
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json)
Hash identifier: ZYUIIdMdM6xLWHkzjI2cK2XpSWiigy/APnP8a96zB28=
Subject key identifier: 33:F5:54:4B:62:C7:4A:90:F2:5C:65:FE:23:D8:32:24:5C:1D:D3:F7
Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
Manifest number: 0102
Signing time: Wed 25 Mar 2026 05:24:54 +0000
Manifest this update: Wed 25 Mar 2026 05:24:53 +0000
Manifest next update: Wed 01 Apr 2026 05:24:53 +0000
Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: cSXgMlzzzmOXDGXn94eC7k4NSmoNfd7M7Dhe7ACYJAE=)
2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: kXIL4LSVHjTAmVfJOU7g+OrmcpQ5rxALmYlyD25Zr5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Validity
Not Before: Mar 25 05:24:53 2026 GMT
Not After : Apr 1 05:24:53 2026 GMT
Subject: CN=69c371a6-3f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:a2:2e:9c:92:ab:92:f9:83:e0:b4:54:be:
37:14:fd:1c:8f:1c:b7:ef:e3:b3:05:cb:13:de:bd:
36:d3:e8:f8:dd:88:7a:54:ba:7a:1e:3d:fd:5e:9d:
54:7b:b8:1b:df:a4:89:10:1c:eb:e0:6e:d8:40:4d:
56:5a:56:39:df:0a:74:d0:df:17:e0:29:6a:b8:26:
53:de:19:46:09:5c:a6:af:fe:b3:48:07:0e:a2:68:
62:b0:f1:d9:c5:b2:c1:9d:47:e1:f8:75:4b:be:95:
8c:83:39:fe:22:6d:79:91:fe:a7:30:24:6a:58:0a:
90:6b:d6:8b:4f:06:ca:36:ac:2d:42:24:ef:e0:be:
fb:ef:3f:79:45:b0:08:1e:79:33:c2:90:71:da:75:
5c:77:22:e0:4c:0f:8e:dd:22:b2:d9:02:0a:ae:a9:
bb:9e:28:b0:d2:f6:77:65:90:1c:a4:e2:fa:a4:3c:
11:a7:53:b3:ca:55:36:0c:7b:06:5f:95:72:b0:3e:
86:81:a3:a6:3d:63:dc:82:28:5f:22:26:06:3c:39:
f8:1c:27:1e:8a:26:c7:64:bb:c6:19:9b:6f:79:c1:
cb:22:c0:f4:c4:35:2f:90:2a:b1:a8:f0:82:36:42:
b9:9f:a1:f2:67:fb:8c:cd:85:80:fd:59:2e:58:45:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:54:4B:62:C7:4A:90:F2:5C:65:FE:23:D8:32:24:5C:1D:D3:F7
X509v3 Authority Key Identifier:
keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:4a:25:78:21:c4:f1:92:2c:b4:6e:cb:a4:34:e6:35:f1:bf:
e7:b1:6d:8c:56:4d:10:1e:b4:11:a0:01:04:46:04:72:93:3e:
5d:64:67:3f:b9:d7:c2:42:dd:9e:98:64:6d:8b:c1:6b:55:db:
75:ee:a5:48:ee:6a:39:78:b8:00:ef:a8:5e:c7:67:a8:d2:16:
12:85:b2:e4:af:e8:9a:77:23:90:bc:83:56:8a:10:c5:38:20:
5a:b2:4f:20:ab:cf:d9:ba:08:49:e0:e1:a8:cf:2f:27:de:1a:
2d:c4:ed:22:d3:ee:e4:4c:1f:ef:9c:a5:73:fb:f6:d5:dd:16:
62:8f:bf:8e:ca:c2:df:6d:1a:80:aa:9b:1b:d0:bd:52:92:f7:
97:51:48:02:de:7b:3b:2d:2b:34:03:8d:6b:dc:29:c8:e1:f6:
b1:ad:7f:3b:a7:6e:f2:17:83:a6:d8:d8:52:b7:8a:98:59:bb:
39:bc:87:6b:ee:6c:34:c6:36:2b:9e:d0:5a:10:fe:2f:33:95:
8a:d6:06:fc:0c:1d:f7:dd:21:57:d3:29:6f:68:a6:9a:5a:5c:
2f:f6:cf:6a:8d:99:ef:39:b3:14:10:e5:fe:9f:4e:00:d8:b6:
3b:08:76:db:3d:d8:4f:3b:f9:3c:f4:c8:c9:1a:95:7d:ad:69:
b2:9a:7d:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc2MjcxMTAvBgNVBAUTKDA4MEVDMTRBMDAxMjVEOTE0QzdFNjI4NURFOUM1NjY4
OUM1ODcyQTQwHhcNMjYwMzI1MDUyNDUzWhcNMjYwNDAxMDUyNDUzWjAYMRYwFAYD
VQQDEw02OWMzNzFhNi0zZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zqiLpySq5L5g+C0VL43FP0cjxy37+OzBcsT3r020+j43Yh6VLp6Hj39Xp1U
e7gb36SJEBzr4G7YQE1WWlY53wp00N8X4ClquCZT3hlGCVymr/6zSAcOomhisPHZ
xbLBnUfh+HVLvpWMgzn+Im15kf6nMCRqWAqQa9aLTwbKNqwtQiTv4L777z95RbAI
HnkzwpBx2nVcdyLgTA+O3SKy2QIKrqm7niiw0vZ3ZZAcpOL6pDwRp1OzylU2DHsG
X5VysD6GgaOmPWPcgihfIiYGPDn4HCceiibHZLvGGZtvecHLIsD0xDUvkCqxqPCC
NkK5n6HyZ/uMzYWA/VkuWEV9gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDP1VEti
x0qQ8lxl/iPYMiRcHdP3MB8GA1UdIwQYMBaAFAgOwUoAEl2RTH5ihd6cVmicWHKk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzYyNy9FN0QyNTc4NkE4
OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1haRk1mbUtGM3B4V2FKeFlj
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzYyNy9FN0QyNTc4NkE4OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1ha
Rk1mbUtGM3B4V2FKeFljcVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZkoleCHE8ZIstG7LpDTmNfG/57FtjFZNEB60EaABBEYEcpM+XWRnP7nXwkLd
nphkbYvBa1Xbde6lSO5qOXi4AO+oXsdnqNIWEoWy5K/omncjkLyDVooQxTggWrJP
IKvP2boISeDhqM8vJ94aLcTtItPu5Ewf75ylc/v21d0WYo+/jsrC320agKqbG9C9
UpL3l1FIAt57Oy0rNAONa9wpyOH2sa1/O6du8heDptjYUreKmFm7ObyHa+5sNMY2
K57QWhD+LzOVitYG/Awd990hV9Mpb2immlpcL/bPao2Z7zmzFBDl/p9OANi2Owh2
2z3YTzv5PPTIyRqVfa1pspp9dw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:52:30 2026 by rpki-client