
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json)
Hash identifier: ZnWXeI0tayTb4SAlpaNpyW0fG1QzG2VecX1q69ED5v4=
Subject key identifier: C4:04:B6:C1:F6:46:DE:CD:5A:5F:DD:49:99:55:41:AA:80:9F:56:50
Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Certificate serial: 0C88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
Manifest number: 0C6E
Signing time: Tue 24 Mar 2026 18:27:26 +0000
Manifest this update: Tue 24 Mar 2026 18:27:26 +0000
Manifest next update: Tue 31 Mar 2026 18:27:26 +0000
Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: bkVkZp5jqZxyuDuHJ6rJh6dIPLFXQ9WvpUWSr3S4W6Q=)
2: 627B1438281211EA881CC32DC4F9AE02.roa (hash: QuMcWQGwhElYLcNGEV8qqlAOlpLd+8u3fMjc2LDn80I=)
3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Lb32CCKaZxPXJVtVTz41kWSGeP/mH1CszKT3y/ullaM=)
4: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: 4bnWRv5wJBsyx0TFBETKt2oLFJp/Xiza93KwZfpHk70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3208 (0xc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9
Validity
Not Before: Mar 24 18:27:26 2026 GMT
Not After : Mar 31 18:27:26 2026 GMT
Subject: CN=69c2d78e-a4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:40:38:c8:16:83:5e:2b:93:1f:d4:1b:af:
e1:bc:da:72:7a:87:56:c7:f1:a8:58:46:7b:f5:b3:
15:66:87:5c:d4:41:59:91:db:45:ed:f9:49:96:bb:
51:4a:79:38:93:6e:3f:86:f0:66:b5:c8:d3:e9:53:
6e:13:e3:5c:93:34:bc:24:18:91:e1:03:62:75:08:
ac:d8:29:6a:8a:21:9b:38:5c:42:3b:c6:6d:d3:ff:
5d:97:30:3c:25:c4:68:8e:d7:0f:20:30:0e:d0:e7:
41:e6:07:d1:ef:1a:58:36:49:44:eb:6f:ad:40:ff:
98:0f:bf:89:2e:f3:1c:1a:eb:a4:0d:39:8f:be:e0:
ca:a6:94:67:b1:0d:98:99:c8:a7:96:d5:e7:db:19:
4c:77:a9:6a:8b:95:49:b5:92:34:02:6a:82:3f:9c:
6d:cd:66:ac:8b:bd:c0:18:50:d0:c5:f3:5b:c5:47:
27:95:fe:98:65:97:dc:a1:b9:58:b7:72:6f:71:e7:
bd:79:1e:49:9e:7d:c5:d7:be:4b:ff:e9:d9:a8:a6:
10:65:7e:b2:07:e7:30:07:e6:53:11:53:30:c7:1f:
61:86:42:8a:c4:22:38:92:be:77:a7:c3:5b:21:7d:
d0:1e:ec:50:d5:ec:61:c9:44:44:9d:1b:7b:dd:9c:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:B6:C1:F6:46:DE:CD:5A:5F:DD:49:99:55:41:AA:80:9F:56:50
X509v3 Authority Key Identifier:
keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:25:a9:e4:4a:25:7b:48:01:6b:33:22:d2:7e:0e:a0:15:a0:
e9:99:b0:94:31:9f:e1:e9:0b:83:d3:37:76:da:1c:3b:7c:58:
93:b0:4b:c6:c1:50:88:e8:c4:14:1e:72:94:7c:a7:08:73:5b:
83:7e:79:2c:ab:57:53:84:51:68:b7:46:93:8c:1a:f3:91:75:
22:6d:75:e3:6e:3c:55:a8:fd:b9:bf:16:48:b2:74:59:cb:8f:
0f:3a:09:33:62:1d:e3:f6:24:a2:21:d6:ef:5f:4d:49:e6:5c:
cf:21:ad:1f:73:a2:92:c4:cc:5b:5d:ec:93:c0:8c:1b:4d:bc:
3f:fc:45:42:12:88:11:72:e3:aa:7d:9b:50:ae:f6:09:cd:15:
b2:ce:08:de:66:62:e6:b2:5e:59:dd:88:92:db:70:89:af:09:
58:ed:26:18:34:16:a8:c5:bd:8b:86:c1:51:2d:46:ff:f9:8c:
ab:5f:aa:87:d7:5c:38:13:51:bc:73:9f:dc:2a:2c:f3:99:0c:
8e:da:7c:70:02:17:75:c5:2d:fe:6f:25:c0:d4:56:13:4b:8f:
64:59:2e:6f:11:7c:0d:b7:75:cb:71:8b:af:cc:92:d0:dc:2b:
e2:b9:9a:3c:13:b1:67:b3:33:43:ac:30:8a:5a:6d:34:57:cc:
ec:6a:76:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:38:09 2026 by rpki-client