
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json)
Hash identifier: EGA7BonMXNQLI0FebuTfNqGB0Kf28JGjZ1sD8l5Qtvg=
Subject key identifier: 7B:6A:06:86:9E:33:1E:59:EE:08:33:41:16:65:CF:75:D1:C6:F7:E5
Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
Manifest number: FC
Signing time: Fri 27 Mar 2026 05:49:30 +0000
Manifest this update: Fri 27 Mar 2026 05:49:30 +0000
Manifest next update: Fri 03 Apr 2026 05:49:30 +0000
Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: k/Jgd819xv8vV6O8DN2OBIawllLtNIyHcKifH2CXK7A=)
2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: dSWQcWQh3WBDm7Umv9mrfAGrAU2sU+zuXSmlYE9NSl8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 05:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85
Validity
Not Before: Mar 27 05:49:30 2026 GMT
Not After : Apr 3 05:49:30 2026 GMT
Subject: CN=69c61a6a-f1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:27:e0:7f:f1:ed:8a:95:56:d5:5b:e5:69:
f7:ec:52:37:da:57:1b:9e:e5:4f:1e:bf:51:01:37:
cf:b5:1f:0f:61:f3:04:22:17:24:99:d8:00:c4:a3:
08:50:bc:61:89:84:8b:79:2a:93:ae:d5:9d:df:9f:
79:1c:ba:f0:2f:8a:e6:62:94:19:1c:59:64:1a:84:
42:fa:4d:3e:c7:e8:1e:36:7b:a0:65:e9:24:f1:f8:
fa:c7:9b:99:ec:14:12:ae:bf:5f:1c:dc:71:eb:83:
e2:44:96:f7:55:d2:c5:f5:d9:48:34:87:2c:44:34:
12:3c:54:19:76:b2:5e:63:1b:f4:c0:9f:39:65:95:
e7:15:c1:6c:08:9c:b2:c3:06:90:87:90:e9:ec:1b:
3d:68:60:61:ab:7a:c7:45:d0:60:d6:74:91:e6:2c:
11:f9:b1:7a:aa:18:c4:40:44:0f:bf:d2:c9:a4:c6:
91:42:5a:fb:b8:8a:22:34:17:ce:46:8b:10:b2:84:
bc:ea:50:77:51:8e:26:ea:88:58:4f:28:5f:c2:0b:
66:d7:75:34:e2:b2:97:2c:34:f0:62:3e:d8:64:d9:
50:f8:fa:3f:e5:7f:12:02:67:9d:02:74:ae:fc:50:
30:84:3b:98:a6:88:34:59:27:55:fb:1d:23:c7:3c:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6A:06:86:9E:33:1E:59:EE:08:33:41:16:65:CF:75:D1:C6:F7:E5
X509v3 Authority Key Identifier:
keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:e3:52:5d:07:24:6a:2e:c1:24:9d:bb:1b:cf:99:0c:7f:92:
2a:a5:f9:7a:5e:28:1a:ab:cd:2a:d2:15:d6:7d:da:25:b4:08:
e6:35:8f:13:45:f7:12:34:c8:ab:33:ed:0e:0c:d4:56:ed:e5:
37:0e:6f:67:69:8d:30:3e:44:f8:bf:6b:44:8f:cf:31:c3:44:
82:08:4d:f9:db:a3:b6:cb:b6:e5:17:bc:d4:21:8d:86:7b:27:
0a:d9:01:d1:b4:ef:3f:db:d0:d7:1c:a6:6e:08:62:c4:66:d8:
b2:ba:0f:af:a7:1a:fd:48:e5:a3:02:49:56:f1:62:a7:ad:f5:
31:ae:d6:45:ce:0a:ce:3f:b4:8b:47:fd:b1:8e:f5:7a:9e:a3:
89:45:45:37:ac:aa:4a:a1:d2:c2:a6:01:4b:b6:81:5b:0f:69:
38:47:84:20:57:36:e0:a5:6a:22:91:43:5f:48:7f:84:7c:62:
b3:d5:a6:16:a9:98:d6:a5:04:1e:85:fd:03:3e:b0:9b:02:89:
7e:2d:c9:85:71:02:36:f5:81:21:94:4c:b3:c6:3b:12:93:e3:
42:f0:ff:2c:23:7d:f8:61:0e:b4:6c:9d:71:bd:98:f9:74:da:
28:c0:d9:4c:2b:74:e9:f0:8b:b5:ef:29:18:f9:45:a2:94:dd:
d1:83:44:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:44 2026 by rpki-client