
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json)
Hash identifier: 1R5U4TCIA9wD2UYl7U+gvaMFusD4HA7h8HatLGCOwpw=
Subject key identifier: 73:15:BC:1A:01:EF:4D:30:7B:BB:69:FF:B6:85:27:DB:26:1E:6C:D6
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
Manifest number: B8
Signing time: Sun 01 Mar 2026 08:14:59 +0000
Manifest this update: Sun 01 Mar 2026 08:14:58 +0000
Manifest next update: Sun 08 Mar 2026 08:14:58 +0000
Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: mKM1NmNu3kiClevQxqVt//c2rljojWViZzWB1zrN/6g=)
2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: XIXAdlf2Wapfr3aA+RYeScI/7J0gFTrDr34LwCofapU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Validity
Not Before: Mar 1 08:14:58 2026 GMT
Not After : Mar 8 08:14:58 2026 GMT
Subject: CN=69a3f583-3ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:a4:4d:d9:0f:dc:a4:a8:22:98:06:56:88:
a4:11:ef:95:37:87:d4:f9:3d:de:3e:93:2b:e2:4a:
0a:8e:3d:4e:4a:0d:5b:a4:18:94:d5:f8:c6:4a:5f:
f9:97:34:e4:4f:32:d4:ab:02:2e:c8:17:aa:f5:4a:
c2:f3:24:88:b4:17:be:7e:7d:93:7b:bd:8d:d8:57:
a5:c7:79:06:5b:bb:e6:45:e5:20:87:c0:3a:bd:0a:
00:54:58:56:c4:9c:d2:2d:36:03:e9:66:9b:f1:d0:
6b:33:f3:ad:86:52:93:e6:8c:94:48:1f:3c:c4:5b:
3d:7a:fc:21:3e:98:ea:12:03:8b:49:0f:d6:34:35:
17:f1:5c:52:40:04:d9:e5:b0:f1:ce:1c:25:d1:d8:
f6:37:b5:f4:8a:00:55:ba:32:81:be:2c:e4:d2:44:
b3:ba:35:7f:12:ba:bd:d3:e3:65:e4:90:77:3a:d3:
60:f6:c6:5e:22:02:b4:1a:15:bf:6b:55:2f:b7:8e:
60:dc:cc:91:40:a2:7f:1e:a7:02:a1:aa:f0:00:d2:
5e:f9:98:2b:cf:9b:e9:11:99:2e:8e:d7:39:4a:9a:
d8:f9:ff:17:44:ab:0d:be:dd:d7:1d:e9:f6:5e:f3:
df:3a:96:09:f3:2f:d7:49:7c:cc:53:55:a7:88:65:
a0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:15:BC:1A:01:EF:4D:30:7B:BB:69:FF:B6:85:27:DB:26:1E:6C:D6
X509v3 Authority Key Identifier:
keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:37:88:23:a4:f0:1c:3e:5a:57:d9:81:26:9c:2d:45:30:24:
85:69:61:0b:ab:9a:47:dc:84:01:0c:2c:f2:5a:f6:b5:8e:9f:
c3:14:c0:55:a0:f8:b9:65:a7:f9:c8:20:5d:ef:31:d6:f3:74:
bd:32:89:e1:09:d1:41:52:9f:71:77:26:f7:95:89:5b:22:23:
10:ba:07:dd:78:3f:82:98:c2:aa:9a:e6:ca:92:d0:13:4d:91:
0d:35:e2:7e:63:ac:ec:c8:df:fd:63:24:dd:e3:d8:ab:0a:c7:
57:a0:4c:9f:6d:d9:dc:e7:54:9e:a0:d3:37:02:ea:47:a0:e9:
50:57:f9:09:81:65:e5:28:e1:26:1c:26:b4:ca:88:dc:d9:ff:
69:4f:59:a1:c4:43:d5:8c:ef:16:da:73:8c:c9:f7:a8:1e:b7:
0e:7e:2b:3f:53:61:6d:40:6e:3c:ee:27:a8:ea:aa:f6:ab:75:
59:22:66:f6:87:05:0e:a3:86:b8:09:07:c1:2b:a7:1f:ea:19:
f3:37:2c:84:e3:56:57:5f:3f:70:50:90:65:d0:a1:5b:44:50:
42:b3:de:0b:f0:0c:06:6a:f4:09:60:27:fb:57:72:46:2c:58:
01:bc:f3:d5:3b:87:96:7c:24:3c:ec:b8:d1:df:41:07:a3:28:
81:94:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:25 2026 by rpki-client