
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json)
Hash identifier: ckdD31pK6//p3SMcNOBusija1QPY+gbjyt+fi9jTW+s=
Subject key identifier: D8:3A:C0:CC:8C:17:91:1B:43:1B:BE:14:67:70:BA:B7:B4:F4:86:EC
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial: 09E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
Manifest number: 09C2
Signing time: Thu 16 Apr 2026 19:53:39 +0000
Manifest this update: Thu 16 Apr 2026 19:53:39 +0000
Manifest next update: Thu 23 Apr 2026 19:53:39 +0000
Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: 9JynZFTk9DvsVNsuK6Z4ov6kTj8ZxomzDwLjJzFbe7I=)
2: 359388D8006511F1AA0FA34B566F56BC.roa (hash: ZOtwRxhmupTieRo9qgJrLBkzO+gTqGzLiKJz701clvc=)
3: 0A72D294006511F1BE07F947566F56BC.roa (hash: E/Iz9/9M4AyqWvgd1aB5MPhf6Qtoegq5pv3fO35/BF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Validity
Not Before: Apr 16 19:53:39 2026 GMT
Not After : Apr 23 19:53:39 2026 GMT
Subject: CN=69e13e43-42c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:c1:a9:86:6d:e8:09:ac:0a:f7:af:f1:1c:
47:90:1d:9f:ae:be:6f:92:43:d8:15:63:9c:78:b8:
55:27:4f:61:42:b3:4d:ea:de:28:5e:8e:9c:df:04:
b3:81:c1:c8:1f:98:ee:5f:c6:9b:75:5d:4f:b5:91:
c7:34:c6:3f:d8:c9:01:d3:25:cd:8f:c0:e8:e5:65:
85:b1:73:3a:be:61:20:96:2b:22:fa:8f:94:7f:16:
f6:25:26:ec:e8:7c:3b:55:49:c8:eb:5f:2d:9c:b3:
ff:7d:73:65:0c:50:74:fd:08:dd:72:88:fd:6e:fa:
31:31:22:b8:98:7d:68:28:57:00:d5:ee:f2:b5:19:
59:4c:76:16:05:3a:68:e1:4f:a6:b9:f6:48:85:93:
bd:6c:70:d7:6f:0d:50:73:0f:c4:db:a2:08:1e:76:
c2:f8:bd:81:f1:18:7e:3c:18:9f:13:ce:e6:48:60:
23:47:87:cb:9f:74:9e:20:88:d9:c8:a7:7e:97:46:
e0:60:52:41:2b:28:48:7e:44:27:35:c6:a1:6b:fb:
4d:8c:3d:5d:21:f3:b7:45:e3:27:8a:c6:fd:9d:18:
c3:14:7f:f2:ab:93:09:7a:78:e0:70:34:03:9d:4f:
1a:3f:0a:ef:c2:c6:4f:13:af:93:64:08:28:0d:93:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3A:C0:CC:8C:17:91:1B:43:1B:BE:14:67:70:BA:B7:B4:F4:86:EC
X509v3 Authority Key Identifier:
keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:36:ff:e7:68:8f:31:14:44:f2:23:9d:7b:d3:4c:f5:1f:51:
b1:91:eb:32:12:38:d8:25:05:bb:fc:d5:e2:23:65:1b:9f:9b:
18:db:38:69:91:89:b4:2a:f5:0a:ff:dc:91:6c:af:2a:73:dd:
b3:7d:e8:e4:28:dd:b8:f2:0b:65:a4:64:4a:57:ab:e3:62:4f:
f5:76:9d:1d:6c:d8:f8:93:f1:be:30:5d:96:b5:bf:21:45:f8:
f1:bc:37:c8:8f:63:0e:f2:58:83:e6:c0:a2:45:c4:a9:60:b1:
44:15:43:fc:be:0c:70:c6:c2:e1:74:21:13:42:e7:01:d0:b4:
2e:20:4b:5a:b0:e1:5d:d5:5c:b9:a8:bf:2f:43:4c:72:88:06:
be:2d:27:4a:30:77:65:89:0b:38:29:38:9c:30:75:4a:5f:ab:
f3:88:17:55:5f:c8:7a:bf:19:d9:71:02:cb:7f:0f:42:ae:9e:
e2:20:b9:49:d7:5f:b2:82:1c:74:d1:14:e6:69:bb:0d:c7:58:
31:21:15:d1:75:29:be:6d:87:ab:a7:01:2d:b0:6c:61:92:b2:
ed:b2:3a:32:e0:78:9c:a6:49:f5:ca:2f:6f:4e:41:35:d7:1b:
6e:3a:ae:2d:88:55:4f:02:20:71:ad:1b:68:c6:e4:68:67:71:
97:23:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:05 2026 by rpki-client