
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
File: C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json)
Hash identifier: EQqD2aKo2J7o1Ff3DAUtm0AK8cq9cLxc4MvhA+k+bss=
Subject key identifier: 6E:81:4F:EC:10:63:D7:52:6E:52:AB:F3:17:FA:14:1E:BC:D3:E6:CD
Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F
Certificate issuer: /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
Certificate serial: 05CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
Manifest number: 05C8
Signing time: Sat 28 Feb 2026 23:37:08 +0000
Manifest this update: Sat 28 Feb 2026 23:37:07 +0000
Manifest next update: Sat 07 Mar 2026 23:37:07 +0000
Files and hashes: 1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: DjMQGsdEWUXZAqjr6LLH7pkt/k8U0BSRGQXFk7viuvQ=)
2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: Q+qQNh06TWJSPioowQk9TdPpmfJvoadRPGqElrlppYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl
rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:37:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1486 (0x5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
Validity
Not Before: Feb 28 23:37:07 2026 GMT
Not After : Mar 7 23:37:07 2026 GMT
Subject: CN=69a37c24-e97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:9e:c2:5f:a9:14:03:ff:e4:2b:e7:ec:b7:
c4:3b:f1:41:f1:bd:20:91:1e:2c:ee:f9:2b:69:0e:
0b:35:81:36:27:52:5b:c9:d8:e0:a1:c1:be:cd:a2:
30:2e:19:0b:25:29:1d:41:49:e6:b4:b3:8f:5c:be:
f7:2a:52:fa:18:5f:cd:44:7c:8c:00:fc:ea:72:04:
a3:a4:70:81:0e:e2:30:a5:b0:53:37:67:53:32:d5:
67:88:97:73:84:16:2b:51:4e:0b:88:68:72:f5:06:
2b:c4:f9:75:5e:17:2c:4d:a4:b8:ca:33:79:b8:10:
44:e5:cb:8a:c3:9a:94:e5:fd:a2:49:27:ea:cd:19:
88:fb:6f:79:ce:45:25:db:ba:f2:4f:a5:85:cf:f4:
8b:24:3c:ab:f1:90:d8:58:eb:31:1f:4d:d1:e2:b0:
99:7a:c6:52:85:03:67:67:bd:13:f3:95:03:c8:e6:
84:7d:9b:e9:b7:ca:78:94:24:24:f1:7f:d8:51:d5:
ec:c8:52:be:56:ea:74:51:05:59:f5:1e:e9:1f:53:
e9:e2:a8:cd:0a:b9:43:05:3b:40:7b:4a:39:80:d0:
08:f5:8b:15:f2:55:9e:96:63:90:b6:b1:60:58:3a:
a5:f9:9b:0a:5c:f5:df:99:b8:39:70:c4:6c:2e:f5:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:4F:EC:10:63:D7:52:6E:52:AB:F3:17:FA:14:1E:BC:D3:E6:CD
X509v3 Authority Key Identifier:
keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:5c:83:71:07:21:d1:e1:43:a1:96:81:f6:71:b5:4f:c6:9a:
fa:6f:72:63:8f:b6:ce:61:df:68:6a:3f:66:18:62:08:73:4e:
ea:4a:c9:06:7c:18:2e:f0:cd:dd:e5:e8:59:d5:12:0a:e4:65:
ff:05:72:03:6e:a8:70:47:90:9c:c9:48:6c:0e:8e:7b:b0:c3:
fe:a7:8a:0a:90:24:97:0a:51:42:c2:d1:f7:dd:a2:e8:b9:95:
58:a1:c7:4b:f2:35:c8:86:d1:ca:b1:14:6d:86:68:b0:5f:47:
04:75:20:90:ab:1c:aa:a4:6b:f8:07:b5:5d:ec:ec:9d:7c:cd:
7a:ab:2c:9b:6f:d8:32:f2:f4:e4:01:01:c5:1f:83:6f:e2:b7:
38:62:27:34:c8:98:b2:dd:70:35:af:7f:83:88:b4:e8:ef:8f:
e0:a5:b5:bf:78:4c:60:04:3d:5b:00:05:93:65:63:ee:fd:a5:
76:3c:07:71:be:4a:9a:a9:76:4c:01:31:c1:1e:dc:bb:d6:70:
5f:5c:88:e3:dc:c5:1f:d0:ce:4a:30:b2:f8:14:e7:b1:e3:eb:
0f:1f:17:32:07:a8:4a:66:41:04:68:cf:e6:67:dc:b7:ab:08:
0b:4a:b9:50:cb:8a:ff:ad:92:97:ba:d2:77:55:b2:ea:3b:0b:
d5:d8:2f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:54 2026 by rpki-client