
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier: X+OV5BZz8KMh59zuMypMf/KV9WSQ+0dc4dFsZ05hAYg=
Subject key identifier: 99:A7:67:80:26:C8:80:84:1A:C6:70:C4:FA:5F:3E:50:AF:2F:59:BC
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial: 0C7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number: 0C62
Signing time: Mon 02 Mar 2026 02:38:25 +0000
Manifest this update: Mon 02 Mar 2026 02:38:23 +0000
Manifest next update: Mon 09 Mar 2026 02:38:23 +0000
Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: DGa4FRMJ9Tp83NRgkJNMp/freHAy2IlJqUK7OLpFOJo=)
2: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Lb32CCKaZxPXJVtVTz41kWSGeP/mH1CszKT3y/ullaM=)
3: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: 4bnWRv5wJBsyx0TFBETKt2oLFJp/Xiza93KwZfpHk70=)
4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: QuMcWQGwhElYLcNGEV8qqlAOlpLd+8u3fMjc2LDn80I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3196 (0xc7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Validity
Not Before: Mar 2 02:38:23 2026 GMT
Not After : Mar 9 02:38:23 2026 GMT
Subject: CN=69a4f821-6ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:94:7c:92:1d:b6:22:0a:5a:a5:29:df:6b:
b7:73:f2:de:88:b3:06:92:f5:af:ca:fa:b8:07:6a:
c7:dc:88:2e:df:d8:cc:de:4f:ca:ec:ec:d8:27:54:
e5:37:0d:2f:fe:07:b1:66:f6:37:f4:24:c1:79:b5:
39:2a:77:7f:cf:5f:f1:a8:7c:3b:b6:6f:e9:36:4a:
d1:3b:39:18:b6:10:3a:b6:fb:3f:a8:dd:ff:ce:73:
9a:4f:0a:9a:bc:13:1a:21:b7:6a:72:47:ed:99:b0:
96:e6:f7:a5:86:55:c3:0b:02:4e:11:35:53:b4:7c:
d9:ae:fb:6e:23:b9:aa:bb:3b:7f:bd:86:58:94:4b:
23:18:f1:5f:da:b3:29:a9:57:22:1b:83:2f:4e:9d:
1b:34:c5:c9:b9:3f:3b:ae:86:76:28:4d:8f:35:da:
1c:a9:1b:64:01:75:3e:25:26:42:be:fb:4c:77:7b:
5b:d0:3b:3d:da:e4:45:b8:04:95:e6:ff:f0:be:74:
2a:82:89:93:da:ce:ab:58:b9:e2:66:b2:cb:59:14:
09:3b:35:93:d2:92:53:84:ff:93:7b:e8:44:b0:a7:
b7:50:f1:bf:64:f3:e9:6c:cf:e8:41:1f:7c:e1:79:
4f:c1:37:47:9a:b1:d3:b9:68:55:11:f9:ef:e0:9e:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A7:67:80:26:C8:80:84:1A:C6:70:C4:FA:5F:3E:50:AF:2F:59:BC
X509v3 Authority Key Identifier:
keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:e9:be:ac:c4:52:14:82:4d:e8:03:19:a6:5f:43:4c:70:bf:
e8:27:75:41:78:df:45:bc:4f:f2:18:e2:b5:e7:1f:4e:c2:05:
8a:62:96:51:27:bc:04:f9:6a:0e:50:db:5c:16:cf:7e:3b:4a:
b1:68:a6:b0:b1:53:42:1e:cb:68:da:00:9f:b5:51:16:c6:cc:
dc:b5:13:97:7a:f0:a3:cf:26:dc:84:39:75:40:55:7b:f7:33:
46:df:e8:9c:fe:68:b8:c6:ad:65:50:9b:9a:c7:bb:a6:5e:f8:
fc:4b:a9:49:e4:47:e8:3d:0a:c3:85:dc:8a:32:21:b0:3f:d4:
f1:94:6a:01:be:bf:c3:75:49:40:27:7b:10:fd:ca:62:d0:b0:
de:b7:34:b8:35:aa:e9:b4:24:a6:9c:fd:b5:d9:fc:bc:29:5d:
fd:c6:5d:f3:1f:fe:57:b6:27:b1:0e:4c:92:90:eb:86:73:01:
e7:af:20:01:51:0b:5a:4f:d3:00:54:ea:bb:e3:9b:ad:43:8e:
5c:e1:05:62:8d:24:f3:5b:ec:0d:47:be:78:03:02:9d:c9:85:
3e:f6:ed:e9:3e:dc:7b:e8:e8:f8:f1:5b:2f:31:49:c7:04:1b:
93:93:ca:e5:30:40:70:1f:30:ee:e5:d9:40:92:71:67:ff:55:
fe:62:00:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:54 2026 by rpki-client