
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
File: S7gN2OW27S9XRVhQcDM-9KFdcis.mft (raw, json)
Hash identifier: gEVTOY1/O3zP8vDI83WDEimKTUm/yF/zpJPKOC6Pnpg=
Subject key identifier: 60:1E:8F:5A:DD:9B:FE:67:6B:9E:E5:E9:4E:FF:B8:9B:3F:1B:81:60
Authority key identifier: 4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B
Certificate issuer: /CN=A913B077/serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
Manifest number: 01B8
Signing time: Wed 25 Mar 2026 03:16:09 +0000
Manifest this update: Wed 25 Mar 2026 03:16:09 +0000
Manifest next update: Wed 01 Apr 2026 03:16:09 +0000
Files and hashes: 1: S7gN2OW27S9XRVhQcDM-9KFdcis.crl (hash: LbtefXQaV5tC1YwvBjdBw4RtanjDZnizMYepZyRUZfY=)
2: 2B752026906B11EE8F088143C4F9AE02.roa (hash: o1Op7HfRdvMTwCdld2lXOdotsBV3C5CiFUy7uRI4qf0=)
3: 950812A4C5FE11EFA76A3266C4F9AE02.roa (hash: gIIijhu4f0BCE4u5dsDcPbWwJW0ZZC5Xh6A7Lpgdavg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl
rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B077, serialNumber=4BB80DD8E5B6ED2F5745585070333EF4A15D722B
Validity
Not Before: Mar 25 03:16:09 2026 GMT
Not After : Apr 1 03:16:09 2026 GMT
Subject: CN=69c35379-cbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:73:df:6e:61:93:76:26:f2:b0:9d:5e:ca:
07:20:b1:f3:ac:9d:30:b1:97:46:98:0e:de:13:cd:
39:67:3e:14:a0:29:29:78:7f:d4:33:d6:9c:74:3f:
74:1b:b5:b8:be:e9:77:ea:3d:f6:80:27:00:4c:c3:
6d:c6:e8:e6:23:20:c1:24:cc:9c:ee:98:38:9f:6b:
9c:61:02:b8:77:16:1b:ec:5a:ce:21:21:e7:16:6d:
1c:c7:74:70:ba:f8:05:c1:5c:b5:a4:56:27:d6:ae:
63:20:fd:1e:5c:16:d9:e8:07:8f:12:77:3f:c3:f4:
2a:55:cf:40:a5:ea:0f:86:53:d4:ee:ff:c1:04:27:
db:eb:67:ce:8c:40:06:f7:5c:04:da:8b:bb:ea:5e:
79:7b:28:41:28:bd:22:70:fd:16:34:1d:32:d8:2b:
99:64:b0:6e:40:e1:49:33:09:2a:33:e6:d6:02:ed:
c6:7d:d5:bd:e9:6b:ea:20:78:ca:c3:12:0e:d5:11:
3f:5f:c9:27:5d:a6:a4:75:32:28:4b:ed:0e:10:ec:
b4:8f:e7:b6:df:d4:e8:9b:0b:44:d5:ad:88:0b:5f:
78:d6:a6:26:ab:91:c6:30:51:bb:51:5f:cf:d2:01:
3a:99:01:ed:13:69:20:ee:41:62:9b:53:72:81:55:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:8F:5A:DD:9B:FE:67:6B:9E:E5:E9:4E:FF:B8:9B:3F:1B:81:60
X509v3 Authority Key Identifier:
keyid:4B:B8:0D:D8:E5:B6:ED:2F:57:45:58:50:70:33:3E:F4:A1:5D:72:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7gN2OW27S9XRVhQcDM-9KFdcis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B077/26C304EA906A11EEB3490627C4F9AE02/S7gN2OW27S9XRVhQcDM-9KFdcis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7a:5a:88:b0:c0:c8:72:34:cb:60:d3:64:65:80:5f:92:20:
e2:77:20:76:6b:c3:33:7e:b7:b7:8a:c9:82:98:02:aa:b7:c9:
6d:98:81:02:0c:c7:93:9b:c0:2a:1b:9e:af:cc:15:61:01:77:
83:db:7a:49:d6:b1:36:33:70:1e:58:f4:de:0a:e8:36:f5:a9:
65:6b:5e:fd:5c:e4:e0:2a:fd:da:6a:a7:b9:cc:9c:a9:4d:78:
50:24:ef:a4:8f:56:89:bf:2b:51:b9:a7:68:2a:74:dc:37:c1:
f0:df:46:fe:0b:b0:41:b6:c8:1e:98:14:09:8d:42:7d:52:1f:
b5:37:c4:36:fc:4c:29:3d:2f:6a:9e:af:fe:04:f9:31:06:17:
93:7b:20:5a:72:ad:a3:c5:c7:51:5c:f4:e9:06:0d:4f:97:6a:
0c:0b:1f:23:e1:5b:51:2b:c9:ee:67:18:fe:b8:91:ec:c8:9e:
be:c8:cb:31:86:b8:69:5c:40:2a:32:ba:51:26:fd:56:31:db:
b9:52:52:c5:93:20:b7:9a:87:93:8b:c5:e3:e8:b9:2a:7d:36:
2b:92:37:38:e0:71:ea:64:36:81:f4:9f:90:b8:29:65:12:9d:
17:b6:48:35:f7:75:8e:5a:d1:64:bd:a2:92:fc:5c:3b:48:1b:
eb:43:89:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:59 2026 by rpki-client