
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json)
Hash identifier: rQALGtlkJqJcF0pj7J6MiORZYU0xgTWbz4SgUZOuhQE=
Subject key identifier: F7:5B:86:FF:1C:FF:7F:6A:C4:72:18:E0:E2:09:83:F7:D2:12:20:51
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial: 0A89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
Manifest number: 0A4E
Signing time: Sat 28 Feb 2026 20:03:55 +0000
Manifest this update: Sat 28 Feb 2026 20:03:55 +0000
Manifest next update: Sat 07 Mar 2026 20:03:55 +0000
Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: gzVbH+DDcJkxJxgyOvQKx+SFDFgCDbnCY7pIRAdFmPU=)
2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=)
3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=)
4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2697 (0xa89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Validity
Not Before: Feb 28 20:03:55 2026 GMT
Not After : Mar 7 20:03:55 2026 GMT
Subject: CN=69a34a2b-6bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:5d:7e:76:b7:df:ee:22:fb:dc:28:49:27:
98:e9:41:6a:66:52:c0:2f:36:62:7c:93:56:7e:34:
fd:8e:e0:a4:11:c4:87:ce:c1:b5:8a:ae:3a:0e:1f:
75:85:40:b9:bc:5a:3b:32:0e:db:aa:d5:12:67:99:
60:61:a5:b7:17:9d:34:ab:1a:0f:8c:ea:75:47:0c:
c0:91:79:1c:b8:0b:da:00:0c:a2:91:b5:d7:23:eb:
b7:34:66:6c:85:1c:13:23:66:89:e3:de:19:ad:a5:
c1:6d:8f:d1:f7:46:54:2f:33:d8:90:1b:81:7b:bb:
44:ab:84:74:84:fc:00:23:b5:16:17:e7:dd:db:fb:
66:3b:14:0c:ea:da:c0:09:2b:94:2c:3e:e9:4e:5b:
a3:53:66:23:0d:5c:0f:5d:82:11:59:5c:03:36:b4:
9a:6e:05:1b:f0:da:a1:6c:af:d4:31:1a:8c:b9:bc:
7f:0d:4d:f2:41:76:cf:90:51:6d:c1:f6:9d:7c:48:
bd:d7:ad:9c:ae:8e:4a:16:e1:a2:d3:b2:d3:9c:e2:
f8:b8:1d:27:a6:60:da:c0:38:76:2f:de:8d:9e:a0:
8e:2a:af:a6:ff:79:24:53:73:e5:e4:b9:66:f7:ab:
a1:a2:bd:58:81:0e:19:83:6d:32:8c:9c:95:00:4c:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5B:86:FF:1C:FF:7F:6A:C4:72:18:E0:E2:09:83:F7:D2:12:20:51
X509v3 Authority Key Identifier:
keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4c:fc:05:87:88:ab:2d:ca:9f:dc:43:da:c9:3b:cc:fe:1f:
fa:f4:ed:82:cb:a3:6b:d1:19:2c:27:85:89:ae:57:12:a7:df:
8d:e9:80:44:4a:dd:80:cd:0e:5c:0a:90:45:65:09:9d:c3:58:
de:1e:14:58:f7:70:12:90:c4:56:79:20:fb:1b:f1:da:71:6a:
7e:96:d7:f7:ce:f7:2f:a2:82:0b:c3:c1:96:bc:d1:7a:13:10:
4f:cb:98:51:61:22:62:14:3c:f0:23:af:92:4c:62:14:7e:28:
9c:ee:b0:e8:6d:0e:bd:e1:4d:3b:ff:7c:5d:27:92:4d:c2:b8:
21:34:67:a6:a5:19:18:0d:71:49:b1:a6:0b:e1:49:13:e1:df:
72:4a:6f:52:ba:2f:76:ed:c6:87:5a:ca:37:06:ae:6d:82:b1:
58:63:8b:c4:3a:1e:db:e2:ac:42:3f:74:86:e3:c1:40:f0:00:
4e:bf:71:74:4b:42:3c:c7:57:91:14:74:3f:f0:7a:83:68:de:
6d:e0:4b:3e:49:e6:bb:3a:9d:a2:45:75:c1:9d:14:57:63:00:
03:30:3b:8d:64:62:d5:9b:3e:4e:e7:08:57:c0:3a:66:72:0f:
da:4e:23:bf:e7:d0:e5:df:aa:a4:a8:c9:3f:41:64:2e:af:10:
45:8a:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:13:54 2026 by rpki-client