
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json)
Hash identifier: 4LfOmcU5y9Duk+oggoaU2KzVqyccoGZr7UR8XChJqO8=
Subject key identifier: E9:4A:F2:69:7E:B7:6B:53:68:2E:00:FE:9F:F6:D2:36:E3:95:36:AD
Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
Manifest number: C7
Signing time: Wed 25 Mar 2026 06:07:48 +0000
Manifest this update: Wed 25 Mar 2026 06:07:48 +0000
Manifest next update: Wed 01 Apr 2026 06:07:48 +0000
Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: difIANjgbeMynH+SZGB/QXZY4L54nEFq5k+bQ0Md2KQ=)
2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: fR4AypiQYoJGmxQnLx99QlOWnyJ7/nfzm8EkI/Pllqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Validity
Not Before: Mar 25 06:07:48 2026 GMT
Not After : Apr 1 06:07:48 2026 GMT
Subject: CN=69c37bb4-be9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:d7:b9:39:49:00:8c:c1:fd:bf:17:7c:22:
07:bd:6f:38:16:2a:10:f6:09:56:c6:31:7f:a8:3b:
48:29:6a:06:81:64:9d:f7:bd:d3:fb:72:24:89:2d:
d4:10:90:62:fb:69:11:b3:17:d4:a0:87:2f:8e:de:
aa:c9:41:36:3d:fe:0e:32:b2:10:a4:6b:4c:7d:66:
8b:1a:5c:d2:2f:77:68:7a:d5:bd:2c:81:fc:44:61:
3f:81:c6:84:cf:2f:72:bb:ad:e3:69:9b:a9:c1:a8:
95:47:71:b2:7e:32:ef:24:35:82:a6:b6:7e:b3:65:
fe:c4:f6:b4:6a:c6:8d:48:2d:72:2f:26:d6:bf:c3:
1f:0b:e2:e9:b0:bc:f1:23:29:e3:6f:94:7c:89:36:
b5:07:c5:59:ba:cf:de:15:6a:5d:95:52:aa:86:1c:
e6:c2:48:ce:c4:f3:c3:fc:f3:1c:65:82:9a:67:fe:
89:7a:89:71:e6:0d:05:4e:9e:1e:69:de:1d:eb:2e:
42:b8:ca:fc:3a:60:74:b3:ff:65:b5:0e:68:16:05:
d7:fd:75:28:05:9e:1a:25:42:d1:2c:22:dd:4f:52:
d2:52:19:1b:5f:6b:21:62:d1:a2:7a:af:f8:e7:df:
3f:3c:63:dc:ac:39:b3:58:fe:2b:d1:73:69:78:47:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4A:F2:69:7E:B7:6B:53:68:2E:00:FE:9F:F6:D2:36:E3:95:36:AD
X509v3 Authority Key Identifier:
keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5c:26:d5:b7:41:44:30:76:9f:96:fe:8d:8d:64:3e:33:a8:
cd:29:ce:34:8e:50:f6:e7:62:4d:fb:b7:06:63:b6:36:99:44:
82:fb:53:81:5a:c3:f8:4b:29:d0:15:72:fb:98:29:58:49:e9:
ad:0b:34:6c:15:59:28:a4:8a:95:80:2a:9b:a7:3a:36:c7:5b:
9d:d9:3c:a1:26:e4:bf:31:fc:e6:3a:9e:8e:80:ea:ac:e8:ab:
11:a3:4c:6c:71:9b:72:8c:9b:c3:ff:59:ff:f0:ea:32:5b:c8:
20:5e:34:ed:31:c8:d5:9b:12:95:54:87:49:13:cb:97:b1:e8:
3a:4f:7f:8d:48:fb:a4:e7:43:03:1e:75:29:0d:1e:84:ed:cc:
1f:3c:1f:8f:9c:0f:58:fd:af:69:c5:36:6c:14:e8:2f:37:41:
5b:98:e1:53:c3:6e:dc:1d:7b:17:ba:90:05:a0:10:6e:7c:d2:
00:1c:f2:71:de:e6:f1:f9:9e:90:71:bc:0a:bf:a1:9e:65:a0:
2c:ff:f7:bb:36:f5:c5:32:fd:ba:00:f9:78:19:6e:2c:11:06:
f0:07:a3:aa:ab:ad:29:f3:34:a3:af:9d:01:e0:45:bc:4b:d1:
ea:8a:5a:61:9c:75:85:da:6b:aa:88:70:88:03:76:2d:7a:e5:
55:ed:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:36 2026 by rpki-client