
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json)
Hash identifier: Dn8jK3zv75dcYLshntxZMRj9/vX5Z1UHOiGyAJKj7Ls=
Subject key identifier: 73:1F:36:EE:8A:1A:93:13:43:B4:11:F0:19:98:2B:81:F9:C8:98:9F
Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
Manifest number: 01D4
Signing time: Wed 25 Mar 2026 02:54:12 +0000
Manifest this update: Wed 25 Mar 2026 02:54:12 +0000
Manifest next update: Wed 01 Apr 2026 02:54:12 +0000
Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: AppGw+sdfNrcYkY/WmL+ZCq7QEWXgaM4jMYwHzdPn0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Validity
Not Before: Mar 25 02:54:12 2026 GMT
Not After : Apr 1 02:54:12 2026 GMT
Subject: CN=69c34e54-8546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:00:c9:61:18:c9:3f:e0:04:ef:f0:ff:97:
3a:76:cd:b6:5b:91:67:cc:11:b2:dd:53:b3:d9:e0:
fa:27:d5:75:f7:df:1a:a5:a8:b6:8e:b9:b0:7f:57:
dc:6a:b4:a5:1a:76:08:dc:68:ff:88:66:05:42:1b:
b2:c3:4f:50:2b:23:13:16:1d:23:5a:fc:72:f4:c2:
ee:c9:ff:88:76:dc:ae:11:a6:d3:97:35:15:34:41:
dc:77:85:33:7e:22:37:57:ba:62:5f:ed:cf:8a:8b:
f5:f3:8d:d9:19:9e:af:e8:4e:c9:f1:28:a2:86:c1:
d6:cb:7f:30:83:ca:ae:db:8d:4f:ae:29:e4:05:f0:
5c:e3:8e:ab:e5:a5:f7:b8:dd:08:78:f3:50:3e:29:
ec:e3:1d:3c:6f:3c:dd:98:06:09:15:b2:e4:d4:d0:
39:35:c8:6d:6a:bb:c4:b7:6e:4f:ff:fb:d8:de:ab:
fa:70:f7:af:4d:3d:3d:7d:00:03:3e:ac:8f:0e:ea:
a1:0d:f8:e0:4b:62:f0:69:57:c2:22:db:70:58:e3:
e3:09:44:0f:14:3c:24:b5:57:bd:7c:23:08:55:28:
fa:dd:a1:1b:8c:fd:b5:b7:63:9b:80:6d:b5:7c:7e:
b0:be:14:fb:32:e6:0e:04:90:0e:55:5b:08:b3:74:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1F:36:EE:8A:1A:93:13:43:B4:11:F0:19:98:2B:81:F9:C8:98:9F
X509v3 Authority Key Identifier:
keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:88:66:19:05:72:32:a7:c1:ac:54:49:32:ee:53:f4:e2:a8:
6b:4e:59:f3:8c:2c:31:c0:b7:20:c0:dc:45:4c:44:63:99:d3:
73:49:2d:b8:49:23:42:8e:89:2e:f2:f8:20:6e:f8:4c:ed:89:
7b:b3:e2:6a:64:10:a8:71:31:17:b2:37:a5:ee:c8:43:63:95:
dc:a9:ef:1d:e9:ff:24:ce:49:a6:e3:2a:b2:e4:4d:a7:79:ae:
4d:48:18:ab:a5:8c:4b:c9:06:48:53:2a:9e:cc:36:99:de:05:
25:4e:2f:19:28:ba:39:65:5d:b4:50:91:31:c2:56:f0:d8:7a:
78:2b:c6:30:2a:90:ae:68:d2:8a:5c:1f:30:24:0b:3b:b4:7d:
a6:4e:b0:f8:24:2a:a7:47:ff:52:3e:3f:0c:5d:bd:35:00:11:
12:b8:52:22:27:c7:c7:2c:60:4e:d4:ba:0a:8e:38:0d:d9:26:
90:e7:0b:10:c5:7c:c7:ba:19:d4:23:3a:f5:ad:a9:a1:92:38:
c7:ad:cf:d3:f0:d2:ec:ff:3c:d8:a8:94:27:68:e6:56:24:d5:
68:5a:6e:a0:73:7b:db:db:0d:3f:13:ee:e0:0b:15:d9:38:16:
92:cb:fe:cc:4e:46:e5:f6:92:e3:93:fb:02:e3:20:d9:84:f0:
fe:13:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:50 2026 by rpki-client