
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
File: 1O0zil4gh9gu9ML2RZm0ERJy5eA.mft (raw, json)
Hash identifier: GjahpLeMVHN+m251zuuLiTK/oVItn8MdXXae7RSQfqg=
Subject key identifier: 7E:B9:47:00:16:BF:EE:3D:C0:F4:0C:56:71:97:E1:D7:67:E3:27:5F
Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0
Certificate issuer: /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0
Certificate serial: 07B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
Manifest number: 07AD
Signing time: Thu 12 Mar 2026 21:05:44 +0000
Manifest this update: Thu 12 Mar 2026 21:05:43 +0000
Manifest next update: Thu 19 Mar 2026 21:05:43 +0000
Files and hashes: 1: 1O0zil4gh9gu9ML2RZm0ERJy5eA.crl (hash: P7qZrfLWkueoeli0wq+w6Q6RZnBLQZD8mCmrn5QQXu8=)
2: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (hash: yYH3PcU0cdRRsZ0s/WXAKj+o8DaLhXORjZzgZMVE1n0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl
rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 21:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1977 (0x7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0
Validity
Not Before: Mar 12 21:05:43 2026 GMT
Not After : Mar 19 21:05:43 2026 GMT
Subject: CN=69b32aa8-d2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:d3:f6:42:61:f1:83:fe:31:dd:5d:35:cd:
2b:f7:b8:22:00:71:ea:97:84:59:f4:75:bd:89:b4:
3a:f7:38:4b:b8:1d:dd:32:cb:de:62:78:96:91:26:
54:87:5b:b8:38:a3:d8:e7:c9:f3:6f:b6:ef:1f:51:
37:b9:31:d6:c1:90:60:23:18:10:17:cd:c5:04:aa:
f8:0b:0f:2c:0d:a0:77:49:8c:e5:8e:52:42:64:06:
11:33:af:f1:81:80:c9:39:50:5e:79:d7:be:07:fd:
43:3e:3f:83:9b:43:c2:8e:d4:bd:73:d0:b5:16:e4:
77:5d:8c:c7:25:52:41:ac:37:21:eb:2b:cd:e4:41:
c4:61:24:c6:95:86:db:9d:cb:6b:d8:96:0f:31:ce:
f0:f4:39:ba:7d:2a:db:27:c8:e8:0a:63:a0:0e:3a:
9f:be:72:8d:47:4a:b7:14:39:c2:d8:bf:ec:59:6b:
77:2e:32:20:77:c4:a5:0b:7b:a2:b6:4e:4d:d0:a7:
83:41:18:ab:f6:29:35:de:7b:46:37:e7:18:fb:57:
bc:3e:fc:26:16:98:66:c4:ae:20:42:9d:14:2d:25:
94:79:7b:41:fe:54:3d:f7:eb:be:d3:97:99:10:a2:
69:cf:f5:dc:d8:7c:ef:07:4f:4c:dc:a3:aa:49:6c:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:47:00:16:BF:EE:3D:C0:F4:0C:56:71:97:E1:D7:67:E3:27:5F
X509v3 Authority Key Identifier:
keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:9f:43:43:55:77:d2:a9:0a:a1:b1:36:8a:78:bf:94:83:3b:
ec:30:02:23:16:9b:ae:0f:73:8d:68:41:6e:bd:9a:53:65:58:
2e:6f:de:c2:42:46:b0:36:f2:43:ba:36:03:d1:19:33:16:b9:
22:9b:9e:63:54:24:2f:f0:e7:13:8b:77:60:cd:f9:cd:57:99:
63:eb:10:53:5b:85:cc:10:bc:4b:86:f1:5d:bd:0e:53:f0:8d:
d9:78:d6:07:a6:fe:82:e9:4b:12:77:c1:c7:c2:9e:43:da:22:
7e:0c:e3:0c:f9:1e:5f:85:02:46:e8:a7:e5:85:4b:fe:61:41:
da:d0:80:60:ee:ca:a0:1f:f0:06:1a:e1:22:41:41:3f:de:9f:
aa:33:24:aa:5f:5d:18:d4:62:77:cf:87:20:df:9f:64:9f:c1:
02:89:73:d3:46:80:cd:50:64:a4:41:39:10:a6:ae:9d:da:8f:
58:4d:46:a4:7f:b1:9d:fb:d3:f6:15:33:83:97:9d:31:b9:a7:
79:5e:68:cc:f8:38:7e:69:a4:d9:5d:eb:d6:df:27:51:d5:60:
53:fa:11:b1:66:1e:46:35:eb:3a:49:c3:08:3f:9f:bd:f5:ca:
a2:33:8e:9b:31:cc:19:79:dd:74:24:ec:4a:9d:f1:25:44:83:
62:4f:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:56 2026 by rpki-client