
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
File: C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json)
Hash identifier: fpPFBxqzIetQMD48c0lbbEi7T9rcwbgHTYfXUcSl+Vo=
Subject key identifier: 73:18:FC:F4:B5:90:34:FB:1F:E2:A8:03:98:F2:1E:3D:C2:9C:B5:8D
Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B
Certificate issuer: /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
Certificate serial: 1B87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
Manifest number: 1B7D
Signing time: Mon 02 Mar 2026 01:23:38 +0000
Manifest this update: Mon 02 Mar 2026 01:23:36 +0000
Manifest next update: Mon 09 Mar 2026 01:23:36 +0000
Files and hashes: 1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: yNAHoUrsi4ob2e2JAD/OqtRKIp/TWcYLt3Xkj/nk5Vg=)
2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: N8G4/01RtsnK/5wYFg/W/SRO8tkHccnmITaVaX2WxsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl
rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7047 (0x1b87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
Validity
Not Before: Mar 2 01:23:36 2026 GMT
Not After : Mar 9 01:23:36 2026 GMT
Subject: CN=69a4e69a-ba12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:9d:94:c8:59:28:03:06:97:cd:c6:bd:e8:
9b:1b:15:99:e9:11:91:36:d0:b1:15:2b:5b:f3:34:
55:03:9c:ea:f7:20:92:1c:8d:f3:49:40:6c:77:b7:
b6:6d:bf:53:81:52:f3:e3:ef:b9:39:eb:74:3d:51:
7f:b9:5d:67:77:bd:de:02:aa:c3:bf:c8:84:b3:af:
64:70:7f:26:05:49:b8:f1:ad:d6:62:2c:90:45:e9:
dc:22:10:54:f3:fc:44:a7:0a:06:17:fd:57:e1:fe:
4b:a3:08:94:64:fc:07:e2:f9:e8:67:21:e2:e2:12:
b4:48:7c:ae:2a:a4:79:65:e7:28:6e:dc:8f:35:c6:
f7:43:4f:a5:93:77:34:52:12:af:4e:16:5e:52:08:
b0:c9:43:10:8a:1e:9f:77:7e:75:f1:be:ea:70:5b:
da:59:31:39:79:39:86:47:a6:05:45:d3:03:ea:ec:
cd:f9:6a:47:66:49:89:da:9f:18:0c:75:fe:ab:87:
76:f8:93:12:b6:05:ba:93:cd:61:1f:56:a4:09:60:
b7:c6:30:57:32:bd:d0:59:31:66:17:da:18:55:33:
e1:9e:46:ab:82:ae:25:8b:48:40:e4:e0:df:cd:da:
c0:06:4d:3d:ef:b3:51:b0:c9:e3:95:64:59:79:42:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:18:FC:F4:B5:90:34:FB:1F:E2:A8:03:98:F2:1E:3D:C2:9C:B5:8D
X509v3 Authority Key Identifier:
keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:15:b8:6b:2a:ee:45:24:74:f9:f0:6c:72:b7:c4:02:f6:8f:
a4:f8:82:d7:cd:1d:25:5b:ee:d4:5b:7a:be:9c:ed:cc:0b:2b:
e0:13:ab:52:69:86:56:15:e0:6a:3b:21:c5:d5:ba:d8:77:df:
4d:d9:a9:d8:52:ba:69:74:e2:80:05:c6:50:77:bd:d5:a1:94:
fa:99:c8:a8:cc:2e:11:ef:e5:1f:c0:9d:03:aa:d5:a5:95:37:
b8:8d:77:85:b0:52:a0:0c:ec:9c:5d:ae:64:fc:74:c5:97:6d:
ce:52:a6:17:18:32:52:3c:08:12:bb:2c:b0:46:2d:c8:29:4c:
12:be:9d:a7:8e:2d:3b:32:9c:37:11:4c:13:91:47:27:de:6c:
36:41:6e:23:a9:a4:c6:24:1e:b1:cb:2c:63:e2:64:ca:24:13:
d2:e8:59:78:be:41:a4:58:f2:66:9c:fc:43:8e:53:7b:f7:5a:
2a:89:c0:f3:ac:08:ca:ce:0b:78:03:06:68:9b:83:b3:a0:2c:
2b:ee:f5:8b:e3:05:4c:d8:14:21:5e:c1:83:17:cc:b4:48:a2:
d0:b8:61:ae:7e:f1:b4:b7:86:a0:ca:a5:c7:02:6f:17:fb:85:
7f:fd:ee:5d:70:59:34:60:53:34:d8:00:24:be:9a:c4:09:c5:
a4:a9:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:20 2026 by rpki-client