
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier: s+HF9zFUSAwZau72H4b+ZBBvYgEMSTKgYUHl7U964OA=
Subject key identifier: 0D:D9:32:DD:D0:99:2F:FF:42:2A:5C:54:A4:3F:73:DE:28:AC:EE:20
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number: 014A
Signing time: Fri 25 Sep 2026 05:23:44 +0000
Manifest this update: Fri 25 Sep 2026 05:23:44 +0000
Manifest next update: Fri 02 Oct 2026 05:23:44 +0000
Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: ANemRHUqtbf0A0m+BLjqvO55B+xCmleZBAH8z8kGjDg=)
2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Validity
Not Before: Sep 25 05:23:44 2026 GMT
Not After : Oct 2 05:23:44 2026 GMT
Subject: CN=6ab60560-89d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:5d:f5:91:0f:ec:d3:9a:ef:da:86:0f:59:
15:9f:41:6b:dc:9b:c6:16:ae:a2:43:c4:17:b5:e6:
b8:36:70:9e:d8:0f:c2:8d:25:4f:50:33:dd:9e:fc:
3b:f5:1a:d9:bc:b9:4e:03:b8:26:d0:19:35:c5:fb:
b9:06:12:ac:7a:c4:64:e8:32:d4:d5:7e:d0:08:76:
25:5e:2f:ef:f6:08:d2:cc:3d:92:93:10:4a:c9:18:
bc:4c:fe:41:da:e6:53:03:83:35:01:56:c4:db:77:
e7:9f:fe:e9:32:7a:da:58:2e:ca:cf:b7:8b:41:06:
a9:3d:65:17:66:0e:04:d5:b6:67:76:c2:76:eb:48:
77:20:5a:6e:f0:a8:53:43:52:4d:f1:00:10:d5:9a:
78:1a:7d:0e:d1:61:10:4b:b3:c5:5e:3d:f6:7c:22:
eb:37:2f:1b:6a:b1:54:86:35:e4:88:c8:e5:39:05:
1d:e8:52:e7:1a:93:7b:e8:2b:37:a5:1a:0e:e2:a9:
76:b2:92:93:90:c3:8a:2d:30:43:7f:44:6f:fd:c8:
bd:cc:71:f8:47:b3:fb:e6:74:13:07:ac:b9:01:98:
c8:ad:a0:48:bc:93:9b:d9:ae:84:1f:92:ec:69:c9:
8e:4a:28:bf:44:95:82:f4:e4:80:a3:83:12:8a:a7:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D9:32:DD:D0:99:2F:FF:42:2A:5C:54:A4:3F:73:DE:28:AC:EE:20
X509v3 Authority Key Identifier:
keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:91:9f:fd:97:26:aa:7c:72:7a:13:2f:23:12:1d:6f:be:c1:
7d:e0:50:ea:6f:e0:44:fd:5a:bf:d4:b1:fc:6e:70:25:cb:dd:
7d:32:eb:2c:96:9b:80:86:5f:46:68:1b:0a:28:26:31:60:ba:
a2:f8:3a:56:2c:6a:ff:6d:34:e0:3b:6a:d5:69:cd:cc:1c:ae:
ae:43:08:c0:90:2d:fc:d5:20:42:b8:14:49:e2:2d:7c:7a:5e:
45:f5:df:4b:2f:4c:3f:a7:52:a3:eb:e0:e4:84:e7:da:7e:03:
bc:10:67:01:77:ef:1c:f0:92:d9:eb:ce:f6:ee:92:35:9f:14:
41:3a:09:c9:58:83:17:50:f6:f7:e6:d7:18:1b:69:33:4f:a0:
1d:16:b1:66:cb:8f:ee:bf:d0:70:9b:ee:8c:15:c2:e0:48:46:
b4:1e:d6:40:ff:e1:eb:bc:af:75:16:ff:05:fa:2f:ed:e6:b1:
82:f3:d1:f2:fa:cd:87:87:96:52:03:f2:1e:bb:84:a2:9f:68:
7c:f3:c6:65:53:55:38:0d:12:03:38:63:1c:00:52:da:ba:a7:
75:b6:f6:43:f5:50:93:6e:35:05:89:9c:c7:2e:1d:f8:8a:b2:
84:1d:b6:37:8d:ad:ec:60:86:6f:1f:32:b6:14:11:54:a9:e7:
a3:c0:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:24:14 2026 by rpki-client