
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json)
Hash identifier: MrRW04LsqiI57Unh9fm4VSTaRK/pJaXNm0elwdpYDao=
Subject key identifier: A2:A9:76:23:C4:EC:38:B0:12:33:30:3F:C0:6F:44:37:15:2F:E9:A1
Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
Manifest number: EC
Signing time: Sun 01 Mar 2026 07:33:59 +0000
Manifest this update: Sun 01 Mar 2026 07:33:58 +0000
Manifest next update: Sun 08 Mar 2026 07:33:58 +0000
Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: lRGKaXT4JQGLqbZFZOKHXMQxz5bV6A917rCoud6A3RQ=)
2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: yg1FmYWx1FZHdQ4owstnGeV2Nc29yPQYjO3wps9oxuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Validity
Not Before: Mar 1 07:33:58 2026 GMT
Not After : Mar 8 07:33:58 2026 GMT
Subject: CN=69a3ebe6-a056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:87:0b:4d:7f:a3:44:ab:ae:85:ff:de:8c:
d9:f5:a5:67:a6:31:41:ef:d0:06:1b:4a:ea:02:0d:
a0:fa:70:fb:f7:9b:c1:43:1d:ef:81:4f:d4:5c:5f:
22:bd:23:d0:f7:d5:8e:69:ac:b0:55:71:d8:64:63:
82:7a:48:e0:f2:4e:13:37:10:38:4f:89:fa:28:1f:
62:fe:df:04:16:df:cb:13:30:32:cb:0b:d6:1d:cd:
e7:39:5c:ae:7c:14:14:e6:82:87:5e:07:ef:ec:70:
13:64:d0:9d:d2:b2:0b:9f:b4:86:22:70:d1:4b:2c:
54:09:49:dd:3f:bc:73:80:7d:86:04:10:87:0c:0f:
9b:7b:43:33:42:fc:18:03:14:62:86:42:03:78:e8:
c2:53:ec:88:b7:d1:b7:52:ba:f1:ec:c2:07:14:b1:
ba:c2:28:ad:49:01:da:ba:41:54:7a:f8:18:2d:2c:
f9:3b:d9:6b:0e:e9:8d:10:92:eb:34:87:17:93:f7:
a5:48:77:7e:a8:c4:b3:17:f7:02:a0:1f:1c:7b:9f:
4a:c7:1f:12:fe:2a:a3:03:b3:c5:3d:d9:ba:eb:c3:
ee:93:7f:67:a7:10:04:01:f6:ab:8f:a5:6e:7d:2f:
5f:1f:27:3b:b3:66:7d:df:04:94:c9:78:e1:11:d1:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A9:76:23:C4:EC:38:B0:12:33:30:3F:C0:6F:44:37:15:2F:E9:A1
X509v3 Authority Key Identifier:
keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f5:a6:2e:6f:5f:b1:0f:f4:cf:2b:b5:c9:12:17:f2:47:ad:
44:87:69:23:dd:00:ea:24:ad:30:6e:9f:c5:8e:47:fe:6f:84:
31:33:f4:70:01:71:4f:15:f6:76:c3:e8:f9:39:3d:79:9a:b7:
d3:8e:f6:ad:01:e2:fb:52:c1:8a:9c:43:27:ad:38:37:3c:60:
c6:1c:51:32:72:21:e5:6a:2d:b1:34:5d:d7:a0:1c:c0:d8:80:
29:b0:38:7a:89:57:96:e5:01:b6:78:9f:18:49:66:da:69:f5:
53:1a:53:d4:54:2b:8e:23:b0:6d:43:55:3d:98:b6:bc:47:a4:
7b:fa:d3:c0:41:cf:39:42:de:ff:4d:3d:24:57:8c:7d:47:99:
8b:7b:f2:0e:7a:ff:40:87:ec:c0:6c:5e:65:36:25:1d:2e:72:
21:02:56:47:14:2a:5c:4c:73:4f:18:d5:6b:d5:3c:a7:84:67:
b1:d9:ab:ce:00:d8:5a:0c:98:7a:53:fa:cb:89:bb:c2:43:90:
67:b3:47:d6:ab:62:d8:a7:11:8a:ec:ad:86:7f:05:d1:56:15:
4f:14:97:f5:8e:ac:6b:d3:35:14:51:f8:f5:06:f4:ea:68:78:
57:57:07:e0:d1:ee:5f:c8:ce:35:9e:2f:80:22:92:28:33:91:
5f:01:1d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:58 2026 by rpki-client