
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json)
Hash identifier: 28fvrzxaPUCYzTvw7KFW8LJ6p1VZyDC7pjFQPsX+Xcc=
Subject key identifier: A0:87:7C:31:3B:F4:F3:54:D9:0B:87:90:EE:35:1D:68:E7:60:D6:4A
Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Certificate serial: 09F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
Manifest number: 09F2
Signing time: Sat 28 Feb 2026 20:08:14 +0000
Manifest this update: Sat 28 Feb 2026 20:08:13 +0000
Manifest next update: Sat 07 Mar 2026 20:08:13 +0000
Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: ltHbMwN9V+o0sHKniJXKA06PJK+c4Cx2MK1Hl9UtqDY=)
2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2553 (0x9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Validity
Not Before: Feb 28 20:08:13 2026 GMT
Not After : Mar 7 20:08:13 2026 GMT
Subject: CN=69a34b2e-2019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:b4:1b:34:74:4b:88:cd:26:2a:b6:fc:11:
50:49:96:28:03:43:8e:24:3c:93:0a:db:2f:f8:34:
de:f9:6f:10:fb:53:01:28:6d:e3:75:93:3f:77:c7:
66:29:80:3f:63:ee:5b:46:49:89:af:ea:f7:46:ae:
75:6d:b6:3a:25:09:61:07:b7:a6:c4:55:6f:f0:de:
55:23:bc:9b:bf:ac:72:fa:98:e5:36:6e:51:b6:0c:
7d:c7:09:1f:42:61:56:54:97:7e:94:5c:39:bb:3e:
0a:f0:95:a6:6d:96:a8:0c:4d:81:bc:94:c0:d0:f8:
89:2a:7c:b2:e8:eb:28:d2:3f:5e:06:0a:54:39:17:
c6:82:28:7b:d5:59:86:b5:31:8e:49:20:5b:d6:d9:
82:62:f5:bb:47:59:79:75:48:10:e5:f9:9f:a2:d0:
d4:46:4c:ee:e1:4f:48:d8:47:e7:a3:7e:4f:a2:e1:
52:3d:45:a7:ef:71:d7:09:47:fb:e8:59:b8:31:c3:
2d:7b:60:65:d6:15:03:2f:f6:58:f3:eb:34:0c:c7:
1d:d5:ec:35:ce:e4:ac:96:84:f9:ee:a1:38:fb:b2:
da:74:47:26:19:27:87:1e:f6:74:ad:87:af:7f:8b:
61:02:44:4d:a5:bd:23:8e:82:37:e2:88:8a:e9:96:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:87:7C:31:3B:F4:F3:54:D9:0B:87:90:EE:35:1D:68:E7:60:D6:4A
X509v3 Authority Key Identifier:
keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ee:9f:ba:1f:86:33:ec:bf:fc:09:81:eb:e3:65:0c:8e:73:
9f:03:62:79:78:ff:ad:32:ec:5f:a0:c5:b1:ff:33:be:30:3f:
b3:96:81:5a:c1:09:0a:88:03:23:55:b9:da:81:8f:e1:af:ab:
f5:91:a0:62:32:1e:21:fe:84:fa:fd:4f:81:53:2d:c9:20:72:
8c:c8:b0:6c:2d:86:2a:43:72:29:aa:26:31:31:ae:98:85:87:
9a:42:32:b2:29:eb:8b:d2:b4:5e:15:6e:58:fd:38:70:e5:7e:
22:b7:33:70:fd:96:4c:77:a5:bc:64:12:f4:0f:b7:c1:23:55:
c0:a5:39:8f:65:05:92:db:1a:ba:1b:ee:71:79:1e:4d:1d:9a:
c2:8c:bc:74:66:ca:97:b4:3f:6f:ed:f4:8d:13:3b:c6:88:98:
96:a4:1e:6e:37:a0:8c:5f:e0:ae:cc:8e:04:a8:cc:05:53:13:
d6:31:ed:71:0d:f5:a3:11:8e:9d:71:f2:81:0d:97:99:bd:92:
d9:cd:f1:e3:f7:a7:88:35:56:d7:71:aa:e7:8d:aa:65:de:7c:
a1:2a:9d:3a:1b:31:0e:0f:87:5c:db:cf:db:d5:33:67:9c:9f:
0e:d5:34:76:3a:03:43:09:f5:d5:91:24:f4:83:6e:b1:c2:3d:
a9:79:28:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF
RkJBNDREM0YwHhcNMjYwMjI4MjAwODEzWhcNMjYwMzA3MjAwODEzWjAYMRYwFAYD
VQQDDA02OWEzNGIyZS0yMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0FK0GzR0S4jNJiq2/BFQSZYoA0OOJDyTCtsv+DTe+W8Q+1MBKG3jdZM/d8dm
KYA/Y+5bRkmJr+r3Rq51bbY6JQlhB7emxFVv8N5VI7ybv6xy+pjlNm5Rtgx9xwkf
QmFWVJd+lFw5uz4K8JWmbZaoDE2BvJTA0PiJKnyy6Oso0j9eBgpUORfGgih71VmG
tTGOSSBb1tmCYvW7R1l5dUgQ5fmfotDURkzu4U9I2Efno35PouFSPUWn73HXCUf7
6Fm4McMte2Bl1hUDL/ZY8+s0DMcd1ew1zuSsloT57qE4+7LadEcmGSeHHvZ0rYev
f4thAkRNpb0jjoI34oiK6ZatPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCHfDE7
9PNU2QuHkO41HWjnYNZKMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0
NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC
WTNsQVNDcU1TS3p2dWtUVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHO6fuh+GM+y//AmB6+NlDI5znwNieXj/rTLsX6DFsf8zvjA/s5aBWsEJCogD
I1W52oGP4a+r9ZGgYjIeIf6E+v1PgVMtySByjMiwbC2GKkNyKaomMTGumIWHmkIy
sinri9K0XhVuWP04cOV+IrczcP2WTHelvGQS9A+3wSNVwKU5j2UFktsauhvucXke
TR2awoy8dGbKl7Q/b+30jRM7xoiYlqQebjegjF/grsyOBKjMBVMT1jHtcQ31oxGO
nXHygQ2Xmb2S2c3x4/eniDVW13Gq542qZd58oSqdOhsxDg+HXNvP29UzZ5yfDtU0
djoDQwn11ZEk9INuscI9qXkoRQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:57 2026 by rpki-client