
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
File: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft (raw, json)
Hash identifier: yAjuS0dzYFV+OyYo4y8KFoQXCcvAMc85/+fbxLasedA=
Subject key identifier: 24:8C:42:DC:99:F4:64:E2:65:60:F3:B4:C3:93:43:0D:9C:39:AF:A4
Authority key identifier: 3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E
Certificate issuer: /CN=A9194CBE/serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
Certificate serial: 07F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
Manifest number: 07EB
Signing time: Sat 28 Feb 2026 21:39:33 +0000
Manifest this update: Sat 28 Feb 2026 21:39:32 +0000
Manifest next update: Sat 07 Mar 2026 21:39:32 +0000
Files and hashes: 1: O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl (hash: hbvHeiuhDeDpHcIgYbXVFYwkzOnYcDfofaN0taF7sJw=)
2: C329F1CE2AB611EDB5BBD62BC4F9AE02.roa (hash: uDD5AVB/RaWHU6lfCI1u4ybkoLplLW8pTM/V7QUD8Ds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl
rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040 (0x7f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194CBE, serialNumber=3BB051A7DABA687FE3A561E38F47B950467C571E
Validity
Not Before: Feb 28 21:39:32 2026 GMT
Not After : Mar 7 21:39:32 2026 GMT
Subject: CN=69a36095-6518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:c2:0a:78:c1:e8:93:b5:a4:fe:57:cf:f1:
c1:1b:28:ec:11:5c:4c:f7:a2:ca:4c:de:2b:6f:c7:
d9:43:93:bd:cd:f1:16:31:3b:8a:9d:c4:5b:49:2b:
b2:65:22:60:67:f6:1f:56:86:68:56:98:c6:72:9f:
e9:95:5a:f0:19:a8:0d:9d:a8:56:3f:87:9f:40:46:
55:a1:fd:c4:e6:e4:4a:42:f3:50:10:eb:c2:66:fc:
d8:3d:62:34:9c:9b:c7:b1:37:e0:9c:28:eb:ca:a9:
d1:8f:5d:78:72:09:cf:db:11:7c:69:8a:4d:27:6a:
30:b2:ea:72:f3:a1:78:8d:fd:13:6c:68:f0:5b:1c:
06:9e:cf:b4:6a:59:8f:ec:83:3e:ab:b3:e4:c9:d3:
ad:5e:4a:4e:24:4f:ef:87:ca:f8:a5:76:63:89:e8:
ce:bf:90:38:ad:f3:90:dc:41:2b:e5:4d:62:b6:60:
ad:d6:cf:53:68:7f:88:1d:c4:cc:2d:03:25:12:14:
06:7a:77:83:aa:ae:27:0d:09:40:aa:19:12:e9:4d:
bb:ed:7c:10:34:46:2c:47:f9:6e:97:1d:f8:dc:f5:
1b:ef:6c:58:53:87:54:c3:f8:1d:d6:e8:55:26:8d:
f0:8d:ab:20:b8:57:1a:4f:af:53:58:e1:2c:2c:f5:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8C:42:DC:99:F4:64:E2:65:60:F3:B4:C3:93:43:0D:9C:39:AF:A4
X509v3 Authority Key Identifier:
keyid:3B:B0:51:A7:DA:BA:68:7F:E3:A5:61:E3:8F:47:B9:50:46:7C:57:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBE/067F4720233011EBBA8C774BC4F9AE02/O7BRp9q6aH_jpWHjj0e5UEZ8Vx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:2a:61:4e:48:0a:89:7a:0d:08:2a:6e:7d:ae:8e:ca:6d:a1:
c8:0e:0b:fc:b3:3c:62:0c:10:a5:80:4f:79:77:6b:a9:2f:66:
f0:bb:8f:ea:b9:c7:95:44:13:8b:9e:80:3b:bd:51:89:bb:5e:
94:e9:4c:f8:29:0f:06:84:ea:36:20:34:40:cb:c8:40:3d:52:
2a:c6:b9:c5:af:07:33:f0:0e:d7:59:93:8d:2f:c8:ec:92:b6:
de:c2:28:dc:fc:ef:fa:5a:91:f4:b5:1b:15:a3:37:9f:06:60:
3d:96:0c:d9:07:3a:34:33:3e:19:f4:e4:ba:6f:4e:96:39:46:
2f:04:e7:37:3c:0b:3f:fc:fa:6b:37:c0:2b:c8:bb:75:14:ce:
4d:4a:d2:60:7e:60:46:76:73:73:9d:86:c3:02:84:85:50:cd:
6d:c3:33:51:8e:2d:01:89:32:01:7f:0f:5a:f9:ae:58:fa:2c:
b1:73:e1:57:84:65:a8:c1:62:db:1d:bf:31:a6:42:fd:bc:e0:
e6:a3:20:ed:18:bf:d2:c7:3d:82:64:38:6e:b0:48:6b:95:76:
ce:da:36:3b:9e:6b:c9:3a:1b:8f:9a:b5:e2:05:f9:eb:8b:83:
ad:8c:c6:fb:a7:8b:79:32:f7:3e:15:de:d2:f3:35:61:02:2a:
a5:a3:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:43 2026 by rpki-client