
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json)
Hash identifier: upsbYJbVJNzIIGXKA9uUvaZ/DzDULLPIhd1XOsMfoN8=
Subject key identifier: FE:82:0D:76:A6:A9:92:6C:E4:F3:A2:6B:58:39:1E:82:E1:B5:B3:BB
Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Certificate serial: 351B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
Manifest number: 351B
Signing time: Mon 02 Mar 2026 01:49:28 +0000
Manifest this update: Mon 02 Mar 2026 01:49:26 +0000
Manifest next update: Mon 09 Mar 2026 01:49:26 +0000
Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: xzHQ/wFASKAkUoMPPXrAZXq+CmZAbpc6Vz0Wb/uMAX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13595 (0x351b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Validity
Not Before: Mar 2 01:49:26 2026 GMT
Not After : Mar 9 01:49:26 2026 GMT
Subject: CN=69a4eca8-1030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:1b:41:8f:36:f4:15:a9:25:fa:90:53:cb:
d4:e8:eb:a4:31:f4:28:25:1c:b1:6e:a7:af:9e:17:
e6:44:3f:40:53:87:58:70:ad:8c:7d:cf:2d:40:5e:
69:f3:2a:89:fd:3a:06:eb:f7:9a:1e:36:c9:72:19:
fc:e4:f7:41:c1:34:5c:6a:5d:8f:20:d5:3d:55:b8:
9a:66:be:59:51:14:50:93:56:29:be:af:32:0e:21:
ca:11:0c:72:ac:d6:4a:60:de:4e:6d:67:a7:97:d7:
6f:8c:96:26:34:44:5c:8d:b5:5a:46:c2:a2:c2:26:
95:ba:8a:4b:c6:c3:15:fe:84:af:f7:11:ef:f0:63:
d8:33:d5:52:38:a1:09:f4:38:86:69:ba:c3:6b:df:
45:30:26:df:61:a2:19:91:57:e4:8b:c8:63:ec:e8:
ec:7c:80:ae:53:aa:e6:25:7e:54:d9:30:2e:06:ab:
51:6d:93:33:f2:24:29:93:bd:e1:3f:2a:e7:59:c0:
31:6b:c2:d5:f0:5a:9c:58:46:b0:a5:68:91:bd:8c:
c7:9b:c8:6a:b9:27:b0:c4:9e:75:84:5e:3f:c7:b3:
f8:e0:e2:85:0d:61:91:26:72:aa:75:36:76:d8:13:
45:29:69:0f:10:8d:b8:64:57:86:b9:a0:31:d1:46:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:0D:76:A6:A9:92:6C:E4:F3:A2:6B:58:39:1E:82:E1:B5:B3:BB
X509v3 Authority Key Identifier:
keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:7b:38:0a:3d:20:f1:bf:9d:09:12:30:9e:55:77:13:59:0d:
fa:50:40:ab:ea:42:f7:c4:e1:ce:f0:b0:ac:b3:83:b5:a1:bf:
d6:23:6f:73:8c:6d:d8:f4:cf:da:58:ce:e4:b7:7f:f2:3d:f9:
c8:ff:b8:92:65:c2:f8:90:77:94:a5:80:5e:7e:2c:8c:cf:c5:
78:71:5e:35:87:54:38:ad:87:05:5d:81:37:6f:32:f0:a6:c0:
56:fe:4c:42:be:eb:79:12:b4:ce:e2:75:ef:7a:e1:54:c1:b0:
0f:07:8f:aa:74:1e:b1:4c:e4:30:99:ad:d8:7c:5b:d9:0b:15:
34:32:1e:d6:b1:21:68:30:03:64:1f:fe:67:78:7d:63:a6:14:
84:01:f1:d7:c3:9b:c8:d3:67:bc:f1:5f:a4:c5:03:f1:bf:6b:
52:fe:36:6c:a4:f1:f0:7a:3a:bb:d0:e7:4c:75:d2:0f:5b:ba:
45:c6:a2:0e:0c:de:d1:b3:73:17:2a:27:6f:2e:1f:42:d3:a4:
b3:20:08:c3:cf:93:7b:10:6b:b5:3d:33:41:ef:31:20:4e:ab:
50:31:69:b2:22:85:ac:04:dc:9c:d3:54:35:83:38:6d:09:db:
6d:dc:42:ca:34:9c:15:08:ec:17:db:21:d9:09:07:4c:b2:d0:
1f:4a:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:50 2026 by rpki-client