
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json)
Hash identifier: lMXxGt+dT9QO3sFoguRF3WTa1JU8/c8KPSi6uf2SziU=
Subject key identifier: D2:05:88:18:A7:BE:F5:AD:C4:18:82:8E:E9:F8:62:19:08:F6:E9:23
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial: 08BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
Manifest number: 08B5
Signing time: Sat 28 Feb 2026 20:46:32 +0000
Manifest this update: Sat 28 Feb 2026 20:46:31 +0000
Manifest next update: Sat 07 Mar 2026 20:46:31 +0000
Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: ezCIZV5GsSesrj09r2Ln1Nwjc9UNCby0RCOExWjSFbE=)
2: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: kgOcs9CLVX7ZJC+2axbnc6VaT+hi4XvLWDxoRt9QMvE=)
3: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: DhUNLqZR+magQuA03apPa2yLjtOOxq4K5P8AAogIojA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Validity
Not Before: Feb 28 20:46:31 2026 GMT
Not After : Mar 7 20:46:31 2026 GMT
Subject: CN=69a35428-db6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:02:fc:ba:cf:e1:dc:f0:cb:56:00:8b:45:
a7:6a:ed:2b:21:99:57:1f:e9:43:fc:31:54:a4:3f:
50:52:88:47:be:33:d4:1f:15:c8:bd:f3:85:c7:bc:
5d:dc:1e:2d:50:30:1d:8c:18:dd:77:bd:da:e0:25:
05:d3:0b:3f:b7:21:ee:ec:e4:29:12:2b:e4:48:1e:
d5:3c:33:92:07:60:79:0e:1e:4a:95:eb:cc:a8:95:
71:05:e3:80:70:bc:10:ba:fe:02:1d:b9:4c:0f:5b:
90:45:c2:7c:a8:62:a1:08:6f:93:16:ad:9b:78:13:
e5:d7:c8:9c:b7:85:01:bb:a9:c7:35:14:6a:76:74:
ce:29:af:b4:7f:ca:ec:cc:3d:22:50:e0:3a:d3:9d:
39:ab:21:bd:55:91:1a:2f:17:13:07:c6:06:57:b5:
68:9e:88:9a:93:27:62:43:ec:56:19:7c:e0:15:8e:
96:18:e5:ca:04:d6:6f:08:26:e0:45:a8:c1:2e:f6:
75:eb:75:13:b7:4d:1c:43:c8:29:ef:3c:ce:06:e7:
82:3f:c9:cc:4c:a8:6a:01:6c:f8:78:0d:bd:28:50:
ad:7f:23:a5:f9:0a:1a:b9:a5:4c:e1:c9:c5:1c:32:
33:77:cc:03:11:70:df:e3:d5:4a:b1:dc:fa:d0:28:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:88:18:A7:BE:F5:AD:C4:18:82:8E:E9:F8:62:19:08:F6:E9:23
X509v3 Authority Key Identifier:
keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:5a:fc:a1:a9:2c:e5:77:a0:29:e2:68:a8:53:23:b3:c6:
56:ee:1d:8e:4b:0a:95:81:73:5a:a2:da:86:be:47:63:26:b9:
d4:3e:b9:ba:52:81:cb:ae:95:13:ed:f6:75:ce:50:6a:14:a5:
1e:03:09:6d:b0:9f:63:98:c8:49:3a:d3:1b:fc:05:5e:41:d5:
4e:83:a0:74:4d:3e:3e:00:f5:57:05:e4:13:48:9c:94:86:36:
89:a6:d0:b3:22:be:9a:67:b5:9a:53:3e:c7:1f:d7:62:ed:aa:
04:4b:6c:04:36:65:69:da:d7:00:53:74:af:34:0e:1c:82:c0:
c1:f9:6c:44:a8:7b:1c:a6:62:df:e7:04:79:95:26:5a:b3:a7:
00:da:82:4e:09:ae:13:ce:a3:a4:36:43:53:e5:e1:4f:f7:b1:
c3:47:cd:75:4a:a9:e1:ec:3e:30:c8:cb:64:f3:e6:8b:c2:d3:
9b:bf:b1:50:74:d3:99:4e:43:3e:63:a4:33:7b:6a:13:c5:9c:
fc:01:f4:e5:06:c0:4c:81:8a:df:6e:9b:20:75:44:7a:4f:5a:
a8:d8:97:16:13:a4:c6:9e:cb:4a:94:21:18:ac:20:1f:6e:c0:
70:70:6d:9d:10:2c:db:a9:f9:b1:34:d4:c9:06:37:66:96:08:
82:5b:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:57 2026 by rpki-client