
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json)
Hash identifier: hULIRlgdj0wk83XvsxCJ/lmQftQMMCTvMFZjmBeRXkQ=
Subject key identifier: C3:57:12:80:47:30:DD:66:F4:CA:42:45:8A:14:35:D5:98:B6:0F:85
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial: 0AF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
Manifest number: 0ADC
Signing time: Sat 28 Feb 2026 19:41:05 +0000
Manifest this update: Sat 28 Feb 2026 19:41:04 +0000
Manifest next update: Sat 07 Mar 2026 19:41:04 +0000
Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: SWZH1hLapYJUW+LAebv+UqYn77lHpCv0wx23ENKJWQk=)
2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: vlc/HMnT+dmU0EXqzRPiNqLBWzJ/ff9nnfD+i3qECck=)
3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: bdTMJLj7GNbxl+9xXhg20ezjxC2h7OyoShduX99tNWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2803 (0xaf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Validity
Not Before: Feb 28 19:41:04 2026 GMT
Not After : Mar 7 19:41:04 2026 GMT
Subject: CN=69a344d0-b141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:55:be:ab:2b:8f:ee:67:c3:d9:01:6c:7e:0b:
68:0d:b9:b8:a7:8c:27:18:dc:43:86:79:b2:bb:75:
24:76:03:54:a0:78:93:06:05:3c:1e:f2:cc:1c:00:
38:27:cd:65:04:05:d6:4f:6b:ae:ec:33:b6:8c:1c:
93:2a:ba:e6:ec:26:2b:0a:a7:20:2b:8c:ef:e0:18:
46:48:f2:bb:47:3d:bc:30:0f:ea:15:73:e0:a6:db:
d7:79:36:43:a0:da:cd:d4:82:91:f2:6f:68:6c:56:
05:e1:67:5f:c1:f6:fa:bd:b7:3b:2e:fa:96:5d:89:
7f:cc:02:66:bd:00:5e:07:8d:51:7d:74:6c:2a:af:
81:67:3f:17:b8:2f:7a:6a:c1:61:e3:a0:b4:5b:e3:
68:fb:bb:32:47:cd:f2:21:a0:ad:6b:65:53:33:69:
65:f8:61:9c:c1:d8:c2:b3:b9:6c:f6:99:4b:08:5c:
04:bf:97:da:20:39:a4:c1:ac:d0:cf:19:22:47:87:
e0:bd:fe:4f:7e:0b:84:78:fd:33:1e:62:f4:ce:ee:
ea:24:85:10:e0:29:14:11:95:96:68:d5:b8:94:b6:
2a:fd:e3:3d:cd:7d:80:d7:f5:17:0a:17:e2:6c:f0:
38:de:13:25:92:a0:4d:81:a3:e9:eb:82:c7:6f:f5:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:57:12:80:47:30:DD:66:F4:CA:42:45:8A:14:35:D5:98:B6:0F:85
X509v3 Authority Key Identifier:
keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d3:87:c2:36:28:42:d9:f5:6d:b7:67:bc:6f:d2:fc:be:ee:
63:f3:1f:26:cb:46:19:4b:f5:0f:b4:ab:2b:28:6f:77:79:fb:
74:4e:27:7b:54:99:fc:31:29:ef:22:8d:f7:32:7b:8b:d6:50:
04:4c:21:fd:cd:57:c0:bf:71:78:cd:14:c2:f7:71:ca:52:36:
85:41:c9:cf:d1:2f:70:6e:f5:41:14:2e:d8:f0:23:dd:bb:fb:
db:45:9e:3a:34:19:41:02:00:3f:65:bd:95:54:1f:f9:a9:55:
bc:53:ea:d5:fc:42:cc:68:4a:32:f8:ee:31:4d:f1:36:de:8a:
1f:c4:8f:95:ec:40:b5:15:c9:09:c2:f7:51:42:5c:33:f4:5e:
9f:b1:a9:b4:83:9e:d8:0c:7e:5c:d6:e9:7e:34:ad:a4:b0:43:
96:4a:ad:9c:7a:e5:15:d8:51:c0:9f:f5:04:da:b6:ff:f8:4b:
cd:d3:4f:d9:93:82:4b:8a:6b:62:c3:25:84:ef:32:a4:be:f2:
63:3b:c2:2b:19:36:9f:55:46:dd:9e:0e:b8:1a:8f:b5:e2:83:
83:6f:88:25:24:31:13:e6:68:79:86:18:1a:22:4f:ac:b1:5e:
b1:8a:10:47:1e:2f:d3:70:aa:a7:bd:53:f8:b7:2b:2d:8f:21:
8b:05:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:52 2026 by rpki-client