
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft
File: 7wP9th1kvpTlo3YNxbxgjOSr0r4.mft (raw, json)
Hash identifier: s6/vGjWdBjCMAatcOKFed2eiX/9YAVMbk1NL2HOExXQ=
Subject key identifier: 11:ED:1B:97:BE:D5:3D:CE:5A:CF:A0:B5:F9:E9:1B:B4:D9:1C:0E:1A
Authority key identifier: EF:03:FD:B6:1D:64:BE:94:E5:A3:76:0D:C5:BC:60:8C:E4:AB:D2:BE
Certificate issuer: /CN=A9189C03/serialNumber=EF03FDB61D64BE94E5A3760DC5BC608CE4ABD2BE
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wP9th1kvpTlo3YNxbxgjOSr0r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft
Manifest number: 1F
Signing time: Wed 25 Mar 2026 08:04:39 +0000
Manifest this update: Wed 25 Mar 2026 08:04:38 +0000
Manifest next update: Wed 01 Apr 2026 08:04:38 +0000
Files and hashes: 1: 7wP9th1kvpTlo3YNxbxgjOSr0r4.crl (hash: 7vszhpCv1jNRRb5Y+1mCU0Od1/tWqisp5jglpIMYt+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.crl
rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wP9th1kvpTlo3YNxbxgjOSr0r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189C03, serialNumber=EF03FDB61D64BE94E5A3760DC5BC608CE4ABD2BE
Validity
Not Before: Mar 25 08:04:38 2026 GMT
Not After : Apr 1 08:04:38 2026 GMT
Subject: CN=69c39717-8925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:5f:bb:45:fa:bb:47:8b:ab:6b:45:1a:3b:
76:65:33:cd:c7:64:74:1a:de:de:7e:45:59:2c:83:
5a:d8:63:7a:9d:9c:70:3d:92:4e:97:f1:71:24:a7:
ac:bc:0b:42:76:0f:d8:07:3d:f3:ee:b8:b3:98:37:
3e:bb:28:19:b0:63:88:32:13:c8:be:24:d0:3b:4c:
a2:c8:0f:bd:a5:4a:87:c8:fd:6f:c2:2d:26:fe:80:
e6:57:c3:3b:55:a3:fa:eb:2b:d0:c6:74:43:97:53:
ca:04:7a:e1:51:39:5c:1e:8a:c5:46:34:c2:2a:6b:
75:0e:95:59:33:ce:14:97:de:28:99:d3:e8:4d:e4:
d8:f9:37:f4:5d:5b:31:49:bd:e8:0b:86:c1:33:0d:
c5:3f:20:e3:91:9a:f2:d3:72:ae:8d:22:e8:43:da:
51:ff:a2:4f:be:ad:7c:84:d6:38:ec:b1:88:11:81:
a8:57:4b:e0:7d:bf:1a:75:be:21:9a:42:af:4a:61:
6f:53:ea:df:79:48:53:3d:56:e9:0d:74:00:62:7d:
f4:b4:90:58:5e:54:d6:51:d9:ae:3f:8c:d3:28:30:
c5:04:8a:28:6e:21:e7:55:87:51:3d:96:04:db:89:
36:8a:9f:7a:d7:92:75:61:2a:11:00:4f:b9:18:e4:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:ED:1B:97:BE:D5:3D:CE:5A:CF:A0:B5:F9:E9:1B:B4:D9:1C:0E:1A
X509v3 Authority Key Identifier:
keyid:EF:03:FD:B6:1D:64:BE:94:E5:A3:76:0D:C5:BC:60:8C:E4:AB:D2:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wP9th1kvpTlo3YNxbxgjOSr0r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189C03/10C36724FF4F11F08C043FE04F6F56BC/7wP9th1kvpTlo3YNxbxgjOSr0r4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:72:8d:60:2a:06:1d:c0:13:52:e8:7a:2f:6c:2a:21:f5:58:
9a:50:ee:c4:31:4a:f8:de:77:47:32:11:65:87:df:1c:96:88:
55:71:e0:27:b2:34:0c:50:da:eb:d8:41:90:d3:c0:96:9b:a8:
5c:a6:9f:c5:ec:08:1a:78:f0:7e:28:c9:82:43:4c:43:80:77:
5e:ab:ac:7c:cf:c5:ff:d7:d8:82:76:70:a1:4f:96:59:34:03:
e0:bc:06:7b:8a:aa:d3:11:ec:ca:7f:39:93:02:8f:b3:3b:52:
c8:80:17:a1:a0:bc:67:36:33:7f:8a:e6:2b:46:30:d9:4a:a2:
ea:05:9c:4b:c6:8d:fc:09:bf:e9:84:84:52:37:0b:21:3e:57:
74:6e:55:6d:4a:e6:d9:cb:7c:7f:f7:64:7c:6d:38:36:d5:b8:
e6:24:7c:dc:d1:5b:e1:ad:b2:9c:e0:e1:9a:01:ad:01:6c:c7:
a5:49:be:11:82:a8:26:31:61:7d:17:63:ec:f2:79:25:30:44:
28:ba:dd:1d:02:2f:87:f6:49:07:d3:37:fd:a8:18:11:e8:a5:
43:ae:26:e5:89:71:78:ee:e8:fd:f2:b5:e8:45:be:21:93:b7:
e7:c9:5d:db:9e:c9:43:cf:e7:89:99:a7:0a:d6:0b:a2:b4:5e:
ab:3e:d2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:50 2026 by rpki-client