
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier: /3HWwqooIHt2IFHVn68/ezu27ollsN40D9w+D7lRtoM=
Subject key identifier: 43:D3:E3:0E:98:FB:C4:7A:05:4E:D9:02:A0:6B:C5:7C:46:0D:44:CB
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number: 0155
Signing time: Wed 25 Mar 2026 04:17:20 +0000
Manifest this update: Wed 25 Mar 2026 04:17:19 +0000
Manifest next update: Wed 01 Apr 2026 04:17:19 +0000
Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: TYZqzI+KTe68DKP54QlQlPvi9j7IukKbgATRJM5FIdA=)
2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: pCBDSY/5hIjT1Z07yVjRD8C3EOR5A+vR6s3eWtHwcNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Validity
Not Before: Mar 25 04:17:19 2026 GMT
Not After : Apr 1 04:17:19 2026 GMT
Subject: CN=69c361d0-87cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:8e:93:4d:76:5e:5d:fa:b2:a5:c8:6b:a3:
9f:7d:3a:f3:0e:6f:db:b4:3d:a4:ce:1c:30:56:f2:
09:c0:b7:a6:1f:6a:01:d1:e0:3d:c1:d4:d7:8d:88:
21:9d:93:71:9f:49:b7:a1:db:ae:60:2f:74:6f:37:
47:e8:7a:6c:82:a1:fa:c0:0d:89:b4:f4:ec:85:aa:
25:de:9e:97:63:2b:5c:08:2f:97:30:93:e7:e6:51:
8a:a8:65:6a:05:f3:43:00:24:0a:ec:66:40:b9:79:
5f:8c:93:a7:c4:e4:0f:8e:3c:be:46:34:7e:c9:87:
4c:9d:24:c3:a3:2b:04:f6:47:c5:0f:95:f1:86:7c:
39:07:42:fc:78:1f:b5:b0:91:5e:62:b0:83:d1:95:
9e:d6:bb:98:34:c6:c6:52:36:42:73:e2:49:11:4d:
c8:27:87:ad:0f:18:fa:88:54:51:ec:71:dd:9a:a5:
4f:c0:6a:26:d7:aa:eb:ff:29:55:1a:0f:f5:01:36:
9c:5b:4c:83:b4:14:4c:43:a5:d3:4b:cb:d2:a9:a7:
70:17:cc:90:ae:6a:88:c0:a7:2d:db:02:e6:7f:91:
66:9f:3d:7d:04:47:7d:c2:fe:4d:63:83:bb:de:45:
73:c0:fa:53:9d:da:80:94:26:db:a0:d4:c2:62:f8:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D3:E3:0E:98:FB:C4:7A:05:4E:D9:02:A0:6B:C5:7C:46:0D:44:CB
X509v3 Authority Key Identifier:
keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:6c:ac:38:ac:fa:ce:63:d4:26:39:c4:f8:05:42:08:cd:6d:
7f:63:f0:de:2c:d7:aa:11:54:65:ac:29:55:56:c3:93:ef:52:
84:77:31:c0:67:ba:0d:d3:ad:a5:5b:67:99:d0:1d:7a:e8:a4:
bf:ab:ed:16:6b:64:41:df:a6:52:4f:61:f5:5f:07:4f:57:47:
54:ad:f3:eb:1e:8e:70:a9:64:44:b0:90:81:50:d6:a8:98:74:
56:f0:44:49:3d:ea:ea:68:60:06:71:d7:b8:41:f7:af:a3:c5:
48:be:95:69:0d:ed:72:67:db:82:3d:9b:92:0d:da:d4:19:26:
fc:17:93:bb:f1:30:7b:30:68:38:81:49:1b:7c:4f:32:d1:38:
04:48:1f:6b:2d:b7:29:7f:2b:3f:a6:84:07:4b:16:55:6c:87:
85:a4:c6:f2:c7:e6:9e:37:e3:16:0d:b6:3e:07:bc:9d:50:3b:
e9:3a:34:ad:bb:a7:40:b9:02:0d:d1:66:e5:d8:91:42:25:4f:
88:03:62:b7:77:33:84:10:d0:94:ef:bc:ed:3b:10:c4:22:df:
b2:2a:56:34:0a:6d:95:41:de:74:c0:42:ea:e4:4f:e4:11:69:
85:0a:7a:14:ca:07:1b:26:b3:01:6e:6e:ea:46:a6:9a:55:76:
c6:82:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:14 2026 by rpki-client