
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json)
Hash identifier: nqcIu/9ei/Dsk6mTqqzsGVzMOFWQR8NFTZs518fw55A=
Subject key identifier: D5:13:33:D9:A5:5A:04:2A:F2:E0:6F:9A:AE:88:2F:C8:57:B7:46:2F
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial: 09C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
Manifest number: 09A8
Signing time: Sat 28 Feb 2026 20:19:10 +0000
Manifest this update: Sat 28 Feb 2026 20:19:10 +0000
Manifest next update: Sat 07 Mar 2026 20:19:10 +0000
Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: k5lNWDZoP5eUbL4LndWOojPFBjuupUAPt9iBTPDBfBQ=)
2: 359388D8006511F1AA0FA34B566F56BC.roa (hash: LoAeL0RLlGhPEbe9r+NWVl3jOF528hlgHMGyjJwEH8A=)
3: 0A72D294006511F1BE07F947566F56BC.roa (hash: /nSjDkDwZukK3H60lcra1a4qvj9RZBW3Em5XmUDHDDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2503 (0x9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Validity
Not Before: Feb 28 20:19:10 2026 GMT
Not After : Mar 7 20:19:10 2026 GMT
Subject: CN=69a34dbe-386a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:e0:18:c1:d3:03:e4:75:65:db:b8:1d:1f:
d8:77:9f:dd:3b:fb:99:bd:c0:12:ea:ee:ff:83:7d:
56:ea:09:b2:0d:20:d1:e5:bf:c5:a4:b1:40:d3:b0:
ce:50:18:34:08:83:2b:91:c0:53:64:b8:77:be:5b:
29:89:45:e5:c4:2d:65:c8:fb:2a:c3:09:8d:85:3b:
98:a2:9a:e7:fc:10:22:f2:f4:8a:d8:90:77:4f:42:
6f:60:8f:81:45:b7:a7:18:cc:0c:8f:3b:05:ac:04:
95:a4:4e:3f:8e:76:19:2b:78:aa:f6:c9:a6:ef:79:
44:2d:cc:aa:35:f3:37:91:09:23:27:c2:8a:9f:e9:
b1:0a:30:b1:9f:34:f8:c4:47:47:d3:f3:9f:f6:c0:
e4:d5:c3:9a:49:ac:fe:25:7d:e3:0e:a7:ba:49:26:
10:3e:ff:97:e4:36:e4:f2:1c:db:3d:32:6e:ab:e2:
0a:30:25:a3:e0:a5:4a:9b:22:19:3b:33:c5:79:3b:
4c:90:70:a0:df:3c:ba:1d:19:fb:39:35:e5:fd:9c:
fd:09:54:c3:bf:1b:99:ff:ea:0e:7b:db:36:e3:45:
ba:56:56:10:06:fb:b3:aa:38:99:88:c5:18:8f:3e:
6d:91:3b:dd:81:0a:25:fc:26:fd:e0:1e:eb:99:ea:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:13:33:D9:A5:5A:04:2A:F2:E0:6F:9A:AE:88:2F:C8:57:B7:46:2F
X509v3 Authority Key Identifier:
keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3a:e7:30:3b:2e:1d:e8:34:c3:1d:ff:64:25:6d:1c:14:1d:
93:fb:b2:fc:c2:b1:18:03:f8:0f:df:8c:9d:32:da:a9:21:2a:
00:0f:1c:c3:f5:2d:c7:a7:de:39:20:73:e0:6c:7b:f0:be:d7:
ff:e0:f0:6f:bf:5c:ab:a9:de:e1:43:78:d2:df:4b:7c:75:26:
21:e7:17:cc:e4:b3:e6:ed:38:f4:2f:25:c9:8b:e8:32:13:73:
e4:76:be:98:7a:56:69:7e:1f:42:df:3e:42:d3:3d:ae:fa:7c:
12:ec:f3:f8:f9:cd:9d:48:d0:d6:44:6e:e7:c7:b1:72:f3:93:
f1:4d:79:be:a6:5a:51:ba:13:50:2b:21:73:6d:b9:aa:3e:b7:
78:fe:97:21:96:94:c9:2f:15:0f:e3:df:da:e1:13:d8:d1:91:
51:4c:49:ac:d3:66:1a:fc:5c:b7:c0:9e:ab:9a:ee:e4:31:e7:
76:6b:f6:21:0b:47:0c:68:62:ba:a7:47:ef:1c:46:a9:11:6e:
cf:d0:a4:ce:ca:eb:7f:4d:b8:ca:34:98:b3:ad:c6:a0:bc:32:
35:05:55:5a:47:10:b8:9e:f6:69:db:3b:cf:95:e8:1d:8b:0b:
ac:2a:ff:53:73:19:c0:91:f6:90:ad:90:7f:49:ce:bb:01:91:
88:a5:c4:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE
QzZFRTBEMjgwHhcNMjYwMjI4MjAxOTEwWhcNMjYwMzA3MjAxOTEwWjAYMRYwFAYD
VQQDDA02OWEzNGRiZS0zODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArR7gGMHTA+R1Zdu4HR/Yd5/dO/uZvcAS6u7/g31W6gmyDSDR5b/FpLFA07DO
UBg0CIMrkcBTZLh3vlspiUXlxC1lyPsqwwmNhTuYoprn/BAi8vSK2JB3T0JvYI+B
RbenGMwMjzsFrASVpE4/jnYZK3iq9smm73lELcyqNfM3kQkjJ8KKn+mxCjCxnzT4
xEdH0/Of9sDk1cOaSaz+JX3jDqe6SSYQPv+X5Dbk8hzbPTJuq+IKMCWj4KVKmyIZ
OzPFeTtMkHCg3zy6HRn7OTXl/Zz9CVTDvxuZ/+oOe9s240W6VlYQBvuzqjiZiMUY
jz5tkTvdgQol/Cb94B7rmeoXFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUTM9ml
WgQq8uBvmq6IL8hXt0YvMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB
ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a
NzlMbmN2bTZlbnZjYnVEU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALjrnMDsuHeg0wx3/ZCVtHBQdk/uy/MKxGAP4D9+MnTLaqSEqAA8cw/Utx6fe
OSBz4Gx78L7X/+Dwb79cq6ne4UN40t9LfHUmIecXzOSz5u049C8lyYvoMhNz5Ha+
mHpWaX4fQt8+QtM9rvp8Euzz+PnNnUjQ1kRu58excvOT8U15vqZaUboTUCshc225
qj63eP6XIZaUyS8VD+Pf2uET2NGRUUxJrNNmGvxct8Ceq5ru5DHndmv2IQtHDGhi
uqdH7xxGqRFuz9Ckzsrrf024yjSYs63GoLwyNQVVWkcQuJ72ads7z5XoHYsLrCr/
U3MZwJH2kK2Qf0nOuwGRiKXE0g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:28 2026 by rpki-client