
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json)
Hash identifier: kM2U+TwGmqbxRw5koxOmqrGAMWNwkpmMn+gekDv7EPU=
Subject key identifier: C8:9C:98:A1:11:95:A5:35:82:73:B3:16:47:0D:D8:88:EF:A6:9B:66
Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
Manifest number: F9
Signing time: Fri 17 Apr 2026 05:58:15 +0000
Manifest this update: Fri 17 Apr 2026 05:58:14 +0000
Manifest next update: Fri 24 Apr 2026 05:58:14 +0000
Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: zX5zyVsIK6lDFx2Eyg8TFohPkx+SyB+hzMwEELVSNjY=)
2: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: qt3HSjdPuhwdbu7y+IBM5bXY+abtccfmEZI2ywYOKv4=)
3: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: aHk0t2Hy2gHuEUEuWNA047fzWOktHu8vocVNcFbAJjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Validity
Not Before: Apr 17 05:58:14 2026 GMT
Not After : Apr 24 05:58:14 2026 GMT
Subject: CN=69e1cbf7-6271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:c5:30:5c:a4:48:15:fe:8f:0c:90:46:38:
5f:f6:3d:0e:fb:60:3a:f6:96:42:8a:e1:08:3d:59:
16:71:90:60:b6:ed:9a:a6:45:7f:63:58:34:94:05:
b5:7d:e2:82:79:05:9a:27:7f:30:64:6f:fd:05:03:
c7:28:f7:59:7f:57:28:ca:68:7d:e8:a0:da:f2:8e:
a9:db:de:d9:c9:1d:a9:d7:f1:98:0a:d8:ec:e6:5a:
ba:fb:98:66:5b:20:6f:a5:86:72:3a:29:a5:31:26:
e2:1d:93:f6:6a:f2:6d:73:0d:83:16:46:42:d5:cd:
81:6e:97:23:74:4a:5c:d6:e5:ad:19:47:1a:7a:dd:
0f:69:0d:b6:0a:40:56:57:86:5c:ca:5a:04:86:67:
34:bf:80:71:a7:cf:14:ad:ec:0b:a8:5c:9a:8b:1b:
57:95:70:33:6c:82:a4:4e:d4:87:f9:b7:69:40:74:
74:4c:fa:d0:8b:44:b6:1b:a2:11:fc:10:26:0a:9d:
0e:b7:75:5e:71:c1:b5:8c:87:4d:e1:18:44:e0:5c:
92:b3:ed:9c:25:f1:7c:25:66:b7:88:4d:66:a1:48:
78:59:77:63:59:30:60:6f:6b:18:d1:ec:f9:46:35:
57:a8:30:d9:8d:7e:d3:b0:e6:56:99:bc:72:ad:8b:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:98:A1:11:95:A5:35:82:73:B3:16:47:0D:D8:88:EF:A6:9B:66
X509v3 Authority Key Identifier:
keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1c:05:82:8a:ce:f8:07:32:2c:20:67:28:0f:aa:99:f2:56:
36:13:8d:61:eb:82:4b:f2:0b:6f:eb:cf:a8:4c:9b:65:ef:ea:
1d:c7:ff:c7:aa:20:36:92:dd:85:07:c0:07:69:52:f3:dc:b4:
ae:f1:c6:85:90:c0:fb:19:29:b5:2d:91:60:18:04:0d:3b:a2:
0b:38:e2:18:a3:08:d1:8b:5e:67:5b:be:5c:57:c7:95:4b:4d:
88:47:2f:c3:58:68:93:62:bb:87:de:26:f0:14:a4:a8:43:a8:
b0:5d:34:71:ff:4b:7d:7a:83:22:e2:3e:62:8e:d1:58:4b:12:
94:e7:60:77:0e:de:07:54:f6:ee:74:cb:e6:0c:54:20:da:4e:
9d:18:c9:99:ea:38:3a:35:85:3a:1b:78:99:39:6d:a3:fd:fc:
95:dc:2d:60:e6:65:92:84:a6:31:8a:93:e8:9d:bc:1d:9d:ef:
22:7b:20:51:aa:90:6a:99:5c:2c:dd:03:e0:9e:b9:ef:3a:c3:
18:bf:46:b1:5c:5a:cd:fe:c3:9a:81:4b:49:f7:6d:3b:86:4a:
ff:fd:d3:8a:80:aa:31:c4:22:52:46:eb:d6:c5:f5:28:c4:44:
e0:ab:3c:96:53:8b:cc:7e:b8:c0:e4:2f:09:af:bb:c3:0f:4d:
c0:b8:c2:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjZBM0MxMTAvBgNVBAUTKEVFODE5QTQ5QjhDOEE4NDQxM0VFOEZFODMyNkVGMTM3
RjUxODVDNjYwHhcNMjYwNDE3MDU1ODE0WhcNMjYwNDI0MDU1ODE0WjAYMRYwFAYD
VQQDEw02OWUxY2JmNy02MjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq6TFMFykSBX+jwyQRjhf9j0O+2A69pZCiuEIPVkWcZBgtu2apkV/Y1g0lAW1
feKCeQWaJ38wZG/9BQPHKPdZf1coymh96KDa8o6p297ZyR2p1/GYCtjs5lq6+5hm
WyBvpYZyOimlMSbiHZP2avJtcw2DFkZC1c2BbpcjdEpc1uWtGUcaet0PaQ22CkBW
V4ZcyloEhmc0v4Bxp88UrewLqFyaixtXlXAzbIKkTtSH+bdpQHR0TPrQi0S2G6IR
/BAmCp0Ot3VeccG1jIdN4RhE4FySs+2cJfF8JWa3iE1moUh4WXdjWTBgb2sY0ez5
RjVXqDDZjX7TsOZWmbxyrYvBIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMicmKER
laU1gnOzFkcN2IjvpptmMB8GA1UdIwQYMBaAFO6Bmkm4yKhEE+6P6DJu8Tf1GFxm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkEzQy83QkZCNENBQ0M2
QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi83b0dhU2JqSXFFUVQ3b19vTW03eE5fVVlY
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdvR2FTYmpJcUVRVDdvX29NbTd4Tl9VWVhHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NkEzQy83QkZCNENBQ0M2QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi83b0dhU2JqSXFF
UVQ3b19vTW03eE5fVVlYR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADRwFgorO+AcyLCBnKA+qmfJWNhONYeuCS/ILb+vPqEybZe/qHcf/x6ogNpLd
hQfAB2lS89y0rvHGhZDA+xkptS2RYBgEDTuiCzjiGKMI0YteZ1u+XFfHlUtNiEcv
w1hok2K7h94m8BSkqEOosF00cf9LfXqDIuI+Yo7RWEsSlOdgdw7eB1T27nTL5gxU
INpOnRjJmeo4OjWFOht4mTlto/38ldwtYOZlkoSmMYqT6J28HZ3vInsgUaqQaplc
LN0D4J657zrDGL9GsVxazf7DmoFLSfdtO4ZK//3TioCqMcQiUkbr1sX1KMRE4Ks8
llOLzH64wOQvCa+7ww9NwLjCgQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:50 2026 by rpki-client