
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
File: I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json)
Hash identifier: rcYm1XAhCYBtkoGwFMPuSUlM5TYRZzpibUGGu1SRcTI=
Subject key identifier: 3E:6A:72:04:F6:9E:1E:85:03:14:AA:77:0F:F4:4A:02:0F:6A:08:A5
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial: 073F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
Manifest number: 0733
Signing time: Mon 02 Mar 2026 00:59:11 +0000
Manifest this update: Mon 02 Mar 2026 00:59:08 +0000
Manifest next update: Mon 09 Mar 2026 00:59:08 +0000
Files and hashes: 1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: gexR+wIYgF0xiWv4+xt8zCD48TCu9EAZVscyq1S2zzE=)
2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: CuU/s3UKS9k04hjKJm9gWDdp3yaB5Ydqq+bcVnMC/ag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Validity
Not Before: Mar 2 00:59:08 2026 GMT
Not After : Mar 9 00:59:08 2026 GMT
Subject: CN=69a4e0de-9452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:23:ee:55:67:74:52:2b:72:5c:29:91:a2:
3d:42:60:58:04:70:9b:e0:2f:3b:42:c5:5e:c5:3b:
e1:40:52:1e:9e:ac:7f:34:38:14:49:92:a4:3e:2c:
1b:d4:4b:ef:e4:b8:80:94:41:3f:64:6a:bd:60:05:
e5:d2:bc:2d:ca:17:1a:ae:5d:f7:da:2d:53:4d:14:
0f:e1:5c:fc:14:93:08:21:e8:e0:64:5d:0e:22:e1:
6f:2a:2e:50:60:0c:c4:a3:43:51:ba:64:c1:73:99:
20:c5:6e:5e:d3:a5:92:8b:c6:21:0c:27:6a:92:83:
08:5c:75:98:6f:d9:ba:4d:d4:42:40:0f:c3:97:e2:
f6:cd:a4:ee:29:88:cf:b3:14:c2:54:3f:cc:b1:6f:
33:7a:bc:98:e8:35:79:c9:5f:4b:c1:a8:76:a6:19:
f8:12:1d:0f:a6:2d:b5:64:88:6e:59:8e:96:eb:8a:
ac:e0:40:29:0a:4f:85:dc:8b:9a:6b:76:58:4f:06:
38:df:2b:ca:32:b5:5e:d9:4b:81:fd:c8:7b:63:b8:
2b:e5:75:13:e2:49:9f:fd:bb:f1:a8:94:43:bc:bc:
36:b7:a1:33:86:ea:85:69:45:9b:71:da:db:b0:d8:
53:dc:a8:c5:ac:76:50:e5:78:dc:56:f5:02:90:d8:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:72:04:F6:9E:1E:85:03:14:AA:77:0F:F4:4A:02:0F:6A:08:A5
X509v3 Authority Key Identifier:
keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:8e:16:17:fd:f3:6a:3c:71:fc:ec:09:72:a5:2d:06:8e:20:
20:9b:01:eb:23:bb:22:6f:66:98:a0:31:fe:6f:0f:fc:ab:64:
aa:6d:76:12:16:e6:59:90:27:46:c7:1d:b4:07:e5:03:f2:f0:
2c:7e:50:db:94:b1:c9:af:b3:f1:eb:df:fc:a3:aa:cb:e4:b9:
23:ac:88:a1:ad:68:ef:3b:e6:51:59:86:0e:3c:00:28:fb:ad:
55:6c:fc:71:92:93:c6:ea:11:81:53:a0:2f:67:5c:28:a4:78:
c1:a7:cd:fb:1b:a6:62:0d:7e:41:7d:06:6a:9b:c0:4b:b1:75:
94:bc:2c:f0:b8:09:78:1e:88:b7:9a:0f:7b:a6:0e:01:82:25:
b8:22:a7:de:d8:0b:11:19:98:1f:bd:fc:ce:d6:c8:65:3d:75:
8b:3b:60:b5:de:48:78:45:43:e9:5d:7f:f5:26:c9:37:20:2a:
2a:f6:d1:45:17:bf:bf:23:31:e6:f4:09:36:f3:24:37:4b:cb:
14:0e:e8:26:ea:69:26:19:fe:67:53:fd:ca:6f:7a:6d:02:03:
b0:a7:cc:ff:62:ee:26:99:6f:92:03:0c:7a:c3:f9:1b:70:72:
bc:40:48:00:e8:61:4c:84:b4:42:09:ba:7f:11:fd:cf:96:df:
37:14:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:22 2026 by rpki-client