
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json)
Hash identifier: pB9WXhzTuPkuuwves+xjPQbaJhQco5BOv5IsH1tkD30=
Subject key identifier: E1:D6:4F:51:27:52:15:5C:C4:28:EC:B4:86:1E:55:C5:F9:8F:42:4F
Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
Manifest number: 0184
Signing time: Sun 05 Apr 2026 04:01:50 +0000
Manifest this update: Sun 05 Apr 2026 04:01:49 +0000
Manifest next update: Sun 12 Apr 2026 04:01:49 +0000
Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: H5hhBuMGPpgvQYATBR+EGnUrynrzzfvlaWh4Cz5rzNI=)
2: 306EFA64A87611F089A2B881C4F9AE02.roa (hash: dxCV5oDwm0iQGfDR4O8HOe4IbiLXLU4mPTUlx835jPI=)
3: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: 68XN8JwBJBbdfUKGQscZWuVbBuf4F1dhpvRpl2kDoG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Validity
Not Before: Apr 5 04:01:49 2026 GMT
Not After : Apr 12 04:01:49 2026 GMT
Subject: CN=69d1deae-593e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:0b:43:2f:e9:c4:37:6c:e0:84:f2:5c:e6:
2b:95:0b:cf:a0:73:c2:f9:91:bd:6c:a1:83:64:c7:
7c:f9:48:0b:29:5f:37:3c:d7:90:10:72:d7:92:77:
2f:b9:03:4d:5a:a6:0e:53:26:fd:47:83:d2:b1:fd:
b7:2a:36:07:13:9a:4a:d2:19:5a:08:e6:2f:52:25:
50:71:41:ae:c4:ff:92:aa:52:bc:e7:35:a6:a6:7f:
c5:3d:ad:a8:66:1d:3d:33:4d:7f:c5:ff:7b:e4:5f:
22:5d:a7:14:cb:43:34:98:c5:be:3f:2d:fd:9b:cd:
3b:87:2e:8f:e9:df:59:55:07:c5:76:cc:c2:3e:b3:
36:df:25:b4:a8:73:29:b0:89:13:3e:86:8f:27:25:
df:01:05:ab:e9:76:b7:f1:8f:dd:63:e4:46:e1:52:
0c:c1:66:0f:b2:99:70:f8:26:a2:9a:e8:ef:5a:ca:
e0:d3:98:af:c5:b0:e6:4e:d6:5c:f2:d7:24:c1:e5:
2c:01:bb:6f:e2:66:a5:0d:f4:dc:46:2d:60:11:33:
01:f0:45:11:cf:d2:74:03:30:39:6a:bb:93:2b:90:
10:23:ad:e7:86:bd:53:e9:51:16:6c:24:9e:2c:1c:
01:a0:fa:12:49:e3:ad:cd:ef:68:21:c3:e5:7f:10:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D6:4F:51:27:52:15:5C:C4:28:EC:B4:86:1E:55:C5:F9:8F:42:4F
X509v3 Authority Key Identifier:
keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f3:f6:9d:6b:f1:84:a4:cd:1a:9b:17:50:c4:3d:0a:c6:e9:
f1:03:6f:45:ba:79:47:0c:ac:02:bc:b5:61:a3:9f:28:cd:df:
a8:94:ef:ec:74:73:52:44:1c:8b:fa:56:54:b2:1a:25:1b:0b:
42:f1:eb:bb:29:72:44:a8:fb:c7:9f:32:aa:c2:07:58:3d:bb:
24:c1:37:b6:73:81:e5:c2:52:c2:cc:91:ee:d3:06:13:d6:1b:
c8:cb:3b:51:24:af:d5:ff:68:46:6f:b7:f1:53:7e:d5:cb:7b:
96:8e:df:74:fd:e1:39:e8:e5:7e:7d:b7:27:6c:82:7a:8a:93:
36:f5:dd:fe:9b:ba:63:4b:b0:67:29:d7:ab:74:c9:d6:61:f3:
55:7f:cc:d0:47:f2:18:c5:ad:1d:13:9c:95:1b:5b:1c:bf:99:
9a:38:e8:dc:ef:5c:3f:c3:19:ad:7d:ef:ea:69:3c:3e:72:a9:
f2:d1:d8:ce:71:db:ed:84:ee:74:09:d6:8e:56:61:74:d0:88:
a0:19:69:14:18:67:e1:9b:0f:d9:d9:46:77:c8:5f:a3:5c:53:
38:88:9b:ea:86:dd:ba:91:9f:c7:ec:4b:54:e3:e6:bd:49:fb:
18:34:9f:35:08:88:0c:1b:b3:4c:cc:d2:0b:1c:81:80:c6:66:
19:12:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:44 2026 by rpki-client