
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
File: 7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft (raw, json)
Hash identifier: sCqu4acPHCjs4D98HYX7KXBtfajIjhWutytQAvK+4+4=
Subject key identifier: 81:FA:00:AF:B6:40:92:4E:DA:89:3C:FF:BC:61:01:7E:7E:DC:0B:A6
Authority key identifier: ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
Certificate issuer: /CN=A9193C07/serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
Manifest number: 2D
Signing time: Mon 02 Mar 2026 11:10:27 +0000
Manifest this update: Mon 02 Mar 2026 11:10:26 +0000
Manifest next update: Mon 09 Mar 2026 11:10:26 +0000
Files and hashes: 1: 7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl (hash: uvz1yo0LFZ46xbbpUWF4LyNukPOxyq3vwNHd157ENHI=)
2: 2C4F5466E47A11F08671F3E23F6F56BC.roa (hash: F0pWuoH0rI0j6ChIhlPeIRDmqaB+Cjn0QcrrQhMWBus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193C07, serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Validity
Not Before: Mar 2 11:10:26 2026 GMT
Not After : Mar 9 11:10:26 2026 GMT
Subject: CN=69a57022-874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:7a:16:fe:f3:7b:9b:d9:ca:31:a8:3e:cb:
48:fb:f1:4e:5e:fc:b0:d2:47:37:5d:23:e9:8e:61:
a2:ed:b4:57:b2:7b:5d:6b:8c:02:3b:fe:4f:a3:b4:
c0:ad:59:80:75:3d:44:04:75:dc:56:13:6f:b0:d4:
f3:ce:6e:cf:3a:14:2c:30:a7:0a:21:3b:f4:93:52:
2e:a3:2b:d5:1a:2a:d4:f7:be:86:79:7a:ca:33:03:
6b:49:10:a7:b6:92:99:15:48:03:67:31:42:92:76:
d7:fe:d7:e8:b3:7d:95:aa:b3:f3:e7:41:f7:86:c3:
6f:80:c3:ac:9c:33:ed:d1:b9:b1:ab:4c:d6:f2:ec:
8d:0f:f6:22:94:b8:49:54:db:35:c2:ff:ee:d6:60:
8b:24:16:a4:ce:54:18:8a:de:8f:45:eb:78:28:69:
aa:4d:b7:ff:50:fe:e6:ea:1d:3d:d0:6f:8e:0b:de:
d3:17:5e:56:70:cd:8f:5f:2f:ef:a3:6d:81:13:ff:
cc:77:01:39:21:19:4a:39:1e:67:32:41:cc:91:00:
30:94:8d:ab:2d:69:a8:ce:dd:c1:a6:34:30:35:80:
ac:6f:17:3f:7f:81:a6:36:a7:c8:b6:ef:72:37:f5:
62:f6:da:02:96:e7:96:95:68:27:85:17:38:1a:e9:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FA:00:AF:B6:40:92:4E:DA:89:3C:FF:BC:61:01:7E:7E:DC:0B:A6
X509v3 Authority Key Identifier:
keyid:ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:61:9d:c5:e1:b7:15:91:de:85:9c:7b:f0:7c:4a:bc:ec:d4:
61:0d:7d:af:10:08:91:64:28:b8:56:7e:e3:fb:48:cd:8c:c6:
ee:c9:0d:6d:7a:db:14:f9:23:b3:18:d9:c3:dc:cd:bb:9e:40:
f1:3a:7d:98:97:30:5e:de:c6:bf:23:e1:cd:4d:5c:6f:3a:38:
9c:18:de:0f:e0:97:c4:e9:42:5a:e6:4a:eb:43:1e:0c:96:f6:
12:7e:be:aa:60:6f:8c:3a:32:c4:12:91:dc:eb:fd:8b:0f:04:
7c:78:a7:5a:e2:ed:8f:dc:fd:8e:b2:d4:9f:85:82:74:b0:da:
fc:2a:2e:2c:31:53:34:60:2a:31:2b:c7:6a:27:79:b0:5c:c0:
6d:c6:f2:60:9d:df:b6:9d:9f:98:01:70:4c:9b:2e:b2:91:ec:
e1:15:84:e6:9b:fc:25:9d:76:2f:7b:b7:9a:15:e0:d7:8a:63:
28:7a:3b:85:43:8d:66:25:a8:a2:20:f4:06:27:76:bd:49:2d:
ba:b0:c6:95:d0:07:c4:b6:5a:25:75:11:75:5d:f6:6a:0d:f9:
49:9e:9b:b2:65:e7:79:d7:60:3c:d9:33:09:30:d9:21:15:11:
af:7a:c7:30:28:ca:04:84:c4:9b:06:19:c1:a7:ea:bc:8c:5d:
fb:52:40:c0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
M0MwNzExMC8GA1UEBRMoRUQzQzFCREVBMzdFRkRDNEVBQ0I1NTRFQjg4QjEwQzE1
NDAyRTgzQTAeFw0yNjAzMDIxMTEwMjZaFw0yNjAzMDkxMTEwMjZaMBgxFjAUBgNV
BAMTDTY5YTU3MDIyLTg3NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqnHoW/vN7m9nKMag+y0j78U5e/LDSRzddI+mOYaLttFeye11rjAI7/k+jtMCt
WYB1PUQEddxWE2+w1PPObs86FCwwpwohO/STUi6jK9UaKtT3voZ5esozA2tJEKe2
kpkVSANnMUKSdtf+1+izfZWqs/PnQfeGw2+Aw6ycM+3RubGrTNby7I0P9iKUuElU
2zXC/+7WYIskFqTOVBiK3o9F63goaapNt/9Q/ubqHT3Qb44L3tMXXlZwzY9fL++j
bYET/8x3ATkhGUo5HmcyQcyRADCUjastaajO3cGmNDA1gKxvFz9/gaY2p8i273I3
9WL22gKW55aVaCeFFzga6XERAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgfoAr7ZA
kk7aiTz/vGEBfn7cC6YwHwYDVR0jBBgwFoAU7Twb3qN+/cTqy1VOuIsQwVQC6Dow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQzA3L0UwM0U5NUUwRTQ3
NTExRjBCRDYwMDEzNTNGNkY1NkJDLzdUd2IzcU4tX2NUcXkxVk91SXNRd1ZRQzZE
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvN1R3YjNxTi1fY1RxeTFWT3VJc1F3VlFDNkRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz
QzA3L0UwM0U5NUUwRTQ3NTExRjBCRDYwMDEzNTNGNkY1NkJDLzdUd2IzcU4tX2NU
cXkxVk91SXNRd1ZRQzZEby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQChYZ3F4bcVkd6FnHvwfEq87NRhDX2vEAiRZCi4Vn7j+0jNjMbuyQ1tetsU+SOz
GNnD3M27nkDxOn2YlzBe3sa/I+HNTVxvOjicGN4P4JfE6UJa5krrQx4MlvYSfr6q
YG+MOjLEEpHc6/2LDwR8eKda4u2P3P2OstSfhYJ0sNr8Ki4sMVM0YCoxK8dqJ3mw
XMBtxvJgnd+2nZ+YAXBMmy6ykezhFYTmm/wlnXYve7eaFeDXimMoejuFQ41mJaii
IPQGJ3a9SS26sMaV0AfEtloldRF1XfZqDflJnpuyZed512A82TMJMNkhFRGvescw
KMoEhMSbBhnBp+q8jF37UkDA
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:47:57 2026 by rpki-client