
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json)
Hash identifier: uLsRAllNplmG1EhukXo+iD758v0EGwKq0MqcTBgafx4=
Subject key identifier: 1F:97:9E:D2:3B:40:72:DC:86:21:84:AD:F8:6B:86:44:3D:A2:51:FF
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial: 0484
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
Manifest number: 0442
Signing time: Sat 13 Jun 2026 00:25:25 +0000
Manifest this update: Sat 13 Jun 2026 00:25:25 +0000
Manifest next update: Sat 20 Jun 2026 00:25:25 +0000
Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: 0a290GWm7VxyWylx0Bs67D+tVdLvw7Wtn8nFtgmA2EY=)
2: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: 1cM14NhAHexpysqpl1gCbKReRuyBQxaQgkUwJjz7qxw=)
3: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: XU66OcU3fnYJls4O62nuYW+aPPgFO6XUlfyCsJCffUE=)
4: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: 6txwDANkb+stD+30rgYCUnBhArG1SXPn7l/lsuR8IgY=)
5: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: klFS2EwojWiZ7PvsY5ywexl5W5eODCB0mjNce2fBPs8=)
6: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: PmWlH9hI8UDfrum8ljKdCPWBn/RfhOuKClthQ5ZzQA0=)
7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: gWfYJLFQiUGGCySMAATeYDsxEOK4XTc6fxDY8vUTdP4=)
8: 4DD5897E501911F1B9231017C2833773.roa (hash: 74iwg4T3jS20u81MSENAOAD9vyDefXzwbL5rlNQ4X/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156 (0x484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Validity
Not Before: Jun 13 00:25:25 2026 GMT
Not After : Jun 20 00:25:25 2026 GMT
Subject: CN=6a2ca375-b6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:92:04:d3:ab:7c:5b:27:75:7f:50:d3:6a:
1a:95:1a:d8:ae:6d:7b:eb:b4:0e:d1:64:a8:d2:73:
4d:88:f5:90:1b:5e:8e:3a:12:eb:61:3f:61:c0:07:
99:e2:96:f3:0f:b5:bd:f6:6b:5e:7c:50:80:4f:ba:
a6:49:92:e0:ef:bc:69:14:d8:99:1f:60:ee:24:43:
5c:3c:28:18:7c:00:62:c8:a5:48:c3:92:ff:31:56:
42:48:6c:d9:d8:40:b5:32:8a:8b:50:05:4a:5b:6b:
66:50:07:c8:4a:fb:08:9f:e0:0d:be:21:49:9b:4e:
17:fe:49:df:6e:1e:ff:d3:14:80:08:a9:04:60:05:
9e:2b:9b:ed:f2:b2:66:6a:29:d2:60:43:57:8b:d8:
5a:ba:fe:2b:7a:7b:0b:46:f5:60:fd:78:b5:31:cf:
84:92:b8:23:8e:be:2f:8e:a8:fb:38:cf:f0:8e:94:
ca:b8:82:ff:a7:65:9d:28:25:c2:5d:2f:80:16:a5:
24:d1:8c:54:a7:e5:a3:c3:29:c8:bd:fa:a6:5e:34:
0e:34:9e:e7:98:61:37:bb:fc:22:2c:1c:e6:e2:ae:
f8:e7:74:37:b4:39:62:a6:1f:77:0a:f0:32:48:7e:
eb:ea:3b:4d:f3:04:af:2d:5a:59:a5:8a:06:7c:e5:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:9E:D2:3B:40:72:DC:86:21:84:AD:F8:6B:86:44:3D:A2:51:FF
X509v3 Authority Key Identifier:
keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1f:6c:f7:06:45:af:c3:9a:61:06:b7:ab:c8:65:ec:c9:8a:
ce:f8:03:6e:61:89:a2:db:9b:ec:a6:b9:13:ff:28:88:58:59:
71:9b:b9:d1:47:7e:80:5f:42:08:ac:2a:4e:0c:ec:0f:3b:4c:
de:c3:d7:b0:f5:44:5e:97:20:d9:03:ec:76:97:45:f7:07:0a:
f6:90:b9:2f:48:2c:e8:1e:ce:7c:31:62:7a:b0:95:0d:fb:56:
b1:d6:f4:a8:95:03:07:c5:a6:76:db:9d:b8:9b:e0:6b:8d:dd:
f6:fd:7f:c9:db:bf:ed:23:1c:91:5a:2f:f1:78:55:a4:01:48:
83:c2:23:d4:c6:c3:f1:25:bb:5d:c0:63:17:dd:68:5a:23:0e:
5a:bc:b3:ec:d8:1a:ac:aa:0d:a2:7b:0a:c9:9c:7d:bb:58:7d:
fe:34:62:7f:3d:fe:f7:cd:0d:4f:91:9d:f3:bb:8f:7d:f7:a7:
1c:52:6f:fd:d9:ff:a8:1b:e0:d2:50:11:61:d5:9e:97:e4:79:
d1:37:2f:7f:35:66:d8:f1:b2:d1:81:a7:d6:f4:5c:5d:93:1e:
29:7d:7c:a1:13:30:8c:f1:ab:f0:2a:19:28:72:d4:6b:4d:c1:
90:c8:de:a6:ff:20:58:1e:de:92:80:0c:27:bb:5e:9d:17:4d:
e5:74:4d:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD
N0VGRUZCMjgwHhcNMjYwNjEzMDAyNTI1WhcNMjYwNjIwMDAyNTI1WjAYMRYwFAYD
VQQDEw02YTJjYTM3NS1iNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA35ySBNOrfFsndX9Q02oalRrYrm1767QO0WSo0nNNiPWQG16OOhLrYT9hwAeZ
4pbzD7W99mtefFCAT7qmSZLg77xpFNiZH2DuJENcPCgYfABiyKVIw5L/MVZCSGzZ
2EC1MoqLUAVKW2tmUAfISvsIn+ANviFJm04X/knfbh7/0xSACKkEYAWeK5vt8rJm
ainSYENXi9hauv4rensLRvVg/Xi1Mc+Ekrgjjr4vjqj7OM/wjpTKuIL/p2WdKCXC
XS+AFqUk0YxUp+WjwynIvfqmXjQONJ7nmGE3u/wiLBzm4q7453Q3tDliph93CvAy
SH7r6jtN8wSvLVpZpYoGfOUM9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+XntI7
QHLchiGErfhrhkQ9olH/MB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC
QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5
V0drQkZ0YnV4NzNINy0teWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALh9s9wZFr8OaYQa3q8hl7MmKzvgDbmGJotub7Ka5E/8oiFhZcZu50Ud+gF9C
CKwqTgzsDztM3sPXsPVEXpcg2QPsdpdF9wcK9pC5L0gs6B7OfDFierCVDftWsdb0
qJUDB8WmdtuduJvga43d9v1/ydu/7SMckVov8XhVpAFIg8Ij1MbD8SW7XcBjF91o
WiMOWryz7NgarKoNonsKyZx9u1h9/jRifz3+980NT5Gd87uPffenHFJv/dn/qBvg
0lARYdWel+R50TcvfzVm2PGy0YGn1vRcXZMeKX18oRMwjPGr8CoZKHLUa03BkMje
pv8gWB7ekoAMJ7tenRdN5XRNNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:00 2026 by rpki-client