
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier: RJedep8AmawoqnEzPa1ZvKndscPNd4AOQtg36khOj5c=
Subject key identifier: A9:5B:38:F1:AC:27:5D:EE:81:73:87:FA:19:C4:EF:99:F2:74:77:07
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 19F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number: 19D7
Signing time: Sat 04 Apr 2026 16:17:25 +0000
Manifest this update: Sat 04 Apr 2026 16:17:25 +0000
Manifest next update: Sat 11 Apr 2026 16:17:25 +0000
Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: qmVBU/kFclVrFHt0arRpmDe2rBCId0vByGbtylgMFlw=)
2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: t4qQEhXVur27eUnpFLqlgSPz5OkbpRB/VWbuAT/SIEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6643 (0x19f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Validity
Not Before: Apr 4 16:17:25 2026 GMT
Not After : Apr 11 16:17:25 2026 GMT
Subject: CN=69d13995-baf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:3c:25:0f:8e:cd:eb:a3:f6:27:de:3a:e3:
92:0a:27:09:68:99:40:fb:43:05:8d:24:1b:ce:bd:
31:91:74:dd:eb:69:81:25:9b:3b:01:05:65:1f:6d:
e1:4a:37:f4:b9:97:0a:fd:cc:75:e6:35:e7:96:e8:
dc:27:c8:bb:d6:1b:ac:18:dc:47:11:84:d5:f0:3a:
5e:87:8e:30:68:4a:32:61:d0:f7:54:25:fd:ac:84:
73:6c:54:72:9e:df:c7:6b:06:ee:db:d2:27:e4:58:
48:b7:9a:6c:9a:88:57:21:5e:81:10:f6:38:b4:84:
03:fc:98:db:51:a7:ec:a9:51:98:b3:a9:24:2c:ef:
95:e7:c8:99:9f:53:06:0d:9b:a9:de:02:bc:60:3a:
46:a7:8b:93:25:e0:ab:17:80:7e:42:71:be:49:e8:
7a:fc:40:b9:bb:e3:61:54:87:77:08:f6:ed:96:83:
44:91:13:e0:d7:28:9d:17:63:a8:48:89:b8:06:9c:
16:ac:77:54:f1:91:94:42:02:32:2b:39:75:6e:3c:
ac:d6:89:e6:3e:44:bf:c5:e2:de:23:17:43:8c:ce:
c9:b2:2c:19:4a:7c:a6:b3:ef:59:d9:38:50:c9:61:
f9:fc:ec:a5:2f:9f:7c:ce:7e:99:10:da:7c:da:b3:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:38:F1:AC:27:5D:EE:81:73:87:FA:19:C4:EF:99:F2:74:77:07
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c5:74:cc:c3:67:d2:18:28:b5:22:5f:fb:42:65:fd:ff:45:
84:4f:e7:10:be:60:24:b6:4d:1f:6d:23:86:0a:8f:9d:6d:06:
da:a4:6c:a8:cd:92:7f:7b:03:62:33:01:db:c0:ac:fd:40:d2:
ef:13:09:23:85:11:66:e7:61:8e:89:0d:10:89:b4:8a:96:75:
7c:61:fb:a9:9d:66:4b:dd:d8:55:ae:fa:4d:51:bf:93:18:e7:
5b:f8:78:f0:fa:60:fa:a3:6d:cd:d0:1b:d2:da:05:ed:91:30:
68:01:19:3a:ca:ca:5c:55:aa:ce:bf:55:81:b7:70:0b:c3:5c:
40:da:1d:40:17:f9:07:b0:bb:1d:d0:5e:73:0c:21:0e:4b:7e:
53:84:23:d0:d3:d0:23:e0:1b:6e:7d:c6:ff:d1:d7:cb:2e:c4:
18:63:a1:09:41:08:a2:95:7b:5e:bf:bb:09:93:63:a5:d7:8d:
aa:e6:64:4f:4f:21:ac:b5:ae:b1:1d:eb:21:cf:c2:c6:3a:d5:
71:77:25:8b:e8:22:62:b8:41:35:98:4b:39:22:16:85:e0:ef:
50:46:42:00:47:b4:af:f4:e7:07:93:94:30:ed:77:4d:c3:2c:
61:8c:2c:b0:cc:8c:66:05:8d:b4:51:06:9b:8f:40:e8:39:fc:
a4:f2:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:00 2026 by rpki-client