
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json)
Hash identifier: pSGRC7YtpnBAhEpnVgluXo4OoGgi3C2oscbNVsG286I=
Subject key identifier: B3:52:16:CB:3C:B3:BC:A3:D3:FB:F6:D7:6D:F8:FA:5D:8C:A9:6C:CA
Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Certificate serial: 178B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
Manifest number: 1759
Signing time: Tue 24 Mar 2026 16:31:32 +0000
Manifest this update: Tue 24 Mar 2026 16:31:32 +0000
Manifest next update: Tue 31 Mar 2026 16:31:32 +0000
Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: 1JlPI0evVzWMPzl/cB6V6wMUqF/cVekqS85TpMVjj9Q=)
2: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: WA8xCRlxR3rKk8ClNGxGNEmsKJNt1HuKBEMk6slXSYM=)
3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: hPIaiMSBFYLOvrueCE00fDgAwAADdWAf1f9rpZpgG+w=)
4: 211910241E9E11F1A28347ED0E3D8C67.roa (hash: ZSTWW9qrTYokmi90xJvxyauGPHUOECGBx3bhI8hlBGM=)
5: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: puJkWVITf2df7u3Qj+93ztEl+0qqlVGDPJp1OeHAKxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6027 (0x178b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Validity
Not Before: Mar 24 16:31:32 2026 GMT
Not After : Mar 31 16:31:32 2026 GMT
Subject: CN=69c2bc64-1a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:7d:f5:a5:77:e3:4f:b1:c8:9a:bb:78:2f:
39:0c:3c:fb:45:14:f5:91:8b:b5:ae:f9:58:6a:d0:
20:a0:ba:fd:1d:b6:ab:51:1f:3b:1c:d1:1b:50:ee:
9e:76:17:c7:00:0b:45:23:8d:37:05:21:ef:09:86:
72:a8:f2:d2:72:b7:90:25:a0:0c:12:98:03:97:62:
c8:9b:96:93:80:9b:c0:bd:96:2d:32:5d:4e:22:33:
d2:2f:75:19:d6:39:05:e1:28:c8:30:c3:92:10:cf:
ea:09:45:af:79:a3:19:e1:ac:e3:ef:37:dd:c7:44:
96:01:59:e2:da:c3:9e:ba:36:fe:fd:15:d7:bd:bc:
2e:dd:65:59:3a:10:ac:a4:97:9a:0b:35:30:43:f8:
72:b4:d6:8a:78:7b:eb:6b:13:fc:9d:b7:87:b9:44:
66:9a:74:e5:87:6e:40:22:b5:c2:07:50:02:b2:eb:
aa:30:82:54:c4:53:8c:29:fc:62:1c:a2:a0:db:55:
be:13:b7:34:44:5b:29:7a:df:e9:e8:cf:87:72:6b:
e7:53:08:83:89:86:48:fe:a3:8c:55:8c:8f:89:84:
76:17:58:1d:56:52:77:aa:fc:08:ce:b1:1a:f1:d6:
eb:f5:95:71:77:2a:0a:25:fa:5f:1b:01:62:21:07:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:16:CB:3C:B3:BC:A3:D3:FB:F6:D7:6D:F8:FA:5D:8C:A9:6C:CA
X509v3 Authority Key Identifier:
keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:bd:cb:32:98:8e:98:bd:c7:aa:d9:71:dc:57:83:de:9b:
5c:33:77:0b:d6:38:f0:ef:52:3a:ee:0e:09:fd:e3:25:11:9a:
4f:80:f8:e9:ef:a7:bf:61:5f:97:5c:98:e8:df:4c:22:6c:26:
be:57:21:08:45:77:b5:22:82:0b:4b:44:ba:32:06:cf:eb:ff:
ca:69:d5:0e:4e:9b:97:f0:13:ad:20:2b:11:e9:f6:bb:c8:c3:
2b:17:e6:43:e7:b5:c1:91:b9:b5:e4:e5:5f:2d:64:c8:10:7f:
a9:fd:4b:61:85:b0:fc:18:11:c7:17:a2:b5:f9:a7:b8:c7:6c:
ca:62:e6:fb:83:99:46:c7:78:4d:61:27:98:25:8b:1a:37:5b:
bc:34:58:24:cc:33:b3:f1:60:8c:bf:b3:20:c5:2a:3f:fc:1f:
e1:d4:14:7b:be:84:38:1e:81:39:e2:2c:fe:43:99:c8:95:83:
1e:4e:4a:57:9f:a4:b2:85:79:7b:28:f1:16:34:1e:ca:2c:bf:
fe:13:0f:a1:4b:3f:a5:3f:86:cd:96:93:a1:39:ca:ba:ef:92:
ec:6d:89:fc:97:57:54:5b:b6:2e:bf:73:b6:1e:d1:bf:a3:63:
d2:b1:39:56:3c:e6:79:61:68:e3:a6:b1:30:e1:d2:04:21:81:
ee:62:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:33 2026 by rpki-client