
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File: x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier: T0qOoFHEiSkF8+oI/9R4iu2h46N7KCRFiQzoDOBnjBI=
Subject key identifier: 08:57:19:96:CA:C6:C8:07:6D:A8:61:68:E0:A0:5D:1E:B8:B3:12:52
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer: /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number: 0278
Signing time: Wed 25 Mar 2026 01:18:47 +0000
Manifest this update: Wed 25 Mar 2026 01:18:46 +0000
Manifest next update: Wed 01 Apr 2026 01:18:46 +0000
Files and hashes: 1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: KJYJO1VW0RGquSFpId+YCKUjQMrcqev5Jxqsy//TdDY=)
2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: tKFaHITtLZAQ61mcV49Br1vxEy6JkCTzuDJ4xLJ+YOA=)
3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: 6YJJzl5drZKIcUPjGHkkRR3YgQuFHkEPTeKqUES1L5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Validity
Not Before: Mar 25 01:18:46 2026 GMT
Not After : Apr 1 01:18:46 2026 GMT
Subject: CN=69c337f7-2f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:21:7b:9e:a1:28:94:4c:49:a6:4a:06:e3:
9f:c7:27:f4:36:d3:28:9b:29:3e:cf:88:01:b0:94:
a4:8a:b0:e4:fe:32:a9:c2:86:e0:5a:26:42:f8:26:
52:c4:cb:54:9e:f4:9f:69:eb:f4:8c:24:43:b2:76:
7e:f5:ff:92:2a:54:0b:ca:4b:7f:54:3d:0f:94:07:
0c:19:a9:71:fc:a2:b4:1d:43:87:a4:a5:55:59:0d:
6e:0f:88:f8:eb:64:17:4c:6a:b0:de:d4:a2:29:8b:
62:15:f0:18:4a:b3:2f:e6:ab:d0:ad:85:b5:79:3d:
eb:ba:0d:eb:e5:9d:64:84:ce:c9:d2:31:43:f4:f6:
25:eb:38:b6:ea:c3:f7:d8:10:9b:ea:9c:01:d8:bb:
ab:62:d3:53:fe:94:1d:db:12:8d:32:6d:47:f4:9b:
79:ac:e6:3d:b4:6f:84:ee:42:c2:21:49:cb:df:52:
27:b5:ee:42:97:b8:55:e9:64:86:97:f3:96:cb:2d:
41:a7:de:c8:1c:65:bd:4b:89:44:87:ff:d4:e8:70:
d8:ea:dd:41:a4:21:2e:e6:80:30:09:89:83:96:7d:
f2:fb:6e:3d:6e:9f:90:06:70:5a:0e:90:e1:d4:d7:
64:57:1c:12:74:ba:2c:e3:62:2a:47:31:fc:08:f1:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:19:96:CA:C6:C8:07:6D:A8:61:68:E0:A0:5D:1E:B8:B3:12:52
X509v3 Authority Key Identifier:
keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bd:95:d6:47:01:8b:33:70:d3:3c:dd:90:85:63:04:20:ad:
27:9c:80:f4:b8:78:5f:1e:e3:e7:28:9b:e7:e3:b1:00:d3:bf:
52:d7:45:1b:3e:02:86:af:e6:45:03:83:10:94:ee:a2:88:41:
3b:b8:6d:58:d8:7a:37:25:27:74:59:6e:fc:fc:f4:73:1f:01:
0d:ab:96:fe:51:01:a6:f5:1f:75:72:a2:fc:77:18:dd:3c:aa:
fe:ee:d2:1f:83:38:82:a7:e5:ad:15:ff:f7:80:70:f5:d9:da:
9d:4d:50:1b:c5:7a:ce:af:c9:45:d7:a0:2c:8d:0d:45:83:57:
bb:da:c8:1a:4e:71:da:96:13:4c:0d:40:0a:bf:ab:b1:5d:55:
3e:20:58:21:f2:4f:bf:1d:59:6f:ae:30:8b:88:ed:12:b2:ae:
a5:a6:35:21:9e:71:db:43:ca:45:9c:e0:a3:dc:30:07:10:3e:
0c:e1:b1:61:31:58:30:de:6c:ed:2a:51:e3:0f:15:2e:4f:79:
70:2b:81:08:2b:8c:15:5e:4d:d3:5a:7d:d8:37:d5:c2:0d:6b:
6d:d6:b4:e7:19:a1:ae:99:4d:32:ac:18:b2:43:70:52:fe:a9:
86:01:1b:2c:91:e4:f9:5e:fa:38:76:73:4b:7d:68:0d:d3:13:
42:8f:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:25 2026 by rpki-client