
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
File: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json)
Hash identifier: U5DyaKrScha7H8EZz+XtJW2TI0gT5qjtOhG8I8wo/JM=
Subject key identifier: 22:D1:99:9F:01:7D:B9:DB:CE:95:FC:EB:DB:FE:63:59:1A:84:C5:BF
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 080F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
Manifest number: 06D3
Signing time: Tue 12 May 2026 23:01:59 +0000
Manifest this update: Tue 12 May 2026 23:01:59 +0000
Manifest next update: Tue 19 May 2026 23:01:59 +0000
Files and hashes: 1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: 8g8l8BC1sHGR1xb0KP73Pnb79cuXXCkfXD9y8TrFRiE=)
2: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: VI6voF68QQY7SFnSAbWa5lLgbR1RP7VeGAE4odGtXhQ=)
3: 3B4FFDCA227911F1A65F03CCA4833773.roa (hash: PUzmzuD5bHk7VFgIzT0roiBPsQW1af5ietmADY31t40=)
4: 17F4DF6E563A11F092DD586EC4F9AE02.roa (hash: VoQrlag/uQljqLBhje8W3GmSgopLeC8gQtggx3LOIyc=)
5: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: zwt4jimE5dzItIYvflW2AfnzB22khQhDre8vwGomnT0=)
6: 18DDC828563A11F092DD586EC4F9AE02.roa (hash: /ZAwxNwF5BSvUQgJ+crVoivjTBV/Hb6oXXuT2EmJDAU=)
7: 8F8087960EC111F1B64CAA7C3D3D8C67.roa (hash: LK/rL/zltCjg/cuJM9IER3CTRe7bASCArvSQocjl9qA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2063 (0x80f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: May 12 23:01:59 2026 GMT
Not After : May 19 23:01:59 2026 GMT
Subject: CN=6a03b167-02d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:92:66:3c:3e:de:db:0c:a6:1e:31:3c:1a:
ca:c0:53:e3:4d:5e:3b:3e:27:20:cd:d0:60:e6:65:
9f:2a:8b:dd:ad:bc:bc:aa:c7:2e:39:e5:6c:a7:75:
29:3b:95:5f:61:c7:12:1e:65:b2:b2:ab:a7:f7:5a:
f0:87:02:c9:43:73:bc:ef:3a:e4:81:c5:00:e4:d5:
b7:df:67:d0:a9:97:2b:e4:e7:8a:d5:28:f0:71:96:
fd:e7:41:4e:ba:de:e9:3e:46:30:18:34:11:1d:98:
fe:1a:f2:0e:76:b5:20:f2:e1:69:67:dc:fc:e3:be:
a2:01:5e:c2:2a:10:a1:30:5d:56:28:f9:3b:25:e4:
77:6a:bc:49:53:03:c6:f8:c1:78:f5:bc:0e:2a:16:
cd:e0:ab:f9:fb:13:1b:40:8e:50:28:cf:ad:92:0c:
1a:d0:7e:6e:30:66:a3:73:ff:07:e9:e5:e5:4c:37:
ee:e8:16:98:a7:0d:1e:7d:d9:07:be:ca:d7:3b:c0:
70:49:69:18:6f:7c:b1:fa:9a:bb:93:fd:ce:f5:ad:
4c:59:06:11:45:8a:94:ca:cd:0f:2c:58:5b:6a:27:
b9:f9:bd:69:a6:02:0c:31:e1:d0:d7:18:11:f2:dd:
dc:cb:85:ef:97:6c:96:ef:bf:39:19:74:3e:12:17:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:99:9F:01:7D:B9:DB:CE:95:FC:EB:DB:FE:63:59:1A:84:C5:BF
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:03:6f:a5:5d:4c:a6:3e:34:59:9b:dc:38:fb:b8:24:49:22:
1f:73:8f:67:95:20:4a:b9:f1:ed:d4:57:26:d5:17:58:ee:d7:
40:c9:7e:94:9c:cc:48:19:fa:d4:e0:00:b9:19:e5:c3:3b:c6:
b1:55:a1:29:49:51:58:f3:d6:77:6e:f5:46:0e:ad:b5:ba:84:
0a:2f:ff:bd:dd:82:c8:7f:fa:5b:51:c7:86:be:88:32:91:a0:
26:39:0a:82:a6:e7:9c:63:a6:20:56:4d:26:76:84:ec:4c:57:
a5:2d:76:23:54:44:a9:69:8c:34:ac:2b:d8:74:a8:cb:e3:95:
e8:8b:26:bf:99:3e:2b:e5:aa:ba:00:ac:4f:56:e1:b3:f6:4f:
56:6d:63:e3:1c:3b:56:cf:dd:ea:6e:4b:0a:0d:a8:23:0d:07:
10:3a:2b:1a:fc:64:ef:18:a0:c8:a1:17:be:d1:5e:2d:fc:7a:
6c:43:0c:45:eb:79:79:28:72:b0:b9:9b:cb:11:f3:96:56:9a:
78:a6:5d:d0:c3:f9:c7:03:b6:94:43:07:65:2a:2d:ec:ef:b7:
c0:f9:6b:8d:bb:3b:a4:dc:ce:1a:80:99:68:ac:29:bf:b8:96:
8a:d0:36:2b:03:9a:ed:e6:ac:40:1b:78:df:45:7a:08:1d:e1:
1e:9c:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:00 2026 by rpki-client