
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json)
Hash identifier: BEUAqo7T4nI907MTEvu6+RMYo+vRRaaLuU7BAlqKCuM=
Subject key identifier: 19:AC:07:40:FB:02:74:FF:16:9A:59:05:13:22:56:83:8A:5D:85:FD
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
Manifest number: C4
Signing time: Wed 25 Mar 2026 06:04:40 +0000
Manifest this update: Wed 25 Mar 2026 06:04:40 +0000
Manifest next update: Wed 01 Apr 2026 06:04:40 +0000
Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: /cQPkNvznu+kwkxFfbsS+bcTkjVpmnr0G1jYWPuA4zM=)
2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: XIXAdlf2Wapfr3aA+RYeScI/7J0gFTrDr34LwCofapU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Validity
Not Before: Mar 25 06:04:40 2026 GMT
Not After : Apr 1 06:04:40 2026 GMT
Subject: CN=69c37af8-f37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:50:a8:63:6c:4c:fa:3f:91:f6:8b:cd:79:
c8:4e:ab:96:a7:ff:2d:a1:96:e3:f0:b1:25:7c:76:
7a:01:25:c6:cf:c6:4f:17:52:cb:7e:d2:ed:bf:44:
8d:ea:5f:fc:04:ca:bc:74:b8:16:50:df:56:39:fa:
b3:9f:a4:3a:32:20:0b:57:58:98:9d:fd:67:83:d9:
33:36:8e:5e:af:17:09:f4:e5:7a:22:93:52:f4:f3:
d2:c4:be:e1:84:c9:17:f7:ad:97:be:c2:b2:62:d1:
f5:3c:ff:28:66:c7:ef:8f:ac:00:cf:8c:c4:c1:1c:
e9:b3:43:bd:df:52:84:7a:cf:47:85:e3:04:8c:21:
00:9e:61:c1:cd:62:72:5c:72:9c:be:00:ca:25:e9:
18:09:ca:02:69:5f:39:a6:b7:ea:af:3a:01:6d:a8:
bc:82:8d:0e:f2:17:4b:ee:4f:d1:b4:b3:2d:26:94:
78:d9:be:dc:aa:74:32:63:47:5f:3f:c7:0d:1d:a6:
91:62:4b:95:0f:6f:74:ab:84:29:d7:1c:7c:e9:26:
33:66:88:07:9d:c9:39:3d:dd:0c:9b:d5:45:b1:59:
d8:57:bc:f7:ee:c4:7f:25:f1:66:c3:15:76:2f:ff:
38:49:f3:6c:56:f1:13:9b:ca:88:b7:0b:90:bc:59:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:07:40:FB:02:74:FF:16:9A:59:05:13:22:56:83:8A:5D:85:FD
X509v3 Authority Key Identifier:
keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4b:4d:f6:70:34:0f:15:92:31:f0:e2:36:5a:5c:81:0b:57:
ee:74:ef:12:4c:d3:68:6f:ab:c4:0b:eb:fd:f4:5c:fa:ff:a7:
69:52:8c:6e:51:e9:76:ce:62:39:22:ba:b6:7e:ad:d2:f9:c0:
42:df:6e:55:f9:a4:e6:f7:08:14:ff:f0:c8:d3:e2:42:f9:78:
e6:a0:46:7d:32:5d:18:e8:b4:24:3f:12:42:d9:b5:63:04:e6:
6a:a3:4d:16:be:73:0c:ea:41:45:9b:8b:16:d5:67:79:b4:d6:
97:a6:25:4e:ae:d1:28:a3:1e:7d:22:67:cc:1f:3b:bd:57:d1:
b6:1c:36:b4:83:0e:de:13:8a:d4:67:e8:ec:23:f4:c2:63:7f:
bc:c2:89:c0:bc:00:40:41:ca:db:49:ac:f1:10:74:13:ec:b5:
51:62:c3:1e:ee:ff:dc:98:6f:20:f9:e1:9d:1f:e5:a2:ae:18:
fe:cd:3e:bd:eb:08:61:a2:47:f7:d8:71:12:cc:e4:7f:59:3a:
cb:41:a3:03:0f:b3:40:55:02:19:3a:72:ae:ac:be:13:1a:81:
d2:43:88:3b:6a:e6:d8:53:da:60:76:d1:a9:ff:b4:22:5d:75:
e7:28:42:18:02:50:7f:65:e0:12:5d:ca:43:eb:9a:5e:e1:6e:
d2:21:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:36 2026 by rpki-client