
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json)
Hash identifier: b5XzazwtBLum5qvx3FGrvlVpCki/gsLtRzkxouFoLgc=
Subject key identifier: 62:9E:13:3B:28:D2:97:A2:31:01:BB:21:63:3C:F5:58:CF:E2:9C:AC
Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
Manifest number: 0241
Signing time: Wed 25 Mar 2026 01:59:46 +0000
Manifest this update: Wed 25 Mar 2026 01:59:45 +0000
Manifest next update: Wed 01 Apr 2026 01:59:45 +0000
Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: EUm9MjauFvoS0BSr4gz0MWVX5xflU8Q0To+k3ejN8ZI=)
2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: DJ06rDWtxpzl4kt5SsUv8BxyoE+13pLa3Gy5GlIh2ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Validity
Not Before: Mar 25 01:59:45 2026 GMT
Not After : Apr 1 01:59:45 2026 GMT
Subject: CN=69c34191-d05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:30:4c:62:d5:26:e7:c4:a9:f1:a9:42:13:
79:12:58:ba:84:95:ea:21:1f:cd:8b:7a:27:c2:8b:
a8:ce:56:36:bd:60:cc:32:b8:63:ab:80:a9:1e:ea:
bc:9a:fa:8d:9a:d6:e9:ec:c5:3c:06:6d:6a:34:36:
09:b7:7e:18:cf:1d:80:ba:d8:ef:39:c3:a5:f3:67:
f3:63:4c:72:8d:ad:5d:e7:12:5c:e3:2e:0d:93:00:
91:a0:60:9d:eb:8a:19:c6:1e:95:39:cb:ef:cc:7d:
e2:e0:f0:4e:05:85:1e:c4:37:20:99:eb:2f:4c:b9:
79:48:cb:dc:81:89:44:d9:17:a2:39:f6:a6:e0:76:
e5:f8:a3:c5:f1:f2:18:be:05:20:08:f5:30:f0:c4:
e5:fb:89:77:a1:ec:b3:c3:39:9e:da:79:85:6a:3a:
b6:ff:c2:33:2d:82:2e:50:05:93:e7:c3:d6:81:6c:
df:39:c0:8d:cf:59:35:96:19:77:39:72:93:b5:5c:
65:3d:08:22:9d:6d:f4:26:cb:e2:8a:bd:2b:ec:42:
32:18:19:46:69:60:4d:00:7b:6c:d1:e7:3e:5b:d3:
b0:a3:53:08:51:b1:2d:4c:9d:c4:e5:d6:fa:66:65:
75:d1:63:d0:1e:19:e7:45:af:a3:c5:fa:7f:2f:74:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:13:3B:28:D2:97:A2:31:01:BB:21:63:3C:F5:58:CF:E2:9C:AC
X509v3 Authority Key Identifier:
keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b5:30:60:81:d8:3d:46:c2:42:fe:bc:6a:de:a2:1c:4b:a1:
ff:89:d1:b5:a6:dc:8d:9a:25:cb:5e:72:e4:f7:86:d1:29:0d:
50:ba:4a:4e:95:63:90:b6:de:1b:9d:ce:36:7a:29:5f:25:06:
f2:8b:45:2e:ae:e1:a7:4e:65:ab:72:53:46:b3:f5:64:34:6f:
d2:5a:1d:9d:41:52:58:c2:40:ff:4f:b8:dc:3a:a4:0d:3c:6e:
a4:8d:53:08:bc:9b:14:e6:27:6b:e6:57:5a:94:fd:bd:ad:f5:
36:8c:e1:b1:e1:f1:ce:43:55:c5:bb:c4:14:b9:ae:41:0c:2e:
67:99:c4:3e:9a:b5:a7:ca:f2:a8:cf:f9:8e:dd:4f:91:f5:85:
b7:de:f1:80:2c:af:ea:6b:46:1b:9e:2d:b3:9d:b6:ae:dc:78:
65:f6:1e:1e:20:e6:43:4c:eb:57:20:4c:5a:5e:10:62:95:df:
7a:40:4b:9e:7f:3b:9e:85:56:0e:ac:3d:59:58:8f:1f:05:51:
96:1e:be:ee:79:61:b7:91:67:6e:4f:32:1e:1f:9d:1f:3a:7c:
35:59:3d:15:a4:31:1d:33:69:3d:df:72:a4:c2:aa:13:59:06:
95:f1:93:7e:60:61:d1:35:08:19:56:e6:dd:98:ab:40:88:15:
d0:80:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:55 2026 by rpki-client