
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json)
Hash identifier: JWHzOwyyea/TH1AVSkJiuf5l/67XRgQVg4F7EeYoYyg=
Subject key identifier: 5C:43:DD:C7:D6:DF:8B:8A:44:60:02:57:E3:CA:90:95:05:E8:41:49
Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Certificate serial: 131E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
Manifest number: 1311
Signing time: Mon 02 Mar 2026 01:48:10 +0000
Manifest this update: Mon 02 Mar 2026 01:48:08 +0000
Manifest next update: Mon 09 Mar 2026 01:48:08 +0000
Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: 8WU3ABEz+gFCqpSdUgCM/zMijdIy20Lb+j8rdRtqcpc=)
2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: o60MWP+DlNCHL5TPTYVqrO/Lu4kM0QYf6Eyv0LamcPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4894 (0x131e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Validity
Not Before: Mar 2 01:48:08 2026 GMT
Not After : Mar 9 01:48:08 2026 GMT
Subject: CN=69a4ec5a-93d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:90:3d:93:c5:5a:49:75:4a:71:9d:fd:39:
30:06:9e:57:49:72:c2:71:dc:0a:bf:6d:a9:0e:79:
21:70:5a:f2:74:03:46:17:ef:99:55:8d:fb:24:43:
71:ef:c8:49:4f:52:81:aa:ce:96:25:24:1e:9b:50:
26:02:96:98:7a:d3:23:ec:2c:a0:02:54:6d:41:ff:
5a:42:9b:d8:55:e9:ef:db:c9:32:f7:f8:15:fd:47:
4b:61:2f:a4:91:10:4f:5c:c6:83:b0:80:f1:6f:3c:
5e:00:1e:57:2c:75:1d:eb:dc:54:09:eb:15:91:5e:
50:8d:54:aa:ed:11:f2:cd:41:f7:6c:b7:a2:3b:47:
d2:4a:01:9c:95:0d:60:3a:e6:df:87:96:df:f6:b0:
39:df:cf:d4:8e:66:dd:28:33:a8:73:58:c5:37:80:
c4:fc:ef:d4:3d:84:f2:ef:55:6d:df:6c:ad:50:8a:
3d:ea:dc:16:dc:eb:17:c6:1f:20:8d:2e:d3:1d:4f:
1a:7d:a6:bf:82:79:76:f6:e9:14:39:57:5b:44:7f:
f8:67:49:ea:71:99:59:ae:e6:0c:b8:86:28:c9:06:
10:d7:4e:58:e4:4a:99:ec:74:b7:8f:0a:66:67:60:
f4:c9:12:13:fc:21:73:94:a4:df:6c:43:3c:af:7c:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:43:DD:C7:D6:DF:8B:8A:44:60:02:57:E3:CA:90:95:05:E8:41:49
X509v3 Authority Key Identifier:
keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:36:d0:0c:ec:c4:f3:8b:bd:88:ae:eb:f1:65:e3:39:9d:a0:
60:7f:16:18:cc:81:36:40:56:fa:01:b7:fe:7c:72:79:77:25:
25:5b:65:41:3b:35:0d:bc:8e:57:ea:fe:81:87:cc:be:fb:fa:
a9:a8:df:ae:a5:f0:ef:95:7e:b8:94:c3:22:64:ad:cc:00:b9:
ef:06:b3:b7:71:d7:a4:27:74:28:2b:04:d4:ae:de:7a:1c:44:
1f:5e:1e:0a:99:32:ac:ac:aa:1b:4f:07:e9:79:32:16:93:2a:
e2:a7:6b:f5:4e:c4:f5:ce:14:fa:9d:ca:53:30:9c:da:14:4e:
e0:2a:d5:3c:b8:45:c4:67:e2:fd:f2:38:ef:23:11:49:b4:19:
d0:c4:0f:eb:3e:78:fe:93:e8:f8:6d:7f:39:68:d6:8c:3d:82:
48:44:6a:ba:d9:72:07:99:23:b8:00:4c:87:51:80:3b:ac:d8:
ea:76:6a:2e:f7:7c:ca:57:a7:0d:a9:aa:c4:eb:ea:06:ad:95:
e7:3a:f9:16:82:83:c5:bb:68:99:a0:f1:17:c3:91:eb:e5:b5:
28:db:47:09:b3:4c:75:06:bd:bb:25:43:ad:19:43:ec:2b:b2:
f9:6b:c8:fd:7e:15:40:25:4c:b9:9e:98:8a:26:4c:35:da:87:
38:61:93:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy
OEE2NDVGNEIwHhcNMjYwMzAyMDE0ODA4WhcNMjYwMzA5MDE0ODA4WjAYMRYwFAYD
VQQDEw02OWE0ZWM1YS05M2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnYmQPZPFWkl1SnGd/TkwBp5XSXLCcdwKv22pDnkhcFrydANGF++ZVY37JENx
78hJT1KBqs6WJSQem1AmApaYetMj7CygAlRtQf9aQpvYVenv28ky9/gV/UdLYS+k
kRBPXMaDsIDxbzxeAB5XLHUd69xUCesVkV5QjVSq7RHyzUH3bLeiO0fSSgGclQ1g
Oubfh5bf9rA538/UjmbdKDOoc1jFN4DE/O/UPYTy71Vt32ytUIo96twW3OsXxh8g
jS7THU8afaa/gnl29ukUOVdbRH/4Z0nqcZlZruYMuIYoyQYQ105Y5EqZ7HS3jwpm
Z2D0yRIT/CFzlKTfbEM8r3xyPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxD3cfW
34uKRGACV+PKkJUF6EFJMB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB
OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT
dnBGZEFqNFluV0VvcGtYMHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAazbQDOzE84u9iK7r8WXjOZ2gYH8WGMyBNkBW+gG3/nxyeXclJVtlQTs1DbyO
V+r+gYfMvvv6qajfrqXw75V+uJTDImStzAC57wazt3HXpCd0KCsE1K7eehxEH14e
CpkyrKyqG08H6XkyFpMq4qdr9U7E9c4U+p3KUzCc2hRO4CrVPLhFxGfi/fI47yMR
SbQZ0MQP6z54/pPo+G1/OWjWjD2CSERqutlyB5kjuABMh1GAO6zY6nZqLvd8ylen
DamqxOvqBq2V5zr5FoKDxbtomaDxF8OR6+W1KNtHCbNMdQa9uyVDrRlD7Cuy+WvI
/X4VQCVMuZ6YiiZMNdqHOGGTww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:01 2026 by rpki-client