
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier: 2QjVDwUZ2OAlU/q6MAPXJfLs7FwJg+nQwEq8uTSEAFY=
Subject key identifier: D7:C6:4F:C7:B5:82:0C:25:21:4C:48:1D:62:60:E2:FB:21:1B:46:09
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number: FA
Signing time: Wed 25 Mar 2026 05:27:57 +0000
Manifest this update: Wed 25 Mar 2026 05:27:57 +0000
Manifest next update: Wed 01 Apr 2026 05:27:57 +0000
Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: YnMaTDARnWTDy+tXYKJjJKxs/VY3SOsRZ/whNl6/iEU=)
2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 1MNrxKgQIdnkp7DGKWCKsge4/v205nBecHy5tmcmZDU=)
3: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: WDWRrI/KRtPcAbR2bWOuMpgztLrYoQZ12yzCIYDgRAs=)
4: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: hENFINj2b9wOIFxjK3nr2DrkTGbz4MTQ9pqxVPQHBxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Validity
Not Before: Mar 25 05:27:57 2026 GMT
Not After : Apr 1 05:27:57 2026 GMT
Subject: CN=69c3725d-cc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:92:2a:d1:1a:3f:54:23:48:d3:ea:30:c6:
c7:3e:6e:09:9e:cd:d0:d3:00:61:aa:a4:ce:8f:ca:
43:f3:ec:e5:ee:b7:75:56:ac:8c:f1:41:5d:8e:f3:
cf:b2:7a:44:79:a5:9d:c4:d2:85:c0:19:fc:40:06:
d5:a6:f2:4c:fe:ad:8f:16:a0:de:9b:20:56:a4:87:
8e:07:83:11:1a:ee:05:3e:f9:81:47:40:67:90:c2:
82:32:a0:db:4a:26:64:ac:5a:c3:9b:df:8b:4e:69:
8c:b1:32:6b:7d:92:ad:ca:5c:8b:2d:4f:c9:b4:fa:
f6:41:4e:19:2e:8b:24:41:44:84:c7:a7:90:d0:52:
0d:36:1e:3f:93:a9:1b:6b:0a:07:9e:8e:7b:75:9c:
63:99:69:18:7e:30:1b:4f:42:c5:cd:bd:2d:b2:12:
d6:2c:68:b0:59:df:a5:d6:46:d5:b3:06:3c:39:ce:
ea:e5:e9:06:fd:a0:01:2d:5e:19:2d:83:77:2b:3c:
bb:76:d5:3c:ac:06:9f:f3:9d:83:a3:40:88:7f:13:
96:80:fb:c6:e9:f9:b4:19:ac:4a:be:ba:24:3e:bc:
0a:12:84:60:99:13:df:08:ea:89:bd:44:ec:8e:be:
a1:d8:e8:e0:47:2c:11:0f:d8:fb:ac:33:a0:ae:38:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C6:4F:C7:B5:82:0C:25:21:4C:48:1D:62:60:E2:FB:21:1B:46:09
X509v3 Authority Key Identifier:
keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:88:35:85:6f:0e:d0:01:69:df:64:b5:cd:37:e7:36:d6:ac:
66:2b:b0:46:b9:51:f7:06:42:b8:5b:b9:38:07:4f:60:23:72:
91:56:7e:2c:c7:7b:02:83:ab:74:b5:b1:cd:38:05:e0:9b:2c:
47:05:90:22:67:43:2e:c3:c1:b4:88:9b:a6:93:3b:7d:8c:9d:
05:9b:cd:7a:34:c4:de:b5:1b:31:a9:28:cd:3e:71:39:1f:d9:
dc:de:4a:1b:41:d6:2a:77:c6:8a:b9:2d:78:4c:d8:c8:ce:f5:
4b:5a:92:9f:49:3a:c4:50:63:73:bf:68:72:f0:63:98:2f:61:
01:b4:c1:6b:85:1d:2c:f1:14:8c:7d:32:38:f2:8e:53:cd:d0:
ce:64:11:af:fd:cd:3a:a0:e5:bd:95:11:84:48:fd:85:82:47:
72:30:71:04:94:9d:32:2f:0c:cc:9a:69:f2:87:d0:7d:b1:2c:
a0:b3:3c:b0:ec:e7:0d:d7:1b:9d:21:2f:ee:87:b7:2c:7c:37:
39:fe:57:2c:78:0a:4e:8d:25:3d:56:f2:b1:d4:91:d0:72:98:
6f:58:fb:ab:08:40:ca:f6:5c:d5:d5:b7:fe:36:81:08:f9:85:
48:c2:4e:b0:24:d9:c9:74:07:66:04:e0:9f:7e:32:08:fb:2b:
69:13:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:30 2026 by rpki-client