
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json)
Hash identifier: z23f1gqhxOHGP69Ks44ZYW7qCJLJKF+VI5zv1Xkz/IE=
Subject key identifier: 6A:5B:91:7F:99:26:21:12:01:23:F1:C9:BE:04:01:48:70:21:F7:F0
Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
Manifest number: 024C
Signing time: Fri 27 Mar 2026 01:55:54 +0000
Manifest this update: Fri 27 Mar 2026 01:55:53 +0000
Manifest next update: Fri 03 Apr 2026 01:55:53 +0000
Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: N5QfgZcPuSNmPmQnnvjdR/P9vLT7TtbMBwvjQg1UPU8=)
2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: MAv+qfj8FMNp/Yq/62rBZvkxjMlEQpOzuUtTKjB/c9g=)
3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: 7LeWas0M3QR0jLIyRnb4OwRP4KvZNSbmaG7fmi94Ksw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Validity
Not Before: Mar 27 01:55:53 2026 GMT
Not After : Apr 3 01:55:53 2026 GMT
Subject: CN=69c5e3aa-acc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:50:15:56:05:d5:4c:d4:3d:aa:a4:be:e4:5a:
be:4c:5a:15:e4:31:6b:a2:70:d1:6a:94:05:18:3e:
f6:6a:39:0e:ac:5d:f9:7a:48:bd:67:2e:b7:53:17:
97:89:96:fe:46:c4:f3:57:a3:37:1b:72:c6:8b:af:
ac:30:11:23:09:5f:64:6d:63:42:ec:50:e1:f9:00:
2e:5e:26:1d:d8:c4:b3:24:8b:10:87:a7:16:44:3f:
8d:5e:61:82:e0:77:49:cb:c4:ad:15:75:46:37:94:
a7:56:ca:89:94:67:7d:83:2c:c5:38:80:a3:10:a8:
76:e2:7a:91:20:bd:c6:f1:4a:f8:22:7a:5b:dc:55:
10:17:8f:e0:8d:19:7c:45:20:28:07:7d:3e:b9:c9:
cd:6b:10:e2:17:b1:1e:12:c1:99:15:91:19:b2:8e:
d6:16:da:f2:ac:1f:c2:4a:a2:18:53:7d:e5:c6:d5:
ba:8d:b8:fc:e3:8e:b8:1f:03:b8:49:67:de:d4:43:
69:63:c0:41:87:b8:13:6b:54:7b:7b:84:fa:b3:d4:
60:66:66:ec:f3:3c:5f:d6:e3:c2:dc:1c:3f:87:d4:
87:89:9c:bb:b5:f7:33:94:91:ae:86:d5:86:c8:3d:
79:cf:84:05:95:fc:c1:21:d5:64:72:80:56:53:75:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:91:7F:99:26:21:12:01:23:F1:C9:BE:04:01:48:70:21:F7:F0
X509v3 Authority Key Identifier:
keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:68:0f:39:38:8f:c8:de:2a:3c:be:94:08:ee:4f:8e:6c:ad:
72:8f:3a:44:01:c0:e4:ae:40:e7:dc:c1:dc:c6:93:82:0d:b2:
b2:b6:07:1d:c9:fc:e1:3d:4f:33:60:e1:60:0f:27:eb:8c:24:
00:a3:e5:51:55:5e:86:26:54:dc:ee:e3:c4:c0:34:eb:ec:ad:
b3:5d:ed:d3:e3:a0:4a:1f:6a:fa:fe:ee:bd:67:a4:93:c7:81:
40:fd:85:02:ba:06:90:17:5e:1f:3b:08:01:45:fd:59:fa:a6:
d5:9c:52:7c:c6:53:a3:ad:a0:4c:37:13:2e:5e:be:11:c3:b6:
d2:8c:28:f0:fc:53:f1:12:8a:de:a1:a5:5c:5a:fc:e6:d6:94:
54:7b:32:9a:12:b0:53:dd:08:49:b1:1b:29:62:9e:66:c7:93:
a7:5f:7a:0e:c1:44:f1:fd:72:e6:bb:73:15:0a:7a:96:d5:17:
55:b6:40:f4:1a:eb:00:f2:ea:2b:c2:5b:88:2b:a8:8f:61:03:
48:f1:c5:2e:1a:72:c6:c1:e5:ea:3a:47:08:56:e8:96:c8:b8:
56:5c:10:7d:aa:82:a8:ae:1e:d0:6c:dc:60:b9:b2:60:74:f5:
2d:fe:86:47:bc:b2:08:a7:21:09:a2:b0:3d:b6:2b:d1:7c:99:
a9:8e:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:36:45 2026 by rpki-client