
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
File: C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json)
Hash identifier: QiPVMHJNvvm/R/gWkrpgdz0yxm6EvO9/g9d5TTjF+VA=
Subject key identifier: C4:AF:3F:08:66:56:6B:0C:21:A7:E5:8D:CE:97:91:04:0C:33:2E:A9
Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B
Certificate issuer: /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
Certificate serial: 1B93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
Manifest number: 1B89
Signing time: Tue 24 Mar 2026 16:10:23 +0000
Manifest this update: Tue 24 Mar 2026 16:10:23 +0000
Manifest next update: Tue 31 Mar 2026 16:10:23 +0000
Files and hashes: 1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: +nE8aDfzqOp/qGeLI4dGkxInQ6Rw6R3k8Hr2yPG5ki4=)
2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: N8G4/01RtsnK/5wYFg/W/SRO8tkHccnmITaVaX2WxsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl
rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7059 (0x1b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B
Validity
Not Before: Mar 24 16:10:23 2026 GMT
Not After : Mar 31 16:10:23 2026 GMT
Subject: CN=69c2b76f-1719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:3b:91:1c:6a:ae:81:02:bc:76:52:53:de:
97:25:3e:d6:35:b5:65:f0:e2:e3:37:a8:7d:5f:fc:
39:e8:01:e7:a2:1d:5a:cb:a8:f3:d7:ae:23:8b:e6:
97:ff:77:d2:31:ec:0d:5a:96:5f:d4:d0:23:90:af:
64:1d:98:6a:be:b5:3e:c7:e3:02:21:c6:1b:ba:73:
8a:19:1c:00:c0:c8:58:cb:82:bc:f9:17:cb:ee:a5:
a9:90:cd:d9:d3:6b:6e:ca:67:88:56:82:66:cf:85:
ab:16:ce:11:15:e4:79:4f:44:37:bf:ef:ee:51:33:
f4:db:d5:cc:e3:61:b0:c9:c3:97:89:df:a6:e4:b7:
fa:89:45:6b:c6:7b:d0:f1:b6:ae:67:50:be:8f:d3:
90:8c:3c:b7:e9:4e:43:f7:85:c7:36:2f:1b:46:c5:
b1:e3:9c:e8:4c:5e:dc:83:a9:fe:e4:e6:0b:6e:7e:
3f:a8:48:ec:5f:5c:6d:d2:52:e3:d2:24:d8:ad:e7:
26:b2:e1:fd:c1:5d:b4:ef:b2:2b:fd:09:21:9f:e8:
79:84:3a:9a:1e:ca:ed:17:8b:6c:8c:a3:80:43:b1:
43:af:af:2f:08:17:74:2b:ca:a0:96:f9:f0:15:c4:
2f:e3:8d:45:d5:40:c1:cb:21:17:62:8c:4d:6b:a4:
90:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AF:3F:08:66:56:6B:0C:21:A7:E5:8D:CE:97:91:04:0C:33:2E:A9
X509v3 Authority Key Identifier:
keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d0:dd:fe:30:82:93:95:30:d7:77:7a:fe:e8:92:c0:b4:b9:
8d:51:61:b2:5d:f9:39:4c:3b:ac:e9:ad:eb:a8:77:1e:52:82:
ae:4f:e0:a3:7a:85:62:e9:f4:5d:e6:29:3f:5c:3e:e9:47:65:
3b:59:2e:3c:88:81:b4:74:7e:ee:fb:41:de:ec:c3:81:4e:54:
de:aa:1f:07:51:03:3e:f4:3e:56:4a:22:c9:2e:4c:d6:5d:4e:
6c:bb:98:b5:17:37:8d:26:2e:c4:80:86:ba:f1:9d:71:55:a6:
27:4f:8e:6f:f6:03:9a:b1:ef:49:e4:db:2d:a1:92:97:3a:68:
ca:c4:50:b9:4c:89:79:ff:86:db:47:8a:d0:da:33:73:56:00:
8d:8b:3e:ce:6e:d5:75:11:d4:b2:00:13:8a:a8:82:3f:70:48:
70:3d:41:e4:51:28:71:a8:41:1a:42:45:ba:d7:c0:1e:c7:4b:
cb:00:fd:90:fc:9f:a4:a8:14:19:93:1d:d0:a6:fa:5b:94:ae:
c2:14:83:09:7e:80:c5:a8:df:1c:44:99:fe:86:a6:c1:27:2a:
a9:68:cc:12:d4:3d:04:f5:66:25:6e:6f:cf:a5:bb:a4:c6:08:
7d:e9:1a:3b:d1:84:bd:d0:eb:71:b3:85:6f:7b:5e:72:9c:0d:
f6:78:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:48 2026 by rpki-client