
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
File: 7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft (raw, json)
Hash identifier: vARSKTn1H6IgMS6l7pRhPUqwLX03o1EeFbBbKxoERnA=
Subject key identifier: BC:FB:96:3E:01:10:F5:EB:EF:DD:F0:7B:06:DB:46:B9:5F:30:A6:D9
Authority key identifier: ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
Certificate issuer: /CN=A9193C07/serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Certificate serial: 47
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
Manifest number: 3A
Signing time: Wed 25 Mar 2026 07:51:12 +0000
Manifest this update: Wed 25 Mar 2026 07:51:11 +0000
Manifest next update: Wed 01 Apr 2026 07:51:11 +0000
Files and hashes: 1: 7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl (hash: 4Yh+W0ld16qLdf+4zVlDOYmvxdGN7KcVX3RRx6vsdwg=)
2: 2C4F5466E47A11F08671F3E23F6F56BC.roa (hash: WsN1f6wwbcJF5RdtqWey/DtwlYfMt1ay7aj7fD7eCJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193C07, serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Validity
Not Before: Mar 25 07:51:11 2026 GMT
Not After : Apr 1 07:51:11 2026 GMT
Subject: CN=69c393f0-b4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:41:e3:a7:da:48:55:d4:0f:df:79:11:ec:
46:b8:d5:8d:8c:1e:1d:b9:51:e7:36:7c:6d:8e:86:
0a:95:b4:59:d4:90:a6:00:79:43:3b:1f:76:8d:e9:
94:f3:5b:7b:c5:3b:13:4b:7b:1d:64:24:cf:02:0e:
e5:d0:97:a1:e1:13:e0:11:ee:52:bd:f0:e9:99:f1:
db:d0:eb:c1:6f:31:06:24:8b:1e:36:ae:4f:be:b6:
82:d4:78:8c:14:07:54:bb:45:eb:a7:6c:79:91:3b:
1a:1e:dd:da:af:03:f9:97:b9:17:d6:8a:e9:4f:fb:
0f:6c:85:e9:7a:08:d0:bf:29:50:2e:5b:4a:1a:b4:
c0:89:d6:e7:c7:70:bd:b9:e9:3d:e2:99:d3:6a:e4:
0c:a3:38:46:9e:c1:a9:b4:e0:68:70:88:02:be:42:
c6:6c:a9:6d:7a:ca:81:79:90:9c:04:c4:b0:e7:b6:
05:e8:d5:a5:1d:23:cd:0e:e6:0f:3d:e1:c9:6d:11:
f5:79:63:e1:92:a3:4b:26:66:19:b1:02:f7:02:b1:
3e:95:7c:d7:bc:fa:65:39:cf:65:64:ff:0e:c5:0f:
ed:09:b8:04:c9:fa:1b:26:d4:84:1a:fa:41:07:a7:
aa:e1:6a:e4:6b:b3:c3:34:ca:d0:c1:4e:3d:79:12:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FB:96:3E:01:10:F5:EB:EF:DD:F0:7B:06:DB:46:B9:5F:30:A6:D9
X509v3 Authority Key Identifier:
keyid:ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2e:88:8b:00:fc:6f:40:11:c5:0d:ed:f8:db:31:a8:cd:0a:
4b:ca:ff:dc:8f:dd:f1:ab:68:8d:d2:72:93:3c:b6:fe:a6:fe:
02:48:03:ad:f5:5c:0d:69:62:87:ff:cd:95:5c:41:e0:b0:06:
24:6c:d8:7b:a8:12:be:b5:f7:7a:bd:50:fa:63:cb:17:e2:d1:
c7:7c:f9:53:fe:a3:3c:6d:6c:85:df:d7:2e:32:8d:90:9a:3a:
6e:59:f7:69:82:c4:cb:c9:fa:42:3a:96:cf:77:3b:f4:65:7d:
d2:2c:46:49:62:e3:fd:3a:16:18:f2:35:18:0f:88:9f:b7:ab:
bc:9b:12:ec:cf:7f:df:9b:f2:8a:66:75:a1:7b:93:f6:24:d2:
f5:72:73:aa:c4:35:8b:9d:a1:58:ea:e0:cb:09:db:1a:10:8d:
44:3c:61:2b:b3:e1:44:1b:be:e4:77:bf:96:fe:55:98:83:dd:
d2:37:2e:06:28:cb:d1:b2:2a:1f:2d:66:f1:90:50:1b:52:f6:
54:d7:1d:ac:ef:f8:fd:2b:2f:27:c2:65:3c:2c:04:10:8b:ac:
68:ae:24:d2:a7:ba:66:51:d2:2b:34:fd:cd:5d:3d:7e:0a:ea:
91:67:f8:01:2f:62:66:97:59:f8:90:b8:1d:a3:9d:ca:d5:f6:
fb:ec:a1:2f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
M0MwNzExMC8GA1UEBRMoRUQzQzFCREVBMzdFRkRDNEVBQ0I1NTRFQjg4QjEwQzE1
NDAyRTgzQTAeFw0yNjAzMjUwNzUxMTFaFw0yNjA0MDEwNzUxMTFaMBgxFjAUBgNV
BAMTDTY5YzM5M2YwLWI0YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCip0Hjp9pIVdQP33kR7Ea41Y2MHh25Uec2fG2OhgqVtFnUkKYAeUM7H3aN6ZTz
W3vFOxNLex1kJM8CDuXQl6HhE+AR7lK98OmZ8dvQ68FvMQYkix42rk++toLUeIwU
B1S7ReunbHmROxoe3dqvA/mXuRfWiulP+w9shel6CNC/KVAuW0oatMCJ1ufHcL25
6T3imdNq5AyjOEaewam04GhwiAK+QsZsqW16yoF5kJwExLDntgXo1aUdI80O5g89
4cltEfV5Y+GSo0smZhmxAvcCsT6VfNe8+mU5z2Vk/w7FD+0JuATJ+hsm1IQa+kEH
p6rhauRrs8M0ytDBTj15Er9ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvPuWPgEQ
9evv3fB7BttGuV8wptkwHwYDVR0jBBgwFoAU7Twb3qN+/cTqy1VOuIsQwVQC6Dow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQzA3L0UwM0U5NUUwRTQ3
NTExRjBCRDYwMDEzNTNGNkY1NkJDLzdUd2IzcU4tX2NUcXkxVk91SXNRd1ZRQzZE
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvN1R3YjNxTi1fY1RxeTFWT3VJc1F3VlFDNkRvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz
QzA3L0UwM0U5NUUwRTQ3NTExRjBCRDYwMDEzNTNGNkY1NkJDLzdUd2IzcU4tX2NU
cXkxVk91SXNRd1ZRQzZEby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBMLoiLAPxvQBHFDe342zGozQpLyv/cj93xq2iN0nKTPLb+pv4CSAOt9VwNaWKH
/82VXEHgsAYkbNh7qBK+tfd6vVD6Y8sX4tHHfPlT/qM8bWyF39cuMo2QmjpuWfdp
gsTLyfpCOpbPdzv0ZX3SLEZJYuP9OhYY8jUYD4ift6u8mxLsz3/fm/KKZnWhe5P2
JNL1cnOqxDWLnaFY6uDLCdsaEI1EPGErs+FEG77kd7+W/lWYg93SNy4GKMvRsiof
LWbxkFAbUvZU1x2s7/j9Ky8nwmU8LAQQi6xoriTSp7pmUdIrNP3NXT1+CuqRZ/gB
L2Jml1n4kLgdo53K1fb77KEv
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:11:27 2026 by rpki-client