
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json)
Hash identifier: eM6V3BPrJtAlo9Z005oY/WqVB4jbw7EHn5GgzlT4hG8=
Subject key identifier: DA:DB:B0:FF:1A:79:45:BF:B0:AD:EF:22:EE:66:B6:EF:9D:92:1F:1B
Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
Manifest number: ED
Signing time: Wed 25 Mar 2026 05:37:16 +0000
Manifest this update: Wed 25 Mar 2026 05:37:16 +0000
Manifest next update: Wed 01 Apr 2026 05:37:16 +0000
Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: R9fX1CC2SZoTaXA1Wv73KJmsu9U+q8D7i3LjfOuKXSw=)
2: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: aHk0t2Hy2gHuEUEuWNA047fzWOktHu8vocVNcFbAJjo=)
3: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: qt3HSjdPuhwdbu7y+IBM5bXY+abtccfmEZI2ywYOKv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Validity
Not Before: Mar 25 05:37:16 2026 GMT
Not After : Apr 1 05:37:16 2026 GMT
Subject: CN=69c3748c-651c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:69:fd:cb:24:66:db:bd:40:2d:60:79:9e:
d3:79:1d:3b:0b:b0:45:8e:44:ad:3d:e0:3b:a2:99:
1e:e9:26:44:ae:35:16:f0:4b:45:a9:66:a0:44:af:
15:56:35:44:e8:9f:72:a8:5b:07:58:4c:21:ea:21:
67:57:8b:4e:a0:13:de:e9:48:23:13:64:0b:50:19:
da:d5:e6:99:09:c1:cd:e0:74:df:91:d1:46:fb:cc:
df:eb:24:13:62:cc:7d:d8:80:0b:7d:40:20:0d:d2:
02:ab:07:06:c7:d9:32:d1:3a:ad:0e:fc:13:72:c2:
c4:50:1a:ec:ee:37:41:f1:0b:d8:a9:0d:98:36:90:
3d:38:b6:f6:8a:72:bc:43:3d:5e:84:af:71:fa:a8:
3d:8a:e0:03:41:e0:41:ff:17:9d:48:19:13:be:c9:
cf:05:66:dc:e8:27:8c:bf:c3:ed:42:73:7f:4a:b9:
b8:b5:e1:9f:2f:b2:b7:81:c9:6b:f2:af:be:85:df:
c7:dd:42:9f:1b:80:81:e9:5e:94:71:fe:3e:39:78:
26:b0:a2:72:05:6f:91:d8:07:6e:6a:1a:8e:6b:f4:
53:2c:5f:26:88:77:e8:24:6b:88:11:6b:de:05:6d:
32:b1:bf:0e:7d:e1:b4:d4:a1:ad:d3:0a:90:29:86:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:B0:FF:1A:79:45:BF:B0:AD:EF:22:EE:66:B6:EF:9D:92:1F:1B
X509v3 Authority Key Identifier:
keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:9d:4e:18:63:19:90:31:fd:b2:62:2e:f4:65:0e:b6:c1:1f:
b4:e7:4e:47:bc:fe:03:82:5f:4f:86:fa:4f:06:ee:91:87:5a:
e4:64:27:08:9d:fc:94:c3:44:ea:06:81:e6:68:5a:1c:3e:56:
3f:85:40:48:1a:f7:b2:1b:37:f6:b3:ba:8a:aa:c7:83:af:c5:
e8:7d:44:7f:56:1d:08:c9:70:89:34:f4:9e:d4:c2:b4:ff:41:
eb:d7:bf:16:6f:1c:17:7b:6a:3f:e3:ad:94:9d:a2:8c:6a:27:
6c:9e:38:83:cc:9e:e9:bc:cd:68:f7:0e:f6:9f:fb:f3:33:a1:
fc:96:3f:ee:28:84:41:a2:aa:36:d2:7c:b4:e9:42:ef:08:ab:
9a:bf:9a:03:ef:2f:55:6d:fd:b7:f8:a5:af:a8:b0:58:c3:8f:
7b:2d:20:46:e7:31:b7:29:b3:e5:74:27:68:e7:04:e5:5e:1f:
55:d2:a1:c1:4c:4d:c0:97:b9:38:9f:f9:df:fd:89:c7:8c:d8:
42:b7:6a:35:80:5a:5b:69:75:e0:59:b6:37:4f:f2:13:e7:26:
25:e3:c0:04:38:fa:1f:b6:65:11:f3:6a:29:05:28:70:fe:ec:
1f:6b:a6:c2:25:36:1f:50:d2:99:32:7d:7b:ba:d9:74:0d:b2:
de:f6:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:09 2026 by rpki-client