
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier: H8XvSywETNTcsUlmKAtmFDwaSTV4vuArDVihwAzMfgU=
Subject key identifier: 85:87:55:C5:B3:76:84:B6:DF:3D:12:5D:14:02:7F:D8:7F:6B:8B:BA
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 0352
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number: 0339
Signing time: Sun 01 Mar 2026 01:55:43 +0000
Manifest this update: Sun 01 Mar 2026 01:55:43 +0000
Manifest next update: Sun 08 Mar 2026 01:55:43 +0000
Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: OKojY5xyCcOBdNeS17NzpESssSKeLT+HD/bs9aBAi6w=)
2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: BW5tT5Fwnb90kCw3kdyCo6pAhP8PZLajj0fwMdIDbDA=)
3: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: 2FTQfXCf5iEijrWaIGoqW7OkD23cYHWReHvkr3RdiVo=)
4: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 9Lyfdf8jewXKDNNSejND0Fdao81XqhdSmTyOn0pVCEo=)
5: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: z4aaUTQPt4LTmxBrxqPbGwAQr9ekPHI1lkNmNVVH7mw=)
6: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: zUxzk8PVVaES9EMN0VkIqcIxDvXdbV+4WJwr6H3F2mM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:55:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Mar 1 01:55:43 2026 GMT
Not After : Mar 8 01:55:43 2026 GMT
Subject: CN=69a39c9f-25e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:0f:de:9a:10:7c:93:61:3f:a3:44:81:b8:
94:23:08:6c:da:87:e3:64:c3:c6:db:f5:b0:96:c3:
47:a9:bc:b0:60:7a:7a:74:87:93:e3:1b:d0:fb:b2:
3d:70:42:dc:7c:0a:e0:f7:3d:d0:70:52:86:cb:97:
67:1a:83:6f:9b:7a:a7:14:b0:62:9a:ea:ea:ef:72:
2e:0f:c8:c7:0a:94:51:a1:19:04:9a:bc:e5:a7:9e:
1e:14:99:a6:1b:69:25:d2:3b:4a:23:45:2f:ce:b4:
bf:69:6a:31:3b:60:ee:06:c1:83:23:e2:b0:23:68:
94:f7:fd:74:ae:ff:57:44:eb:d2:80:2c:5f:5b:71:
44:1a:d1:bc:7e:6a:26:ea:9e:6d:6a:10:e2:77:91:
20:19:9c:82:fc:92:5f:b8:87:95:57:fc:84:83:9f:
36:8c:ca:c1:61:4a:5e:c4:1e:1f:a2:bb:5c:d8:c6:
9d:ae:56:03:65:87:be:4b:6c:66:aa:de:2a:d6:9d:
3f:7a:98:6f:57:67:01:7f:db:3f:db:90:40:f8:6b:
c1:2c:28:6f:00:84:a6:09:d8:03:e7:67:f3:a6:18:
fb:20:79:25:f7:dd:1b:ac:a9:ed:bf:50:a2:6e:ae:
cf:1a:c5:fd:e1:c2:33:9b:6e:e0:55:fa:e3:bb:7f:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:87:55:C5:B3:76:84:B6:DF:3D:12:5D:14:02:7F:D8:7F:6B:8B:BA
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:d2:99:10:94:2b:44:15:d9:b2:cf:bf:41:e8:a8:3b:2a:2c:
45:39:94:f4:a6:56:98:4b:b3:d4:45:39:19:3a:11:75:bd:30:
ab:e4:0b:b0:13:77:a2:94:4e:27:7e:ce:a6:9f:01:ba:8a:29:
2a:9b:03:2c:7c:6c:8f:87:b9:60:90:76:1e:02:7e:78:41:e2:
33:b9:6a:27:5d:71:83:26:a6:9f:9a:0f:2b:b7:63:ab:67:d2:
40:69:8c:cc:c0:91:75:d9:6f:70:cc:d6:e7:fa:62:f6:e2:70:
0a:76:e8:d8:d4:31:8f:56:3e:64:33:cd:fd:0c:2c:76:4b:0c:
46:ae:9a:e1:dd:52:ce:34:f4:ad:77:55:59:18:61:a4:b3:9b:
86:1f:a0:70:a9:5d:20:a5:ce:12:52:5e:f4:59:78:58:ab:59:
82:7b:1b:3d:95:2d:a0:60:60:eb:dc:cf:55:23:04:a2:e8:98:
f8:4b:3f:d8:8e:36:e6:a2:b0:2f:c4:04:6c:44:5a:0c:0b:d7:
61:91:c8:01:cc:50:27:de:c0:45:80:ad:d3:da:ad:da:80:da:
4a:e8:cc:6a:75:5e:44:bd:67:c9:90:40:b3:b4:21:59:57:9d:
bf:7d:e1:9c:e8:9f:f8:1b:75:e9:43:9f:8b:0b:7f:1e:96:44:
0b:ab:f6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:26 2026 by rpki-client