
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier: WvaI3jenMLypdQkiyiWlNpz2EbF8/LjtA0yZCThRpO8=
Subject key identifier: A6:14:DA:E1:5A:06:9C:EE:B4:D8:90:39:79:27:7D:B8:A3:7D:BC:0D
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 19E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number: 19C5
Signing time: Mon 02 Mar 2026 02:59:03 +0000
Manifest this update: Mon 02 Mar 2026 02:58:59 +0000
Manifest next update: Mon 09 Mar 2026 02:58:59 +0000
Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: tHtkjjFh840rmwYV0wvKxgQTb/LaBzIf7BcvAZD2MNU=)
2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: t4qQEhXVur27eUnpFLqlgSPz5OkbpRB/VWbuAT/SIEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6625 (0x19e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Validity
Not Before: Mar 2 02:58:59 2026 GMT
Not After : Mar 9 02:58:59 2026 GMT
Subject: CN=69a4fcf6-e6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e2:40:11:cf:86:a6:59:1d:12:32:0c:91:e1:
56:db:ec:3f:1e:17:f1:e4:a1:62:7e:21:af:6e:49:
48:22:62:aa:b7:38:e2:80:9e:50:e1:b3:ea:e9:35:
73:6f:0d:ab:ff:0b:2d:6a:27:73:79:b7:c8:3d:03:
c7:06:e4:0c:d1:20:bb:3a:3d:c4:18:d4:1e:48:cd:
19:05:bf:25:4c:b4:5f:ef:bd:37:f3:56:a8:77:a7:
58:c2:eb:15:94:c6:4d:0c:d8:3e:07:ad:a0:f5:1e:
a7:8d:bd:80:48:09:72:d2:0e:28:75:7e:99:0d:18:
cf:e5:7e:e5:61:59:e7:dd:9f:4c:f3:03:75:80:8b:
1a:22:c8:f8:42:4c:bb:04:71:22:9e:3a:d2:fa:68:
9c:31:ad:30:bd:32:7d:c4:5a:3d:ef:f2:a0:a2:7a:
88:3e:b5:95:01:f8:4d:f9:df:17:78:2f:0e:e6:13:
7a:6d:8e:dd:94:bd:ab:c8:6f:56:23:82:d1:b2:a0:
23:90:eb:29:b0:78:b5:d9:50:83:ad:40:d2:ff:14:
06:5f:e8:e2:2f:23:ee:6e:e8:4f:74:ad:d1:5f:3f:
36:b7:b3:c7:2e:30:bc:a3:18:ec:26:c3:c5:52:e3:
b9:a4:30:e7:d3:11:84:b9:8b:6b:e6:1a:8d:98:d2:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:14:DA:E1:5A:06:9C:EE:B4:D8:90:39:79:27:7D:B8:A3:7D:BC:0D
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:69:0d:44:92:fd:a9:0c:71:f3:eb:d2:95:e1:70:cc:8a:d9:
9f:e9:cc:ec:bb:d0:a5:6d:2c:5c:f3:25:0c:e8:bd:e2:01:9b:
f6:ae:1a:f7:18:c9:fc:6b:73:36:d3:43:15:84:a9:4e:da:7f:
79:95:77:13:b6:7e:d5:32:78:2f:e5:e3:8d:e6:c0:3b:f4:33:
5c:8a:05:d7:f4:d8:b6:ed:a8:88:13:ec:f8:57:aa:94:44:76:
71:fa:8e:bd:fc:b6:e4:1b:07:75:ff:92:45:7e:95:2b:ee:33:
2a:92:9e:9b:6a:9c:67:ce:3b:e7:cf:77:2d:6b:dc:bb:14:a1:
94:2b:87:4b:e7:3f:ae:39:a3:ba:7d:fb:03:d1:54:ea:8b:3b:
04:6c:c5:4d:94:f5:e9:90:70:da:1a:d0:e7:2f:ec:d0:0d:45:
e8:6b:4a:df:31:65:8f:fe:73:9d:17:bf:9d:a1:dd:e3:e5:48:
70:5b:35:6e:8d:00:52:8e:e1:b6:a8:6e:9f:30:18:ab:96:7f:
d2:ec:5a:06:25:8e:24:27:ea:87:ff:0d:29:eb:ab:d7:79:cb:
a5:7f:74:9a:dc:fd:1c:26:27:4a:96:cf:38:22:f8:de:4a:4c:
8d:1b:e0:e2:cf:99:55:6e:a2:7d:76:4b:f3:95:fe:8c:7c:b7:
5a:6b:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:22 2026 by rpki-client