
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json)
Hash identifier: ziXid9BmyKgjdkPHZraAbDYrbMUB41WiQdByHWm0zIo=
Subject key identifier: 81:83:04:90:1A:97:D3:53:2D:0A:E2:2D:D6:AB:D7:A0:76:F2:7F:1A
Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41
Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
Certificate serial: 0E91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
Manifest number: 0E88
Signing time: Sat 28 Feb 2026 17:52:35 +0000
Manifest this update: Sat 28 Feb 2026 17:52:34 +0000
Manifest next update: Sat 07 Mar 2026 17:52:34 +0000
Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: epOuCaRmxvSxwy3+Re8vXkFxaIYaoWKhWOpY89osRQc=)
2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: kbrsBWLPmTs2n5OoEUQRcNgIkU1aEuNqMVThcieEjvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl
rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3729 (0xe91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
Validity
Not Before: Feb 28 17:52:34 2026 GMT
Not After : Mar 7 17:52:34 2026 GMT
Subject: CN=69a32b63-bdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:88:5c:f1:60:43:9a:99:a1:2f:c0:f3:7a:
03:c7:34:12:b8:b9:16:c3:37:4f:75:ec:39:9f:ea:
88:40:78:fb:28:0a:aa:67:fb:19:84:dd:b6:c3:f8:
64:d3:30:71:2a:27:d7:24:9d:72:61:d7:ae:80:dd:
a0:5a:97:69:00:9d:65:ec:2d:39:de:cc:18:46:c1:
24:e1:d5:19:30:65:6c:db:26:c9:a2:80:5d:00:5e:
36:1f:50:21:d3:84:14:ef:fe:0c:de:7f:28:f7:ae:
b4:02:fb:06:c1:19:a5:50:eb:ec:5a:4d:9d:2b:0c:
83:4c:5b:c2:0d:5f:9d:53:c3:fd:32:95:4e:b8:b6:
9d:26:a6:cc:ce:d0:90:ad:75:e6:20:7d:c6:1c:28:
3a:87:7e:43:6d:91:62:0f:71:2a:ab:0a:c6:89:84:
97:60:09:74:df:6d:55:ed:2a:65:d9:90:8d:04:82:
d7:41:4c:51:e1:40:7c:3d:92:47:92:74:e6:98:09:
8f:50:af:fa:5c:fa:b5:99:28:ec:5b:07:2c:31:13:
43:02:81:fc:4c:21:ec:18:38:3c:0e:86:51:ec:df:
bc:83:13:69:74:b8:16:50:87:28:2e:e4:03:bc:ed:
b5:45:1a:3b:cc:81:bf:db:ed:d2:f6:6e:f7:2c:99:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:83:04:90:1A:97:D3:53:2D:0A:E2:2D:D6:AB:D7:A0:76:F2:7F:1A
X509v3 Authority Key Identifier:
keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:62:1a:d0:69:0f:bf:e6:32:e1:d6:05:8e:a2:92:44:c8:bb:
64:2f:7a:db:72:b9:f2:ec:1e:eb:6b:bf:c3:da:b6:0f:d8:7a:
6d:15:4a:b4:d4:fa:7f:8b:15:e6:55:dc:19:3e:d2:08:a9:b2:
28:d9:c4:2f:3c:61:30:0a:20:36:1f:37:03:9d:1c:ec:81:d5:
f7:e5:a7:71:0f:1a:ad:f5:58:0a:90:c2:30:65:3e:a3:00:41:
c4:b5:c4:95:b6:7b:ef:5f:d1:82:a0:e8:1c:df:21:c8:2e:59:
c0:79:89:05:d5:8a:1d:71:84:1a:70:8e:3f:39:e3:ab:7d:9e:
2e:5d:7d:56:cd:20:3b:25:64:c4:f9:bd:cc:c9:b8:44:3a:bd:
4d:f9:7f:12:13:62:19:5e:e9:18:a0:93:e2:09:12:9e:c6:83:
81:a6:6b:07:a8:3d:78:95:26:08:4a:b1:d2:fc:25:de:42:5c:
03:95:9f:25:06:57:bd:ad:f5:ad:fc:c6:66:93:f0:55:27:55:
dc:73:10:eb:57:30:ff:62:fe:0d:b8:72:39:6c:d7:23:31:7e:
16:0f:56:98:c0:df:63:8a:ee:8f:89:df:86:cc:c4:24:93:21:
8c:1c:46:18:d5:0c:02:40:ad:7e:de:14:92:01:da:d8:be:45:
09:80:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:34 2026 by rpki-client