
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier: kczjaZG/KqkQtVrJfUmc+MrLlv+1hz5TxRlosktS1RE=
Subject key identifier: 3C:BA:3E:3F:51:D8:11:6A:5E:CB:FB:41:C6:0D:F5:89:A6:9E:47:9E
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 0360
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number: 033D
Signing time: Thu 05 Mar 2026 00:34:53 +0000
Manifest this update: Thu 05 Mar 2026 00:34:52 +0000
Manifest next update: Thu 12 Mar 2026 00:34:52 +0000
Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: NdPUTQ1+aOP4gsetrW949PXP7BWRDXJUCqSu5g1KF5Q=)
2: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: nnwYsXqpriKdgHZ6F2Bjskh6Ji1AomhewkLa8SUVYYs=)
3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: 9v4NKBdRQhuU8DQv3Rod5Fcc10899zvHWabiZx6Nun8=)
4: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: vM0A7WnGvcxI52gcg6mHL5DanZRChz8WZQbZNCoxjuM=)
5: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: WYNTjnlZgwrqZBIU4k28zQZnPO22jdEa1SzcgGRQAiQ=)
6: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: QTw/GKnqOzom+7g2Vy0ugUBB+pLhZarT5O8cic2MYbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 00:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864 (0x360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Mar 5 00:34:52 2026 GMT
Not After : Mar 12 00:34:52 2026 GMT
Subject: CN=69a8cfad-0f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:aa:ea:9c:28:49:be:62:45:f4:74:39:ba:
9c:29:14:59:f9:f1:67:3c:4c:6b:b5:c9:6a:cd:10:
5f:b7:59:66:71:ea:3c:93:0e:7e:23:fc:5d:9c:06:
28:94:91:ae:a9:4d:37:72:76:16:61:64:eb:42:89:
fd:67:f0:17:b6:25:16:d4:c7:a9:c8:01:04:dd:15:
2e:90:99:0b:a3:6c:e5:df:31:49:f7:5d:89:b8:40:
12:e1:78:33:b9:91:89:a9:15:2a:8b:fa:00:d6:a5:
82:44:ec:68:2d:e7:86:bf:bd:de:1e:82:55:eb:52:
34:c0:50:f6:7a:af:d4:01:91:c5:6b:c9:3f:3d:59:
56:f6:36:36:1b:9b:ce:0d:5f:a7:cf:da:5e:d4:c6:
1c:74:6e:3a:60:bb:cb:1f:87:f1:8c:c6:1b:7a:2d:
d1:13:a8:3d:03:fe:9c:c5:1e:12:3d:d2:9f:17:e3:
2a:63:e0:b5:2a:96:e1:99:aa:b8:f5:44:4b:20:b0:
6c:01:24:2b:72:b2:88:89:41:fe:7a:cb:db:35:61:
23:0b:62:53:ca:ee:df:6e:08:91:a1:22:09:64:04:
35:42:17:33:b7:e6:21:2b:b3:61:fe:53:34:54:95:
8a:0f:40:c0:fd:2a:aa:fc:23:d6:89:23:ca:38:d1:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BA:3E:3F:51:D8:11:6A:5E:CB:FB:41:C6:0D:F5:89:A6:9E:47:9E
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e0:5a:d8:53:a7:3b:f7:c2:87:34:15:ba:35:03:99:9b:f5:
fe:87:ea:1f:14:27:85:2b:ff:a4:f5:16:b7:26:bd:91:36:a8:
55:b7:45:1d:20:9a:a8:b7:1b:a4:4f:c7:c0:f0:66:3d:c2:6d:
e7:93:3d:e1:74:0f:ab:73:e1:4a:4e:c9:b0:3d:87:84:9d:9f:
20:42:51:3a:7e:5a:60:35:e2:a1:87:2d:fd:0f:16:a3:49:41:
bb:1e:fc:9b:9c:ae:2a:09:ba:91:67:25:1e:2d:62:43:8b:9f:
70:59:60:a0:bc:d2:a9:26:fb:e3:f5:07:20:33:77:49:4d:91:
75:3d:f9:c3:26:96:25:11:a7:42:52:cb:de:ab:0d:1e:ad:00:
c6:66:d9:21:30:e3:de:95:76:c5:0f:3a:25:b0:3a:ad:2e:64:
24:7d:7e:19:65:97:a9:80:cf:3d:7a:6e:95:24:c4:53:ad:89:
64:4c:ea:c4:50:d0:ff:ad:23:ec:d9:26:ac:4f:21:f7:aa:8a:
b3:0e:5c:ef:b4:b4:44:47:34:4e:62:3f:9a:c3:fb:5a:45:91:
49:8a:dd:b2:77:9d:fb:b5:30:a8:40:9b:96:36:d3:63:8a:50:
5a:99:0e:e7:a2:d8:ce:e0:10:3e:83:26:32:b1:a7:e1:eb:ed:
fc:da:0e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:19:55 2026 by rpki-client