
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
File: r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json)
Hash identifier: KQZ/k74KVy4TcpWfgDd9FV9ZDDFO1jP00SNjrP1+G3w=
Subject key identifier: 5C:1F:7B:6E:36:8D:66:45:DB:F1:60:45:9B:2B:29:BD:DE:E7:05:5D
Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
Manifest number: 017C
Signing time: Sun 01 Mar 2026 05:35:07 +0000
Manifest this update: Sun 01 Mar 2026 05:35:06 +0000
Manifest next update: Sun 08 Mar 2026 05:35:06 +0000
Files and hashes: 1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: MKHmioM//9aGZAVKpsEq29dsnQKasJeUBM1Gn5ulF9U=)
2: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: JbXYoZCeV73k0ydVhueXLAHh7xzomEgWbLFpEGgJxiE=)
3: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: br9VY1Ap5bODWGjIwXH93XykBR4wm+eKQRXiepCLuxo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Validity
Not Before: Mar 1 05:35:06 2026 GMT
Not After : Mar 8 05:35:06 2026 GMT
Subject: CN=69a3d00b-c269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:9a:7c:14:be:73:f9:60:e0:a2:d6:22:4f:
f0:b7:c2:db:ef:9e:3b:c1:c6:d1:17:80:36:fd:a9:
8b:ab:6a:2d:8b:ff:f2:da:1e:9d:bb:82:ec:59:28:
e3:86:6b:ea:7e:d9:e3:7c:11:c2:e1:8d:94:09:94:
50:23:3f:1a:b3:ba:3d:53:87:4b:a9:05:38:72:1e:
a8:2c:a0:e6:11:cb:14:2a:8c:df:38:db:f7:0d:c9:
6a:ba:aa:80:28:09:d9:31:d6:b0:81:ba:ea:80:0f:
39:ff:ba:ac:de:67:ee:f1:19:94:86:9b:85:d9:5d:
24:41:37:95:78:21:bb:29:6c:54:2d:ee:b6:e0:30:
61:70:d3:b0:6f:40:d5:80:70:05:2b:4e:f4:4e:8c:
e9:9f:5c:50:06:96:1a:49:f4:f5:66:7e:68:e1:82:
5d:8b:b2:1c:52:66:78:35:29:35:2e:67:4b:0b:c3:
85:67:ab:80:dc:d8:44:61:a2:fc:03:8e:46:43:19:
0b:b2:b4:16:7f:4e:bf:e8:b4:a8:ef:6a:ca:d2:1d:
4c:5b:a1:23:b3:fc:59:a7:58:e1:4b:55:c0:a2:2c:
30:38:7d:d6:9a:60:48:7b:28:3a:29:79:bf:ff:0e:
44:37:bc:30:35:0b:a3:ea:26:66:5d:4c:28:52:ec:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1F:7B:6E:36:8D:66:45:DB:F1:60:45:9B:2B:29:BD:DE:E7:05:5D
X509v3 Authority Key Identifier:
keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:df:7d:aa:55:a7:e4:e1:fa:ee:43:03:c7:48:72:37:3d:6f:
92:b7:e4:17:55:40:8b:c5:39:21:bc:f8:aa:ae:7b:f1:26:72:
bf:f1:d3:8b:1f:b4:74:bf:c6:17:ad:a3:58:2d:43:e3:7a:bb:
dd:5a:f6:be:d2:a2:e7:19:6f:13:5d:7f:32:05:f1:f1:03:cd:
8b:e2:ee:25:87:e6:10:63:de:34:93:b7:52:bb:e4:db:ce:b1:
0d:76:3c:c9:49:b5:f6:a9:e2:46:1e:c4:ee:ef:35:61:19:53:
87:0d:43:97:ca:81:00:e4:2e:af:2c:81:67:4a:5a:5c:14:e1:
b7:4f:62:64:50:1f:65:09:89:d0:96:bb:2e:03:ff:ed:6c:41:
f6:7b:36:d7:9b:ce:8e:eb:7f:18:7f:50:51:08:4c:4c:42:b6:
e9:8f:cf:47:39:3b:59:64:19:dc:11:77:48:ce:62:e6:a6:e9:
be:d1:b6:71:71:65:e0:3a:c9:77:5c:d8:77:1e:b0:a7:1d:19:
f2:c9:44:b0:5b:6a:32:ae:62:5a:ad:b0:7f:06:9b:cb:ac:92:
96:87:db:2a:6b:50:c9:72:47:68:6f:e8:aa:e8:46:38:b0:1b:
d1:9f:e0:a2:15:0d:d7:c5:62:b5:ba:8a:87:25:bc:2f:92:62:
a9:de:f9:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJBODIxMTAvBgNVBAUTKEFGQjhGRkUxRTg2ODYyOTZCOTk2QzYzQUE5MDJFQTlD
MTI4RjQ4RkUwHhcNMjYwMzAxMDUzNTA2WhcNMjYwMzA4MDUzNTA2WjAYMRYwFAYD
VQQDEw02OWEzZDAwYi1jMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlWyafBS+c/lg4KLWIk/wt8Lb7547wcbRF4A2/amLq2oti//y2h6du4LsWSjj
hmvqftnjfBHC4Y2UCZRQIz8as7o9U4dLqQU4ch6oLKDmEcsUKozfONv3DclquqqA
KAnZMdawgbrqgA85/7qs3mfu8RmUhpuF2V0kQTeVeCG7KWxULe624DBhcNOwb0DV
gHAFK070Tozpn1xQBpYaSfT1Zn5o4YJdi7IcUmZ4NSk1LmdLC8OFZ6uA3NhEYaL8
A45GQxkLsrQWf06/6LSo72rK0h1MW6Ejs/xZp1jhS1XAoiwwOH3WmmBIeyg6KXm/
/w5EN7wwNQuj6iZmXUwoUuziNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwfe242
jWZF2/FgRZsrKb3e5wVdMB8GA1UdIwQYMBaAFK+4/+HoaGKWuZbGOqkC6pwSj0j+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GQkREQUMyNENF
NUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lwYTVsc1k2cVFMcW5CS1BT
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I3al80ZWhvWXBhNWxzWTZxUUxxbkJLUFNQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkE4Mi9GQkREQUMyNENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lw
YTVsc1k2cVFMcW5CS1BTUDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANt99qlWn5OH67kMDx0hyNz1vkrfkF1VAi8U5Ibz4qq578SZyv/HTix+0dL/G
F62jWC1D43q73Vr2vtKi5xlvE11/MgXx8QPNi+LuJYfmEGPeNJO3Urvk286xDXY8
yUm19qniRh7E7u81YRlThw1Dl8qBAOQuryyBZ0paXBTht09iZFAfZQmJ0Ja7LgP/
7WxB9ns215vOjut/GH9QUQhMTEK26Y/PRzk7WWQZ3BF3SM5i5qbpvtG2cXFl4DrJ
d1zYdx6wpx0Z8slEsFtqMq5iWq2wfwaby6ySlofbKmtQyXJHaG/oquhGOLAb0Z/g
ohUN18VitbqKhyW8L5Jiqd75JA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:47 2026 by rpki-client