
$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File: u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier: IsNsV9AxvSn2iFWYeKpyfO+1DNuwbU9+f0jpqqsjYB0=
Subject key identifier: 42:31:38:B5:79:C9:76:92:98:05:F5:70:F6:FB:5B:9D:05:80:28:DB
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer: /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number: 0289
Signing time: Fri 27 Mar 2026 01:22:15 +0000
Manifest this update: Fri 27 Mar 2026 01:22:14 +0000
Manifest next update: Fri 03 Apr 2026 01:22:14 +0000
Files and hashes: 1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: 51ithj/Dh5h172jTYCvbJBV+hh25t7/QKAmbvD+aXgA=)
2: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: b9DVs3sKMRxCpx6qLE96QA7SsPL0b1qBye22Pru51gY=)
3: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: 9SKQpptnj/JfGFLLT1UzGMBhecqFZTQ9eSGwwb/vYF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Validity
Not Before: Mar 27 01:22:14 2026 GMT
Not After : Apr 3 01:22:14 2026 GMT
Subject: CN=69c5dbc7-5aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:57:df:a7:93:49:a2:ca:91:a0:36:b6:9c:
17:8e:1c:07:05:3d:61:f6:cb:72:da:13:58:65:4b:
cb:72:82:6c:11:8f:2a:cf:b4:19:87:a0:34:6e:23:
9a:af:24:cf:41:d5:eb:6b:dc:39:eb:ca:2b:f1:cf:
90:fb:c7:b4:21:5f:9a:cc:fc:3a:a0:18:41:85:1e:
1b:73:ee:2e:fb:2e:cd:49:1f:ca:68:0c:08:5c:70:
dc:1f:10:f2:ce:e5:df:ab:e7:54:2f:e4:67:59:fe:
cb:36:0a:c5:79:7c:06:4e:05:ca:05:1e:b0:3d:09:
69:0e:cc:63:24:13:01:0c:92:37:f2:bd:83:ab:f4:
9a:ae:35:60:c1:15:95:fd:be:5b:38:bb:9c:73:e5:
ed:c1:07:57:6c:8c:e6:e2:45:cc:17:91:a1:a0:ff:
ba:69:9e:a5:1c:84:25:af:57:67:a2:e3:be:20:f3:
65:6c:ae:25:f9:13:6f:c2:2b:dd:6e:a5:3e:ed:f1:
62:c5:df:c2:0c:13:9c:11:2d:23:83:76:71:d1:66:
37:59:60:4d:f7:ef:7d:ba:6b:36:c9:4d:ee:d7:4b:
8a:6e:67:1d:99:63:57:15:c0:85:55:d0:df:b3:ad:
7b:13:8b:e0:ba:45:44:7d:69:0b:e6:48:59:c9:c4:
14:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:31:38:B5:79:C9:76:92:98:05:F5:70:F6:FB:5B:9D:05:80:28:DB
X509v3 Authority Key Identifier:
keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:18:61:30:42:04:5f:2a:55:21:21:19:c9:3b:b2:bc:97:
ea:f6:2b:7e:60:8d:c3:a1:3f:b6:28:40:86:50:d0:3d:22:a9:
96:f7:ff:7b:08:ef:06:b8:e7:6e:95:2e:b7:cf:d4:1e:2e:59:
47:14:bc:7e:0f:62:95:b7:46:09:7b:c5:78:0f:71:03:48:83:
c4:bd:27:05:68:08:fe:32:5c:12:96:ba:76:40:90:07:cd:f2:
f5:c4:58:78:d0:0b:e3:ce:c1:4c:28:6b:ed:36:5f:60:5b:70:
fd:f3:08:dd:65:b6:c4:ba:4b:ca:f9:2e:9f:33:22:f7:84:dc:
e6:bb:04:fd:8c:8b:4a:52:f9:03:51:e8:d4:90:30:94:67:5a:
c6:47:1d:63:8d:f6:90:45:58:d2:5f:2d:47:2c:d2:d0:c4:64:
44:df:db:51:b0:89:1e:d3:1c:8e:0f:21:0b:77:c0:b7:b9:3e:
f1:70:52:71:2a:9e:33:4e:90:12:49:c8:ac:9a:7c:e4:fe:e0:
71:cb:4c:08:b0:14:9c:d5:41:6d:0f:5e:64:97:9d:54:fc:62:
4d:4d:0d:a5:1c:7c:9d:68:be:cd:ea:3b:6a:7d:b1:4c:88:af:
66:f6:b7:b0:01:36:45:40:c4:44:89:10:b8:c5:79:30:ce:b0:
06:96:72:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwNEExMTAvBgNVBAUTKEJCQjZFNjAxMDQzNzQzMjUwNTQ4ODBCN0QzQzEzNUU2
RkM3Q0NBQjEwHhcNMjYwMzI3MDEyMjE0WhcNMjYwNDAzMDEyMjE0WjAYMRYwFAYD
VQQDEw02OWM1ZGJjNy01YWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnDVX36eTSaLKkaA2tpwXjhwHBT1h9sty2hNYZUvLcoJsEY8qz7QZh6A0biOa
ryTPQdXra9w568or8c+Q+8e0IV+azPw6oBhBhR4bc+4u+y7NSR/KaAwIXHDcHxDy
zuXfq+dUL+RnWf7LNgrFeXwGTgXKBR6wPQlpDsxjJBMBDJI38r2Dq/SarjVgwRWV
/b5bOLucc+XtwQdXbIzm4kXMF5GhoP+6aZ6lHIQlr1dnouO+IPNlbK4l+RNvwivd
bqU+7fFixd/CDBOcES0jg3Zx0WY3WWBN9+99ums2yU3u10uKbmcdmWNXFcCFVdDf
s617E4vgukVEfWkL5khZycQUKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEIxOLV5
yXaSmAX1cPb7W50FgCjbMB8GA1UdIwQYMBaAFLu25gEEN0MlBUiAt9PBNeb8fMqx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA0QS85NUE4MTAxNDUw
NzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5VUZTSUMzMDhFMTV2eDh5
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U3Ym1BUVEzUXlVRlNJQzMwOEUxNXZ4OHlyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODA0QS85NUE4MTAxNDUwNzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5
VUZTSUMzMDhFMTV2eDh5ckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWzAYYTBCBF8qVSEhGck7sryX6vYrfmCNw6E/tihAhlDQPSKplvf/ewjvBrjn
bpUut8/UHi5ZRxS8fg9ilbdGCXvFeA9xA0iDxL0nBWgI/jJcEpa6dkCQB83y9cRY
eNAL487BTChr7TZfYFtw/fMI3WW2xLpLyvkunzMi94Tc5rsE/YyLSlL5A1Ho1JAw
lGdaxkcdY432kEVY0l8tRyzS0MRkRN/bUbCJHtMcjg8hC3fAt7k+8XBScSqeM06Q
EknIrJp85P7gcctMCLAUnNVBbQ9eZJedVPxiTU0NpRx8nWi+zeo7an2xTIivZva3
sAE2RUDERIkQuMV5MM6wBpZytA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:09 2026 by rpki-client