
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier: fbz2wAE98wcpqIBKQC4L4ICrIx8R//nW3DGnRJx+t/I=
Subject key identifier: CA:B5:D2:5A:DA:1F:F4:48:9E:22:75:9E:13:C0:4D:7D:A5:F5:FA:E6
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number: D9
Signing time: Sun 01 Mar 2026 08:26:34 +0000
Manifest this update: Sun 01 Mar 2026 08:26:33 +0000
Manifest next update: Sun 08 Mar 2026 08:26:33 +0000
Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: aExoZ0YwrVr+suhqjXtxMCo+ZvarqXvZOWnlsLEFaKU=)
2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: 9KLT865tYEymgriQqOzA9F8VKTM5qw8pmJPKAk9mtkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Validity
Not Before: Mar 1 08:26:33 2026 GMT
Not After : Mar 8 08:26:33 2026 GMT
Subject: CN=69a3f83a-4daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:d0:de:ea:8a:8d:ee:3a:35:65:32:08:29:
9f:31:23:38:44:5b:f6:c3:0a:3f:7e:dc:1d:5e:00:
c8:cb:3a:95:5e:d3:83:2d:92:5e:6a:d6:be:7c:09:
bb:e9:c8:08:55:40:de:9f:ab:88:c1:4a:50:5f:18:
ca:99:17:63:23:34:d3:9f:d2:9a:3f:3f:a1:2d:1b:
30:91:cb:4f:71:27:d4:ec:74:84:84:c5:02:4d:58:
0d:26:01:8d:d3:fd:5a:2d:de:d9:27:57:9a:8a:b3:
ec:8f:64:65:66:9b:44:b2:8e:68:c4:10:ad:9e:a5:
3e:ba:6e:a3:9a:18:bd:3e:ed:dc:1b:d6:62:cb:e5:
73:13:54:ab:e4:e5:c1:63:de:f8:50:a1:9c:7a:9a:
c5:67:69:f3:bf:9d:27:42:9e:a3:53:8a:57:a3:25:
02:50:ee:c3:16:0c:9b:e8:fc:1b:5f:ae:9c:55:ad:
49:59:f8:8f:52:c6:e8:95:6a:00:f7:5d:13:fe:d2:
9d:8e:b7:ea:89:7b:3c:b1:e3:1b:45:d5:9c:f2:ca:
7c:e6:d2:23:5f:2d:c5:21:c7:a5:77:42:72:f2:c0:
02:c3:7c:31:5c:5b:28:a9:9c:cc:ab:61:d8:b5:42:
a9:8c:29:69:10:e1:e6:e3:2f:5b:bd:f7:f7:aa:dd:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B5:D2:5A:DA:1F:F4:48:9E:22:75:9E:13:C0:4D:7D:A5:F5:FA:E6
X509v3 Authority Key Identifier:
keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:a2:1a:b6:d7:39:5a:f2:e4:5d:d4:d9:88:ed:aa:c9:12:c6:
41:e1:aa:e7:ee:2e:d2:fa:ff:9c:6f:16:9f:df:4f:37:5b:0c:
7d:51:5d:3f:bb:c2:dd:c5:f9:f9:5c:51:f6:b6:a9:f0:1a:f3:
49:29:ab:81:97:66:6e:e6:94:df:29:6e:01:f0:f1:84:5e:2e:
fe:44:60:1c:4c:ea:bb:1e:7a:b8:12:c0:4d:77:f3:2d:21:f9:
96:e3:04:19:d1:d7:55:82:03:00:81:da:be:f4:78:a7:fe:18:
18:36:7b:e6:81:3e:15:9b:b1:c6:b4:c9:5e:5d:97:43:ae:ee:
28:65:e7:0f:14:27:2a:85:6f:c6:7c:05:1d:f7:dd:de:f6:9e:
b1:69:dd:f1:0f:57:66:60:e2:9e:f0:e2:e0:da:e5:39:b6:90:
46:ab:d1:c7:0d:5a:73:51:2d:7c:eb:93:8e:9f:14:c3:ab:a9:
77:c7:a0:93:df:df:12:24:60:c8:90:c4:14:ef:d4:72:89:06:
1e:00:ef:76:dd:e4:a9:7e:18:96:af:48:0c:25:71:e9:8e:61:
32:ee:f7:04:22:c3:69:5b:65:58:c8:f8:6d:a5:86:5a:ad:e9:
47:ef:25:93:59:86:22:9b:bc:3a:38:6e:4c:6c:df:da:e8:c7:
d9:45:eb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:53 2026 by rpki-client