
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier: ualHpHycRuEOiB6sLhqtR1BwLff52c7/A3KIz9eyKhM=
Subject key identifier: 89:A1:18:CF:5F:DA:28:20:BF:1A:6F:90:5D:52:59:21:D2:F3:0B:D2
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 0362
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number: 033F
Signing time: Mon 09 Mar 2026 00:28:30 +0000
Manifest this update: Mon 09 Mar 2026 00:28:29 +0000
Manifest next update: Mon 16 Mar 2026 00:28:29 +0000
Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: Zj4coUBc53YOJpiRjTBQhPzHOXMVY32p4qH7YVYVc0I=)
2: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: nnwYsXqpriKdgHZ6F2Bjskh6Ji1AomhewkLa8SUVYYs=)
3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: 9v4NKBdRQhuU8DQv3Rod5Fcc10899zvHWabiZx6Nun8=)
4: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: QTw/GKnqOzom+7g2Vy0ugUBB+pLhZarT5O8cic2MYbc=)
5: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: WYNTjnlZgwrqZBIU4k28zQZnPO22jdEa1SzcgGRQAiQ=)
6: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: vM0A7WnGvcxI52gcg6mHL5DanZRChz8WZQbZNCoxjuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Mar 2026 00:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Mar 9 00:28:29 2026 GMT
Not After : Mar 16 00:28:29 2026 GMT
Subject: CN=69ae142d-db60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:50:3d:6a:22:0c:b0:db:1b:6a:62:d7:d3:
cb:df:eb:e5:95:81:b4:8f:02:2f:7c:87:dd:e5:7c:
f1:ef:86:cd:2b:73:20:59:92:68:c1:ee:4f:a4:73:
fd:24:f2:06:33:3f:d3:0b:63:3c:20:b3:63:c6:7a:
07:f9:4f:d1:c5:81:1b:72:e1:c6:97:fb:33:c4:c9:
82:bc:3c:6e:88:96:6c:36:df:61:96:83:53:6e:df:
99:42:61:a8:52:bd:7f:05:24:f2:25:2b:84:f4:7a:
12:8f:b3:09:33:6b:bc:c5:33:6a:03:d4:27:71:94:
27:c9:72:f9:1d:f5:98:42:ca:8a:f4:ff:ee:f3:0e:
8a:2c:b8:f5:58:7c:10:c5:34:b2:d4:02:4e:2f:c1:
0e:0c:63:7e:26:44:22:08:5e:aa:b3:66:d8:a0:5f:
2c:33:43:57:7a:b8:5b:c3:e1:f8:11:8d:f5:33:5f:
0f:eb:7a:1b:f8:40:e2:84:24:39:b7:61:c9:d8:0d:
5d:c6:ce:6c:fb:c1:a9:cb:ac:bd:f3:5b:22:25:4e:
8e:37:6d:66:24:7c:2c:ae:f0:24:5c:c0:5e:18:fe:
1b:46:dc:cc:1b:5e:9b:4b:96:0c:62:f1:5b:63:f7:
73:c7:fe:a3:7a:63:fc:8f:a7:ee:bc:36:76:82:59:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A1:18:CF:5F:DA:28:20:BF:1A:6F:90:5D:52:59:21:D2:F3:0B:D2
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:49:13:7e:d1:fa:5b:94:47:4d:fb:e4:f5:d5:09:f3:82:d0:
1b:2d:84:f2:fa:62:d2:e7:03:e2:ba:5d:9f:08:98:9e:85:53:
69:8a:3c:d8:aa:46:56:9f:21:89:07:66:8e:96:23:17:18:64:
43:ba:c9:ba:ec:95:ee:b7:80:ad:4e:53:df:1c:41:6f:d1:59:
b9:27:df:8b:e4:0f:95:2f:04:f3:6a:51:9e:3c:49:a0:0d:aa:
f6:6e:5c:81:d1:69:27:a0:3d:65:0b:4b:ae:9b:d6:d4:f8:c6:
c6:d5:fc:17:8c:ba:b1:c6:5d:ed:65:e5:a7:6d:1c:79:f7:35:
98:de:f4:fe:5e:15:0a:c5:53:7a:15:b1:35:df:01:89:b8:01:
d9:a1:5f:56:5c:bc:9f:88:a0:be:53:aa:13:fa:f6:e5:5e:3c:
d9:1a:a7:0c:cb:be:4c:f8:5f:93:88:c7:74:57:d0:fd:de:5a:
1b:40:76:b0:8a:d7:a5:f4:85:09:73:e6:94:4d:c9:a5:e7:73:
75:e8:df:61:cb:e9:da:17:b4:88:6e:f1:df:99:32:2d:a3:7e:
85:ad:78:96:fc:6b:89:ec:39:9f:0b:ef:0d:5a:4a:49:3b:30:
a1:72:be:d0:f8:95:4c:23:98:25:72:69:56:81:de:a7:7e:b3:
c7:e8:0c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 08:10:17 2026 by rpki-client