
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
File: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json)
Hash identifier: aHJfX1ioIakCf8Z6zhuxmOjPKpbVbfrpD6yz4dSrYW4=
Subject key identifier: 23:16:7D:4C:FC:E0:82:DD:90:36:E6:2D:FE:BA:74:B9:35:C5:2E:38
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 0803
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
Manifest number: 06C7
Signing time: Sat 18 Apr 2026 22:52:29 +0000
Manifest this update: Sat 18 Apr 2026 22:52:29 +0000
Manifest next update: Sat 25 Apr 2026 22:52:29 +0000
Files and hashes: 1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: LPtSkTAi/kF24walBwlaWKKovr+GepeK3qZuaKlmJ9o=)
2: 18DDC828563A11F092DD586EC4F9AE02.roa (hash: /ZAwxNwF5BSvUQgJ+crVoivjTBV/Hb6oXXuT2EmJDAU=)
3: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: VI6voF68QQY7SFnSAbWa5lLgbR1RP7VeGAE4odGtXhQ=)
4: 3B4FFDCA227911F1A65F03CCA4833773.roa (hash: PUzmzuD5bHk7VFgIzT0roiBPsQW1af5ietmADY31t40=)
5: 8F8087960EC111F1B64CAA7C3D3D8C67.roa (hash: LK/rL/zltCjg/cuJM9IER3CTRe7bASCArvSQocjl9qA=)
6: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: zwt4jimE5dzItIYvflW2AfnzB22khQhDre8vwGomnT0=)
7: 17F4DF6E563A11F092DD586EC4F9AE02.roa (hash: VoQrlag/uQljqLBhje8W3GmSgopLeC8gQtggx3LOIyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 22:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051 (0x803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Apr 18 22:52:29 2026 GMT
Not After : Apr 25 22:52:29 2026 GMT
Subject: CN=69e40b2d-13bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:cf:fc:8a:d5:4b:7c:f6:bf:e3:54:27:ef:
ed:25:38:b5:d0:5e:02:a1:4d:1f:43:00:2c:8f:83:
92:75:00:14:a2:9d:7f:a8:2c:f5:46:77:71:83:13:
07:94:36:b6:cb:f9:41:63:bd:12:53:f7:d1:b8:a8:
ee:b9:01:fb:3b:94:c7:eb:24:47:73:6c:5b:6a:fd:
42:ad:11:9a:bd:d7:6f:ea:08:1f:67:b6:00:2f:3d:
7c:e9:c2:3a:25:95:7d:27:55:a2:9b:16:b1:80:1f:
84:09:61:71:84:6f:4b:ed:77:77:97:5d:22:26:14:
bb:0e:31:42:66:06:6d:48:92:f7:70:73:6e:a8:eb:
5d:f8:81:95:92:df:ce:5b:f7:cc:c7:e4:6a:7f:78:
5b:48:09:42:89:e3:d6:0e:a5:af:52:c3:c1:96:07:
19:9e:2b:5f:d6:26:de:33:33:8b:36:7b:0b:3e:23:
8d:77:8d:40:cc:0c:11:8b:60:bf:1d:51:73:f8:eb:
cf:ce:e7:ac:1c:c2:d2:0a:1d:85:f9:f6:30:ab:76:
ef:bd:6c:9f:49:63:08:bc:9f:a0:27:0b:ee:35:35:
cf:e7:f2:71:fa:60:a0:f6:d6:a0:5c:13:5c:20:e7:
61:a8:6f:13:2a:b6:0d:60:b4:ff:60:91:9c:97:a6:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:16:7D:4C:FC:E0:82:DD:90:36:E6:2D:FE:BA:74:B9:35:C5:2E:38
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:8a:46:89:cb:4d:a5:3c:6b:71:5b:a2:53:4c:09:79:1e:de:
7b:29:e4:e1:6e:c5:28:a5:9a:d7:be:7e:0c:c2:87:19:56:ad:
58:3a:8d:be:a0:18:9c:67:55:3c:a9:66:d8:76:09:a1:0e:9f:
47:c6:98:52:22:b4:a0:53:59:43:7d:2d:f4:17:6e:a8:d4:33:
2a:df:f2:a2:6a:ca:89:df:8d:30:12:ac:97:7d:f2:56:97:d4:
fc:7a:4d:8f:96:56:8f:d7:52:95:ba:3b:af:ef:6a:fc:1e:53:
e9:f8:fa:00:dc:9f:00:1c:d0:8e:34:aa:44:07:69:db:7a:36:
3e:0e:d9:af:dc:68:61:95:fb:e3:2e:21:e0:b6:78:24:6b:c1:
f3:14:33:85:05:fb:3e:10:5d:6e:7c:e1:53:8b:a6:4d:ad:0a:
29:68:47:5f:ca:fe:1c:d9:5b:d2:11:3f:90:b3:b0:f1:1d:fd:
8e:85:e2:64:71:97:48:28:10:fa:ed:a2:1d:89:1a:39:42:ef:
fe:10:39:f6:c9:a8:07:a6:66:0d:8c:b4:2d:3c:1b:6e:72:89:
cf:b1:7b:07:27:3f:4a:93:a5:65:7a:c7:1b:4a:a6:b9:63:ed:
e2:5a:ba:7f:e6:6d:96:ba:c3:8b:d2:20:43:d6:38:7b:65:04:
70:1a:b6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:57 2026 by rpki-client