
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
File: aR7cVncnIjOjjzNRkaropa4q97k.mft (raw, json)
Hash identifier: /XV/HUP2iFQEDkbSFFaZyIz7+RSAbW1k1icL7YTa9PQ=
Subject key identifier: 26:5A:34:69:4C:9E:2C:98:06:BC:F0:EE:F4:AA:30:49:1A:53:E4:2C
Authority key identifier: 69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9
Certificate issuer: /CN=A9155725/serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
Manifest number: BE
Signing time: Wed 25 Mar 2026 06:11:53 +0000
Manifest this update: Wed 25 Mar 2026 06:11:52 +0000
Manifest next update: Wed 01 Apr 2026 06:11:52 +0000
Files and hashes: 1: aR7cVncnIjOjjzNRkaropa4q97k.crl (hash: dzNDCsgwxPfjZZt8GrleFq2aJnGarNMuHIZm8BxHWpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl
rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155725, serialNumber=691EDC5677272233A38F335191AAE8A5AE2AF7B9
Validity
Not Before: Mar 25 06:11:52 2026 GMT
Not After : Apr 1 06:11:52 2026 GMT
Subject: CN=69c37ca8-c2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:12:f4:d2:2d:f2:7d:4f:b5:a1:44:63:38:
a7:43:47:52:bf:16:01:a8:a1:46:3e:a1:5f:47:78:
71:b0:46:55:3d:88:83:ef:d7:fb:2d:ec:2a:e7:7f:
9e:03:08:8c:67:f8:cf:46:cc:39:96:98:9b:fd:6d:
9b:ad:2d:d7:14:9e:52:ea:9b:89:7e:cd:50:99:94:
ed:bb:39:6a:7b:95:c9:db:78:33:1f:73:35:64:91:
b3:27:1a:c0:95:30:75:71:61:c4:e5:94:89:14:44:
cc:d0:ac:b5:8a:08:b9:c6:04:c9:6e:fe:e6:88:ff:
e7:12:ca:60:4e:c4:70:95:ec:fb:51:70:17:b8:7f:
ba:e0:31:4f:cb:63:4a:74:b8:58:47:b0:e4:fc:d0:
2c:8c:36:64:b9:ae:97:98:4a:f2:9c:c8:9f:0c:6a:
37:ac:94:35:9c:37:c8:c4:2f:71:38:be:b3:3c:5d:
30:3f:a7:40:87:cc:dc:02:f9:e0:1a:42:a5:3e:ad:
98:73:b3:42:93:dc:bf:39:71:f9:ac:fe:e1:96:95:
af:db:cc:17:b8:af:92:8b:47:4e:1e:c4:40:2c:e4:
d0:12:3a:ff:8a:e7:98:04:55:a1:48:eb:44:eb:7d:
0e:2e:7e:ce:17:aa:8e:3a:6a:8d:0e:0e:4d:6c:47:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5A:34:69:4C:9E:2C:98:06:BC:F0:EE:F4:AA:30:49:1A:53:E4:2C
X509v3 Authority Key Identifier:
keyid:69:1E:DC:56:77:27:22:33:A3:8F:33:51:91:AA:E8:A5:AE:2A:F7:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aR7cVncnIjOjjzNRkaropa4q97k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/5A66CF68083A11F09FF1D074C4F9AE02/aR7cVncnIjOjjzNRkaropa4q97k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:3a:fc:0b:84:ae:7a:d0:ff:27:d8:9f:15:a3:0d:dd:ec:67:
ba:2b:e8:53:8d:41:58:a0:90:ba:6f:10:80:05:4e:ed:40:81:
14:e7:b5:c1:e3:ae:db:88:4a:6f:eb:43:1a:df:99:20:de:d5:
10:d2:13:7e:84:03:32:c7:89:6a:e8:71:21:d2:50:61:81:d6:
90:47:90:42:23:bb:0e:66:5a:cb:0e:ab:6b:75:1b:ce:da:21:
e1:bc:67:01:13:00:4a:96:70:22:79:2c:2f:96:09:4d:2d:f6:
37:01:3e:c5:d7:7d:56:98:d9:ef:f1:f0:71:9f:2a:a9:03:c8:
92:2a:16:24:a4:50:24:ab:73:b7:d1:1d:ad:f1:28:9b:b8:29:
f1:d0:fe:99:f6:10:19:79:6e:ba:e2:b7:c5:3f:fe:09:01:33:
d5:87:45:4d:3b:e8:08:aa:da:c7:c4:9d:a8:6f:70:e3:05:0e:
60:78:8d:fe:72:40:ba:cd:61:ad:89:d4:e2:fe:89:9f:e7:2e:
2c:aa:2b:26:f0:46:72:77:9a:ab:00:17:c4:59:02:a2:8f:c3:
5c:e7:a7:5f:fa:f3:de:ff:bf:6e:4f:7a:db:b3:d4:01:8c:7c:
d0:ab:67:f0:c6:6d:34:ce:83:f1:3c:9e:77:41:29:64:11:67:
27:e1:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:04 2026 by rpki-client