
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier: FCiB7aS7/NhoG/CjOhPnuLiKdqqcZiljhOfnD0VPu5w=
Subject key identifier: 32:F4:35:02:1D:E5:8B:43:A1:4A:4F:06:DD:6A:5F:89:11:2B:AC:21
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number: F7
Signing time: Sun 01 Mar 2026 07:20:37 +0000
Manifest this update: Sun 01 Mar 2026 07:20:37 +0000
Manifest next update: Sun 08 Mar 2026 07:20:37 +0000
Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: jGg80+jOxG64QXhzPVmBV52+VupBWaQXaULMe1NT/Tg=)
2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: wkTE/ifx5fyCiLcyTVTNBFwS62thj/3KsjO+0yK/2mA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Validity
Not Before: Mar 1 07:20:37 2026 GMT
Not After : Mar 8 07:20:37 2026 GMT
Subject: CN=69a3e8c5-a8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:44:fb:70:a1:6c:de:11:3e:88:9b:07:a6:
e3:f5:b7:2a:f2:73:58:89:63:bf:e2:a9:e6:a0:b1:
9d:55:b7:7a:42:90:bb:6a:d3:11:5d:37:88:a2:ad:
5d:68:2f:ec:5e:db:3a:a6:ba:d0:e1:ef:17:df:98:
09:52:dd:73:e2:69:f1:0b:db:88:60:e9:ec:c5:4f:
ee:dc:5a:a6:5f:d3:a1:16:72:0f:d3:aa:54:c0:ee:
e5:29:ed:70:5a:1e:e2:00:5a:f7:de:b9:b9:15:1f:
7b:83:c9:91:43:98:bf:71:20:08:db:70:26:bc:00:
05:7a:e5:3d:a0:bb:76:90:45:93:21:cf:e8:98:d6:
8e:f6:75:ac:6e:d0:36:69:bd:90:30:89:44:63:5b:
3c:82:74:57:1b:65:80:5e:7b:11:03:cc:57:17:ba:
00:fc:d3:54:40:ee:97:ab:70:f0:62:11:aa:4f:40:
9d:8b:82:5e:41:3a:1b:19:9c:6d:7b:02:55:89:4f:
36:dc:39:76:16:e5:4f:62:fd:57:3a:1d:39:4a:51:
70:fa:c6:e9:1f:e2:04:19:e1:73:fd:4b:4b:85:82:
52:78:41:d9:58:50:b9:83:9f:d4:1f:e9:50:a8:da:
a8:55:71:dc:44:2a:4f:3a:a3:f3:6c:67:c9:be:5b:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:35:02:1D:E5:8B:43:A1:4A:4F:06:DD:6A:5F:89:11:2B:AC:21
X509v3 Authority Key Identifier:
keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:f9:7a:bf:b6:b9:6f:58:8a:93:ab:70:75:87:20:d9:f3:67:
22:c8:ae:4c:d4:d3:cc:98:32:b5:fd:b6:4c:09:cf:3d:14:5d:
68:23:ad:2a:9b:d0:b4:38:bd:8b:75:34:3a:0e:f9:0e:58:b5:
24:ea:c4:ec:7a:be:a1:cd:15:d0:49:52:7e:9d:8d:7d:a2:07:
78:24:bd:a1:4c:c2:67:f6:22:84:aa:a3:bf:59:1e:38:0b:b9:
c4:08:71:fa:4e:84:ba:f5:d8:b1:61:98:c5:eb:5e:45:8a:8b:
79:72:81:47:4c:f3:11:a1:94:5a:41:d0:3e:f4:3d:1a:cb:0e:
51:02:da:7f:3c:b3:32:ad:57:7e:73:33:4a:c3:dc:3d:05:42:
0f:0a:84:d3:43:fb:3b:ff:a4:85:b3:94:00:ea:48:31:e4:4b:
5d:2f:b8:ea:00:09:93:22:9f:da:77:f9:70:a8:18:03:f8:e4:
4c:2e:09:33:82:04:be:a1:09:82:a7:ef:3f:3f:60:1c:33:77:
c6:85:cf:14:32:80:b0:f9:bf:74:91:98:02:b2:20:74:1b:b0:
9f:b5:a1:fd:fb:07:00:0c:ee:0c:43:ec:77:26:c3:f7:6b:89:
d6:57:4c:04:f4:5d:0e:69:f7:c5:4b:ec:ad:3e:49:f6:fc:fc:
14:05:43:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:29 2026 by rpki-client