
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier: j88gfr4aRImGU5BRxkKjqgIRwyBpMJgx46IHBvfZ56o=
Subject key identifier: 33:E3:ED:99:35:28:3D:6F:AA:2C:2A:CE:CE:5F:FB:63:C3:DD:0E:73
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number: ED
Signing time: Wed 25 Mar 2026 05:37:19 +0000
Manifest this update: Wed 25 Mar 2026 05:37:18 +0000
Manifest next update: Wed 01 Apr 2026 05:37:18 +0000
Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: DJ0kJgfeNU8swHoW1WOIDmXksr6v85nraj2hd4D/woE=)
2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Validity
Not Before: Mar 25 05:37:18 2026 GMT
Not After : Apr 1 05:37:18 2026 GMT
Subject: CN=69c3748f-735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:dd:36:d8:aa:8c:55:a8:6d:a4:05:0e:4c:
39:57:b9:c6:43:19:c3:69:b5:0b:a0:c1:80:e1:46:
e6:96:3a:0f:53:c2:04:74:52:86:20:c3:b8:d5:53:
74:e9:4b:8d:cf:aa:c7:96:2d:f9:9d:23:1c:7c:6f:
7e:5d:f6:68:78:5b:2b:a5:2d:47:b5:18:ad:74:6c:
2e:76:b2:18:f7:8f:6e:da:a7:5b:ae:9a:85:80:f4:
a4:4c:fb:35:7e:7c:c7:01:ad:11:53:14:f8:68:69:
25:b6:e0:38:6a:e6:12:fe:32:36:6b:15:f8:f6:70:
2b:08:47:1a:dd:ea:01:d3:e1:4e:90:43:e0:cf:43:
6f:52:8b:e4:93:b9:78:f2:b3:7d:33:66:b9:11:8a:
fa:08:c3:de:3a:3b:3d:e4:81:cc:fe:cd:92:c7:bc:
1a:d6:4f:97:ee:b8:2a:6d:b8:72:b0:6e:61:46:fd:
96:91:49:3f:9f:be:ce:a0:60:76:5b:8a:31:35:4c:
a4:54:82:26:a2:52:e3:8e:6a:e8:3c:cc:6d:42:fb:
ed:52:0f:e6:61:df:bb:31:84:fd:70:ca:bb:52:d7:
12:7f:31:dc:af:91:75:1a:d7:47:77:32:c0:60:80:
90:03:70:a0:2a:bb:0f:35:46:21:b7:78:5e:67:ea:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:ED:99:35:28:3D:6F:AA:2C:2A:CE:CE:5F:FB:63:C3:DD:0E:73
X509v3 Authority Key Identifier:
keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1b:4f:9a:b3:ce:78:01:b7:c2:9c:63:68:06:38:ec:b7:ea:
b3:ce:97:cc:f7:6f:60:ad:d1:30:6f:1c:c5:f9:14:17:08:50:
f2:15:b7:59:fe:71:d2:3d:7d:c7:ad:0c:a5:1f:3f:da:e2:9a:
31:21:f4:72:7b:6b:c9:6a:00:c7:4a:ab:d5:f9:b5:bb:c5:21:
ee:b2:cc:46:20:f2:af:77:0f:46:24:10:f3:32:40:19:a4:e1:
96:29:25:18:5e:f5:10:9e:ee:68:eb:cf:78:c5:3b:78:78:ad:
b9:0d:e3:d1:b6:c3:2e:1b:e6:ca:76:f0:20:89:fe:bb:ca:6b:
3b:53:df:15:c7:2a:9c:e3:1d:da:97:98:73:ad:13:fb:23:c4:
cf:23:bc:e2:93:8c:35:9c:24:d0:50:96:72:e5:7d:95:c1:8c:
0e:6a:5b:b9:35:ea:f9:f5:c5:c1:5d:36:a0:45:f9:d5:10:ed:
d6:00:41:10:e6:38:c1:cd:40:fb:3b:9e:29:f5:a9:b9:6c:40:
57:ea:4e:3b:eb:6c:f4:ec:d4:64:6b:df:85:50:e2:19:92:62:
18:b6:f0:28:f0:f3:cb:93:23:35:02:71:95:d9:5e:6a:1a:ea:
37:51:a3:28:3a:2f:27:0a:0b:5c:bc:02:19:3e:c9:4f:80:f8:
79:00:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:58:01 2026 by rpki-client