
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
File: -7tvOPZwPQLXJu3kYjmzvtih8eQ.mft (raw, json)
Hash identifier: 6ikFuUhG31uf0MI8iG7k1o5NUUZQ/AKpSDynoAiwMbY=
Subject key identifier: 55:2A:B6:65:6D:A8:52:79:14:FC:F1:36:C1:7F:89:A7:52:1A:81:DE
Authority key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
Certificate issuer: /CN=A9141B4C/serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
Manifest number: 0D
Signing time: Sun 01 Mar 2026 10:38:07 +0000
Manifest this update: Sun 01 Mar 2026 10:38:06 +0000
Manifest next update: Sun 08 Mar 2026 10:38:06 +0000
Files and hashes: 1: -7tvOPZwPQLXJu3kYjmzvtih8eQ.crl (hash: 8sM1gKT5MmJZv0H5m0RrDi469iIoU+LApsLSgVAs7wI=)
2: A8CF90D807E711F1BD5B02F0213D8C67.roa (hash: e95EmttOz9tamnxoL+FHuBBjn7WDQhLSaqeTbXv91ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4
Validity
Not Before: Mar 1 10:38:06 2026 GMT
Not After : Mar 8 10:38:06 2026 GMT
Subject: CN=69a4170f-5a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:32:09:8b:cc:89:93:87:c0:fd:43:fc:8a:
1f:64:b8:70:36:43:4a:2c:01:d1:6a:a4:5e:b9:8b:
6f:4b:ee:7a:7c:7b:64:17:3f:69:b1:52:aa:e5:95:
7f:22:b1:17:f0:c6:7b:e3:44:1a:1f:5d:bb:2d:24:
35:e3:0c:94:5f:3b:db:f0:c9:8d:6a:dd:8c:88:50:
e8:8c:87:7f:e6:83:42:dc:c4:06:a6:cb:15:8d:14:
b2:00:0c:22:64:03:c0:ac:80:17:b9:4c:90:2f:83:
d9:f8:98:7e:53:44:73:2c:5a:e9:af:ec:4b:71:f0:
8e:14:a9:7d:04:9e:2f:71:ae:e0:22:eb:e8:b5:6a:
db:79:de:24:0a:6a:43:60:c4:fd:30:ee:4f:0a:b8:
2a:d7:7e:1a:70:25:72:1e:d2:1e:1d:61:af:24:9e:
9b:0a:5d:f1:f2:68:01:1e:fe:da:d3:c8:34:e2:62:
e2:39:33:72:e8:01:16:9d:1a:5a:fe:c6:66:81:ff:
d4:76:f7:58:30:7b:4d:36:a5:cb:50:17:59:75:c1:
37:8e:66:27:8f:d9:64:d9:8e:04:e5:48:db:fd:fa:
ab:8e:7e:df:2f:6e:03:9a:55:db:81:09:8a:1d:f0:
05:ac:4a:36:ef:bd:58:39:62:0d:2f:11:44:ee:01:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2A:B6:65:6D:A8:52:79:14:FC:F1:36:C1:7F:89:A7:52:1A:81:DE
X509v3 Authority Key Identifier:
keyid:FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ad:8e:61:32:39:32:09:0c:ae:da:f3:5e:ba:de:98:14:39:
a5:ea:75:fb:af:1f:78:32:e8:6f:1c:e6:53:fd:67:1a:0c:4c:
16:88:71:9f:be:73:99:7a:dd:62:50:b9:f2:33:7c:b8:98:43:
80:15:1a:d2:f5:37:31:48:f2:d4:29:dc:fc:90:f8:10:ac:71:
54:69:9c:78:fa:b8:db:68:cb:ae:f5:56:5e:2f:19:a6:12:c6:
12:a4:34:2f:6a:32:21:f8:ef:b6:34:bd:b2:43:e4:d1:f3:a5:
3e:54:cd:5c:d3:85:8c:cc:ab:13:e4:79:57:1c:a3:b3:c1:07:
85:51:d6:c7:66:c6:5f:25:86:e3:54:2f:2e:35:16:94:a9:4e:
e1:18:d2:9c:bb:5f:d8:45:cd:17:a7:77:37:6a:a9:a8:2f:99:
29:d1:10:a8:a5:0b:ae:40:31:96:4d:76:e1:28:2d:d0:28:9d:
93:7b:c4:96:e7:fd:3b:42:af:f0:b5:08:7a:b4:c0:c8:27:58:
2d:f0:18:48:c2:5f:69:c9:eb:f6:e1:60:97:08:29:f5:5e:8d:
2e:1f:ae:fe:49:61:ba:27:bf:ac:26:81:e8:81:9b:7c:d5:3d:
73:13:90:ce:46:bb:8d:84:e2:82:90:a4:b5:36:69:ac:12:f1:
32:94:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:53 2026 by rpki-client