
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json)
Hash identifier: Fk2uORhpFSF+mtBh+zcKwPcQbynyzs/TrEuMwhmpyP8=
Subject key identifier: 43:D9:3E:02:92:FE:6E:0B:DB:A3:33:27:38:58:CE:6D:35:C7:C0:B1
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial: 04BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
Manifest number: 0479
Signing time: Sun 27 Sep 2026 00:15:06 +0000
Manifest this update: Sun 27 Sep 2026 00:15:06 +0000
Manifest next update: Sun 04 Oct 2026 00:15:06 +0000
Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: DMQv+wgTqIeSugBxo+GO+AnSErXhYpXXJB/4V3aViqQ=)
2: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: 1cM14NhAHexpysqpl1gCbKReRuyBQxaQgkUwJjz7qxw=)
3: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: PmWlH9hI8UDfrum8ljKdCPWBn/RfhOuKClthQ5ZzQA0=)
4: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: klFS2EwojWiZ7PvsY5ywexl5W5eODCB0mjNce2fBPs8=)
5: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: XU66OcU3fnYJls4O62nuYW+aPPgFO6XUlfyCsJCffUE=)
6: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: 6txwDANkb+stD+30rgYCUnBhArG1SXPn7l/lsuR8IgY=)
7: BDD52DF26AF311F1A3F54E617547A888.roa (hash: YDvGDAvEOaQ3i1B7cemmqUz4csMi56McTSjidKVS5sQ=)
8: 4DD5897E501911F1B9231017C2833773.roa (hash: 74iwg4T3jS20u81MSENAOAD9vyDefXzwbL5rlNQ4X/0=)
9: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: gWfYJLFQiUGGCySMAATeYDsxEOK4XTc6fxDY8vUTdP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Validity
Not Before: Sep 27 00:15:06 2026 GMT
Not After : Oct 4 00:15:06 2026 GMT
Subject: CN=6ab8600a-aea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:28:42:d9:29:9a:39:a8:0a:0f:57:e2:d4:
d2:ee:98:02:ff:76:0d:6f:f8:f0:e1:3f:20:45:b3:
3c:b8:40:5b:df:a7:0e:bd:fe:37:3d:e2:09:ec:7b:
c6:23:89:1e:1b:da:62:6d:c9:9c:ce:09:8d:48:65:
d3:dc:2e:00:be:7b:b4:25:91:7b:5b:c1:98:87:39:
c8:00:92:43:4e:5a:00:d2:a9:44:dc:03:f9:c0:c3:
21:e0:e1:da:ef:d3:5e:a1:41:4d:17:bb:09:b1:ad:
0c:32:35:5a:15:e5:a6:41:0f:f2:2c:ae:d1:bb:ad:
a8:a6:a1:42:05:63:a0:3f:4e:fc:8b:5c:80:c0:cd:
b2:2f:ec:92:e5:44:bc:07:26:f0:ab:ef:77:ef:2c:
60:1b:07:cc:8c:9c:2a:1a:87:a4:67:02:30:00:24:
45:21:53:f8:1f:a2:39:e4:41:b4:f4:10:da:36:92:
b1:a4:a6:fd:d6:d0:c8:fa:70:98:ec:56:60:97:b5:
fa:91:73:3e:23:cc:3a:bf:64:0f:32:cb:62:4f:1a:
48:6b:23:b8:0f:e3:4e:96:b2:03:46:42:64:67:a3:
1e:5f:53:71:2c:a7:30:7d:ba:77:8f:87:f7:f9:6a:
1f:a1:07:c7:6f:64:31:31:41:fa:d4:fa:39:60:de:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D9:3E:02:92:FE:6E:0B:DB:A3:33:27:38:58:CE:6D:35:C7:C0:B1
X509v3 Authority Key Identifier:
keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f2:4b:45:53:08:bc:ce:3a:fa:ac:b7:3c:ea:73:76:ac:ee:
92:62:cd:e8:c4:61:80:f9:b0:ba:64:d6:c3:50:d2:a4:50:70:
28:03:e5:b3:62:45:67:cc:65:92:1e:27:8d:3d:96:9f:c1:a6:
20:36:fe:57:1a:91:d1:0c:23:70:4d:ee:fb:49:f7:bd:34:9c:
d8:9c:e8:53:a1:21:e6:20:84:d1:4b:40:1d:48:e2:92:b9:a7:
c7:d3:46:02:89:94:eb:59:f2:9c:65:ba:52:8c:d1:49:77:52:
28:10:46:8b:fa:cf:21:bc:76:fa:5c:80:8a:bc:00:ca:ed:3e:
43:98:17:6e:b8:ae:6f:98:4d:50:f4:45:c0:d0:0f:41:e8:3b:
15:d5:8c:b6:9f:11:0f:ab:0e:73:f1:b3:77:5a:f7:03:ee:9e:
ce:87:0c:00:cc:20:d3:a6:db:1c:29:d0:fb:bb:b2:86:f3:cb:
44:86:e7:bd:c5:7b:7d:8c:22:f2:e1:4a:ea:93:50:56:4c:02:
1e:61:72:db:94:69:1b:79:51:ba:95:79:13:d7:88:88:97:5a:
99:b8:10:77:6b:02:9c:29:4d:25:28:d5:f2:ca:4f:96:8d:d1:
ef:22:18:40:5d:90:82:df:92:16:fb:3d:db:3c:81:2e:0e:8d:
ac:a1:45:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:38:05 2026 by rpki-client