
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
File: 7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json)
Hash identifier: fSCvT+3e69JH7+zp42hzWSuJDYR1qXhoLuM2Air4W0A=
Subject key identifier: C7:A6:4C:DD:42:33:FD:BF:A6:77:A0:85:02:53:AE:25:8B:5A:75:FD
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial: 3585
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
Manifest number: 3545
Signing time: Sat 28 Feb 2026 14:52:29 +0000
Manifest this update: Sat 28 Feb 2026 14:52:29 +0000
Manifest next update: Sat 07 Mar 2026 14:52:29 +0000
Files and hashes: 1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: VaBoPqyrmQuLuP+EGCzk72t+BvG5+4ck+7fL2H90gng=)
2: F026CE74927411EDB020A481C4F9AE02.roa (hash: H8RC1kzYLfIY8woPP7gN4uej8dXsy7Jj+j5pLZXc/0Y=)
3: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: yis9VVzi8QRwExdYmq7nHD83ZqP/ATPYVFBUyxAnRF4=)
4: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: Q9FsVr4Yw7V8aGFlyUG59yrXi1olAITyZrt6BuH1uPI=)
5: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: LITexHYBGQfDHaFNmDEvh2QlPnF2urSCL7j/a8BM0Co=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 14:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13701 (0x3585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Validity
Not Before: Feb 28 14:52:29 2026 GMT
Not After : Mar 7 14:52:29 2026 GMT
Subject: CN=69a3012d-550d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:0c:ca:42:c5:67:c7:ca:20:cb:b5:70:82:
2e:b0:32:e2:44:72:5e:39:01:52:6d:55:50:3e:40:
6d:71:6a:d6:d1:d3:a0:56:6f:1d:46:e1:2a:26:a5:
2b:8e:ca:d4:7c:06:97:72:ca:1f:a9:70:ad:8e:09:
4e:58:cf:47:20:3f:b0:94:f2:01:72:67:9c:e4:17:
1c:fc:cf:26:be:75:33:f4:1d:71:ee:f9:5d:ba:9e:
54:32:2e:c2:51:d5:50:3c:62:8b:fb:77:aa:a8:9a:
11:d9:65:95:19:70:9e:34:74:d6:9c:f2:ad:ff:b7:
78:67:ba:75:ca:dd:dd:ba:71:30:17:ba:b7:db:cd:
ea:21:b8:80:3c:44:bd:1e:07:0c:51:20:fa:db:f4:
1e:a5:ff:bb:86:d8:90:08:cd:a6:cf:12:4a:63:03:
ee:1b:b9:65:4f:2d:0b:21:a7:1a:3b:a4:a9:7a:83:
dd:cb:24:f3:76:9e:a3:5a:cc:ac:6b:a7:31:1a:f5:
3d:f9:ce:26:63:21:bb:6d:e0:45:38:c3:81:9d:f3:
a1:b9:f1:c4:b8:b0:f3:ee:10:59:bf:dc:d7:30:75:
4a:03:20:ea:a9:04:3a:a0:de:e0:08:42:c1:93:51:
63:4d:33:bd:96:f3:72:2d:4f:8c:13:4a:6d:5e:d1:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:4C:DD:42:33:FD:BF:A6:77:A0:85:02:53:AE:25:8B:5A:75:FD
X509v3 Authority Key Identifier:
keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:90:0f:2d:4c:76:d1:d4:af:c7:01:ef:24:26:56:5b:11:32:
ab:d5:aa:79:a8:16:c2:58:a9:c0:c0:21:8c:7c:b3:c4:27:55:
71:40:fa:98:67:dc:96:b2:c2:c3:0c:fa:31:1e:15:c9:e4:90:
19:f3:de:6d:9c:7e:7e:08:34:f9:d8:39:eb:a4:88:01:44:5d:
34:7b:8a:ea:2c:3c:49:99:03:0b:c5:43:24:62:b8:3c:d9:a7:
2f:fd:be:4d:90:2f:b5:43:cd:fe:1d:42:33:de:47:b2:6a:74:
e4:ab:86:4e:e9:c6:77:e8:d7:b6:54:11:48:bf:71:09:61:83:
2f:57:fb:e3:bd:f9:28:36:fa:37:1c:6e:91:29:e4:4e:f8:e5:
ed:91:35:4f:5a:e4:1e:4b:a6:89:e5:dd:fe:a6:b2:41:51:f5:
db:b9:22:77:71:b7:a4:4d:0e:27:5c:af:e5:76:68:e2:1d:1a:
e7:c9:46:77:ce:a7:46:04:9b:1a:81:3b:5f:de:fd:be:fa:cb:
01:80:8b:a3:4f:18:04:02:71:c8:68:5e:48:52:0b:f8:ed:97:
5e:38:b3:fe:82:40:99:4b:44:5d:f0:3e:1f:6a:90:35:02:e6:
79:81:9d:e5:60:64:9c:6f:42:52:ae:4b:32:be:3e:4a:b0:5e:
de:96:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:37 2026 by rpki-client