
2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: kXIL4LSVHjTAmVfJOU7g+OrmcpQ5rxALmYlyD25Zr5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Validity
Not Before: Jun 1 06:33:15 2026 GMT
Not After : Jun 8 06:33:15 2026 GMT
Subject: CN=6a1d27ab-ac7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:bc:05:cb:da:ab:bc:b1:1f:5c:df:ac:64:
e1:79:89:44:1b:db:e5:98:c3:62:b1:d4:c7:f1:8e:
d7:ed:57:62:f3:14:0c:a1:07:d7:4f:93:2d:16:c8:
70:9d:b7:33:ef:90:b7:aa:9a:ab:e9:d8:9b:9e:8a:
73:42:f2:d7:81:d1:9c:ba:67:cc:78:da:7d:b3:b5:
8a:14:15:e6:c1:2f:f9:3f:b6:83:38:f0:2d:1d:1d:
79:25:21:a2:e7:f4:a9:17:43:a7:7d:b8:bc:73:03:
a7:19:34:06:b4:53:a8:6f:88:3d:c5:aa:cb:57:d6:
40:48:69:b3:42:d7:a8:e0:19:36:09:84:c2:bd:9e:
5c:62:74:7a:df:67:8e:fc:a8:c6:0e:8a:e3:f0:0e:
57:86:7e:90:4e:31:a7:13:d5:50:3b:f5:52:3d:b3:
d5:fe:c4:01:dc:28:ae:6a:ac:cf:5b:d2:99:73:28:
78:cd:52:d0:5a:23:cd:91:aa:e5:42:bc:80:34:ee:
97:66:e6:df:10:03:59:1c:52:66:fd:75:97:47:47:
64:6c:8a:87:18:11:e2:19:0e:57:43:a9:e7:71:b9:
36:aa:7e:9b:09:fb:01:3e:87:8c:db:31:25:cf:a5:
2e:78:5f:df:18:d6:d0:2e:ce:41:d4:33:63:c6:94:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:E0:83:72:CB:C5:56:6A:38:46:61:9A:1A:98:5B:19:FD:9C:8A
X509v3 Authority Key Identifier:
keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c1:46:ce:ce:7b:e8:9c:a9:c5:82:69:b8:80:35:10:8f:b7:
72:83:55:4f:16:67:db:80:70:e9:a4:f9:59:0d:4e:17:60:bf:
22:f6:26:df:ba:b4:90:28:e7:42:1d:e7:ec:bd:f8:99:6f:6f:
49:57:1f:e5:46:c7:3e:8f:e7:67:da:d2:a6:5c:4b:52:a3:bf:
76:f4:86:53:2d:41:24:a9:91:11:4a:72:44:62:22:96:2e:70:
4e:73:ba:04:e1:a4:21:68:35:f8:5b:c3:1a:82:de:2b:a8:75:
ea:03:dc:6e:03:ff:9d:06:cc:c0:26:c8:1f:20:3a:ff:22:17:
72:21:27:94:10:32:9b:16:4f:83:5e:db:66:8a:ed:a7:f8:93:
6d:d8:e9:ae:30:b7:7a:8e:af:d5:f8:40:d0:e9:b1:88:58:00:
55:c7:6d:6e:e2:a6:93:18:6d:64:3e:60:d1:f0:d6:01:93:d0:
65:a2:56:78:7f:f8:b2:17:c1:19:cc:26:e7:a5:40:ac:f8:a0:
2f:d3:5b:f5:19:99:85:c5:44:aa:1b:3e:5f:7a:f2:4a:a7:f4:
65:a5:4c:05:4d:d8:7d:19:46:05:84:7d:4f:ba:ae:b3:2e:d7:
18:ae:89:d5:24:73:8f:e2:4c:ee:88:5e:79:70:ca:9e:59:bf:
18:90:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:24:03 2026 by rpki-client