
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json)
Hash identifier: 5lrbYorgTb5YV6uzVcQGS0q6hechbBLHwNTamT99p1A=
Subject key identifier: CF:9F:CB:0D:CE:B1:5D:9B:59:68:03:57:74:C0:0C:CA:5C:19:4D:C6
Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
Manifest number: 0170
Signing time: Sun 01 Mar 2026 05:46:57 +0000
Manifest this update: Sun 01 Mar 2026 05:46:57 +0000
Manifest next update: Sun 08 Mar 2026 05:46:57 +0000
Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: O3xb/7Fzgn6aspzpcgODXzokF6OjSZFI46FAsMzdAuU=)
2: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: 83asyh7KBn6tDhVd3V3FCwG4c1D4HMfxJ5bon3q/d24=)
3: 306EFA64A87611F089A2B881C4F9AE02.roa (hash: qJBD4dAf7BfWQ/rraTnjI0LA/fEl8zo0iRv87I2BJVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Validity
Not Before: Mar 1 05:46:57 2026 GMT
Not After : Mar 8 05:46:57 2026 GMT
Subject: CN=69a3d2d1-a50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:23:88:1e:12:15:52:42:a4:00:53:7d:7d:
00:a5:68:8e:4a:c4:57:f1:38:e8:2d:ad:02:63:0f:
a5:21:4e:8b:d0:70:3a:59:9c:91:90:85:76:e2:f0:
5f:49:17:65:3d:66:8f:e7:da:8d:84:2f:75:7d:22:
53:0c:5b:0c:ce:19:fa:3d:2c:88:01:b9:4d:a2:9e:
93:9a:04:60:dd:11:71:5d:4b:ee:c1:5b:d1:0b:6e:
9c:87:14:58:ce:fc:01:1c:b0:2d:a6:61:18:3a:56:
af:b6:73:38:c2:af:4f:73:96:77:5a:ef:0f:a8:d0:
ad:be:d5:37:90:16:c6:8f:3c:35:da:31:1e:61:48:
93:83:00:b0:b5:2c:d7:07:09:fe:63:11:72:e6:19:
7f:a7:39:ff:9c:e6:1a:bc:77:eb:3f:90:d5:12:b1:
33:4b:1c:91:7c:09:3e:19:55:3c:5e:53:b4:b1:2e:
fb:18:67:0b:b7:3e:40:71:cc:39:75:84:3a:e9:ff:
41:66:96:1e:af:61:79:ad:28:61:b9:68:38:97:42:
ce:64:25:5c:2d:d6:19:71:de:6e:ac:44:b2:fe:89:
1a:24:25:8e:b4:fc:05:fd:c2:b7:e2:63:e1:5a:54:
c8:11:b6:d3:29:34:f8:c1:54:73:33:55:ca:e1:9f:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9F:CB:0D:CE:B1:5D:9B:59:68:03:57:74:C0:0C:CA:5C:19:4D:C6
X509v3 Authority Key Identifier:
keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:cb:db:17:1a:cc:cf:a9:04:fa:d3:ab:67:cd:03:bb:a2:20:
67:54:52:c2:9d:10:3e:fd:fb:40:0d:22:90:bc:63:6c:0e:4c:
92:9f:1a:08:12:eb:28:96:f0:55:d7:a8:d5:48:88:bf:c2:17:
58:ea:70:cb:29:cc:a3:40:3c:e6:b4:bc:e0:66:87:1c:c3:ba:
62:45:c1:d8:81:2d:dd:89:fc:97:fe:33:fe:a5:42:01:ef:13:
df:c4:ea:61:da:a3:de:0f:7a:ff:4d:9f:61:8a:5d:49:07:f5:
b0:4e:d4:9f:e0:db:ed:4a:e1:4d:2c:fc:6e:85:e0:ff:46:86:
65:a4:ef:8c:ea:bb:3c:7f:e2:2b:d5:6f:38:b5:9b:c5:d6:6b:
2e:f0:99:02:7b:94:d3:fd:fc:a2:85:aa:71:68:8e:32:29:cc:
66:6c:e8:58:c8:83:8b:40:36:f5:8b:76:86:6f:1b:95:56:69:
0d:85:c8:31:04:b7:6a:17:36:1b:b0:35:00:3b:d6:36:0e:6b:
11:e7:8c:9b:85:17:09:10:3b:93:bc:db:a9:30:b5:39:b6:06:
83:46:75:26:32:ef:0a:aa:23:be:69:5f:cc:d0:8f:19:ee:2d:
57:d6:72:0d:2a:1e:41:df:a0:e4:93:45:f0:37:c8:92:72:30:
be:0a:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:48:31 2026 by rpki-client