
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json)
Hash identifier: XjH/SsvwHX2di0CyOwvuHZffkXUn/FF48HeZ6GqNQVs=
Subject key identifier: B0:85:56:8E:8D:B0:97:12:CC:FF:79:DE:D9:51:08:F7:2A:40:73:06
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
Manifest number: 9D
Signing time: Fri 13 Mar 2026 06:38:04 +0000
Manifest this update: Fri 13 Mar 2026 06:38:03 +0000
Manifest next update: Fri 20 Mar 2026 06:38:03 +0000
Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: l81oyUq4z5Xrzuy35Jiq7W5oy2Dp34cziRyAnJMfmCY=)
2: 35AFBD5AE0D011F09634A562536F56BC.roa (hash: pxyEkBwPYXvAD+2QjsKqnPjRJ2vw6CaCkMBO2KcYyvE=)
3: 6A771720172811F19FAF5C920C3D8C67.roa (hash: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=)
4: 89526C82036711F18D03459D2E3D8C67.roa (hash: g3Z/lb3zPni8T0QaNGFB/2aCLxhD3wsFvotEa6Pu0yk=)
5: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: YUtRcyTYWa/pHY47Ue9bM/GAJdUwHkhBptZ4fnp0gPw=)
6: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: A66rcZiF4f5e26LfV6GcvIFSQBE9UoosWVu1PJBfN2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 06:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Validity
Not Before: Mar 13 06:38:03 2026 GMT
Not After : Mar 20 06:38:03 2026 GMT
Subject: CN=69b3b0cc-5b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:3c:3c:c0:c8:8b:69:2d:62:e2:45:32:c9:
68:b6:d0:a7:2d:ba:19:fb:f6:e3:65:0d:8a:0f:2c:
a4:d7:77:fa:23:4a:f2:21:d3:53:e3:64:23:34:93:
1b:ae:11:88:4d:5c:76:82:8d:7a:2e:a5:ae:f2:e5:
c6:af:ef:73:3d:47:c4:67:85:16:2b:e7:85:21:5d:
b3:89:43:dd:40:3e:33:ba:db:f1:12:c1:80:38:ba:
41:c6:0a:8b:f6:03:a0:5e:0b:61:2e:93:64:63:ea:
e7:3b:2f:f7:3f:a4:9b:a5:93:3a:28:57:32:a2:a9:
30:c1:49:64:30:3b:0b:79:dc:6a:05:c5:f7:76:2d:
0a:fb:f8:c1:42:51:fa:8f:ee:fb:fb:3c:c7:71:cc:
e6:51:6b:4e:53:c4:11:bd:df:25:54:8e:aa:05:b8:
bb:4a:88:a5:e2:70:d3:ea:d2:6a:ca:17:15:f3:73:
30:d1:fc:b3:a3:32:3f:d9:57:97:0e:61:a9:ef:a7:
86:45:38:66:f4:3c:7b:0b:23:6c:c7:9c:c9:7d:f4:
c9:a5:d1:a9:ea:c2:87:f9:e8:9b:24:c5:8b:aa:d1:
07:89:fe:f9:ed:85:ad:53:4f:78:2d:49:e2:07:2d:
64:72:ac:7a:fe:d2:1a:60:6d:ba:78:bc:e0:8e:15:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:85:56:8E:8D:B0:97:12:CC:FF:79:DE:D9:51:08:F7:2A:40:73:06
X509v3 Authority Key Identifier:
keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:f1:a3:3c:2b:5e:84:f2:b7:ca:54:f5:81:5a:72:32:8a:11:
9b:60:5f:9c:c7:94:48:cd:9c:cc:26:f6:0c:2f:82:53:97:f0:
55:b6:05:c9:51:87:58:89:24:91:36:36:46:c6:af:7a:39:3a:
3b:39:24:40:17:a3:6f:16:05:55:99:9b:06:15:31:1c:c8:6a:
22:d1:89:f4:2c:17:e3:29:5d:82:be:67:1f:3f:c7:c4:ad:d0:
89:72:08:f1:15:dd:c9:1a:62:00:4e:eb:56:63:cc:19:aa:62:
78:4e:f4:34:ae:0f:f7:fe:db:d7:c5:fb:9f:a7:80:e7:ae:bf:
ed:f1:05:5b:33:20:c6:07:b0:5d:87:38:b7:a0:5a:c6:0d:95:
49:17:7f:69:d3:da:1c:ca:23:17:5d:77:1c:9e:74:4a:9b:cd:
fd:71:4a:f3:8a:05:e4:98:21:f5:50:a4:47:28:ef:dd:9a:9b:
dd:87:cd:46:d3:f7:5b:63:3e:a8:47:6a:39:bb:d4:05:80:bc:
a0:85:07:15:44:7c:a8:3a:7f:e9:10:bc:a4:c2:59:44:d9:55:
07:f8:0c:96:cb:97:8f:94:9f:b2:3d:f1:5e:d2:5f:60:d0:ae:
ec:96:6b:df:5f:b2:ae:92:94:0a:b8:90:0b:46:cc:ee:45:8f:
21:1f:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 08:41:14 2026 by rpki-client