
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
File: n7vSMFYWjRpRfpltxW9mSm7lLqU.mft (raw, json)
Hash identifier: nMVFrKKqJ2W+t/UCUxzEoLiAQxuL5jEDZKTAFoMQQnQ=
Subject key identifier: 1D:48:F0:3C:19:0F:B7:FC:B4:93:1F:71:EF:E3:8E:3A:9C:3B:12:57
Authority key identifier: 9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
Certificate issuer: /CN=A9189D79/serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
Manifest number: 05
Signing time: Wed 25 Mar 2026 08:25:21 +0000
Manifest this update: Wed 25 Mar 2026 08:25:21 +0000
Manifest next update: Wed 01 Apr 2026 08:25:21 +0000
Files and hashes: 1: n7vSMFYWjRpRfpltxW9mSm7lLqU.crl (hash: sGjmrPyKiTWQ+FPv1iDoiMIE0PrUk18PYaYp9QEYXcQ=)
2: FBC7C3BC24DB11F18E6B9B14AD833773.roa (hash: CNgjlNVv/jV/7iU+TGlplY+mVP3hIDOm1DQAw08tvXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl
rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D79, serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
Validity
Not Before: Mar 25 08:25:21 2026 GMT
Not After : Apr 1 08:25:21 2026 GMT
Subject: CN=69c39bf1-c04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:92:f3:cb:52:44:2a:c8:c7:90:49:24:22:63:
50:74:19:68:45:08:a9:8e:09:d6:03:b1:d3:2a:1b:
5a:dd:59:5b:4f:17:ab:0b:60:33:6b:88:2c:12:6a:
a9:b3:ab:4e:30:0b:3e:52:aa:8d:87:cd:55:ad:a3:
0e:67:20:25:d1:44:c1:ee:cb:cc:1c:b8:13:3b:95:
a2:88:04:33:3a:73:ab:7c:26:c3:61:a2:85:ef:cb:
68:e9:14:23:00:6f:3e:3b:c6:6b:c7:d9:a6:8e:4a:
e9:fc:30:04:c7:8d:02:ae:1f:77:32:89:78:e0:d5:
bc:a9:d2:9d:ca:05:16:a5:97:60:51:89:17:d2:92:
82:89:7b:68:af:c8:c8:7c:ad:82:51:56:0c:1d:cb:
95:68:b1:c4:e3:30:10:64:4d:36:40:34:70:89:12:
92:18:b4:d0:f9:72:14:d1:68:52:0e:42:ce:cc:38:
1d:8b:9a:fa:8a:20:fe:b2:71:88:d1:73:6d:ad:8a:
2b:96:c4:c3:0a:d9:1e:6f:cc:66:d9:38:09:4f:91:
57:62:a2:53:c4:67:32:a5:01:22:e0:c1:ca:17:8d:
30:11:ff:07:da:8c:4c:07:d0:ab:f7:d3:48:d9:37:
61:e5:ef:1f:bb:da:74:25:da:b3:65:d6:4e:ef:15:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:F0:3C:19:0F:B7:FC:B4:93:1F:71:EF:E3:8E:3A:9C:3B:12:57
X509v3 Authority Key Identifier:
keyid:9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:0f:b2:21:fa:ac:a8:73:0b:84:e0:b2:69:61:ea:31:0a:98:
6b:27:85:a0:f7:44:c7:03:6e:92:ef:d4:a6:43:aa:92:a0:2c:
9c:74:98:97:9f:81:e7:78:b8:25:55:34:24:79:18:65:6a:97:
62:e7:33:21:41:bc:9a:d0:c9:f5:80:82:00:d0:e0:c0:d8:9b:
d7:78:8d:92:87:53:7b:c0:62:9d:27:f6:98:6c:96:bf:f8:57:
5b:f7:e0:78:22:41:c8:0e:95:d3:f6:0e:5e:8b:9c:5a:a7:1a:
d1:64:3d:df:2e:4e:f6:0d:b7:bf:c5:13:08:da:3c:a6:37:bd:
83:4b:fc:74:ea:ce:08:0d:2e:fc:57:41:b9:59:87:96:a8:98:
21:86:c6:4c:5c:29:a3:fd:57:c4:b7:95:5b:c7:cc:3c:09:96:
6d:de:c3:b6:60:57:ae:18:04:64:5e:77:ed:4b:28:05:b7:15:
e5:23:af:06:30:ea:23:a1:9e:f4:0c:e1:f0:2b:2a:cd:f4:7d:
e2:e7:ef:88:16:43:54:35:49:0a:a5:bb:e7:98:b3:de:23:0e:
ee:a8:aa:7c:d7:06:2d:74:6c:10:a9:43:18:97:7a:c5:a0:20:
71:44:47:4b:67:1d:97:b2:af:d0:89:ff:1b:fb:59:25:5e:26:
fb:e6:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:20:07 2026 by rpki-client