
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
File: 7DaNWC4Rd-CZFeM_RO253k7zLFI.mft (raw, json)
Hash identifier: +ktPO1AzLvbJ033Rt9GIW7DQiGSRaocedYwUd48LONQ=
Subject key identifier: EB:11:EE:E9:38:D0:98:6D:51:71:63:34:C1:68:A0:7B:C4:B1:22:E3
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
Manifest number: B4
Signing time: Wed 23 Sep 2026 02:25:12 +0000
Manifest this update: Wed 23 Sep 2026 02:25:11 +0000
Manifest next update: Wed 30 Sep 2026 02:25:11 +0000
Files and hashes: 1: 7DaNWC4Rd-CZFeM_RO253k7zLFI.crl (hash: xRGvGJUDeG36d2ztSIYAr9dz+8bUj4XDx1M5V5OSKDY=)
2: 0CDEC76081E111F185BF86D772A30FBC.roa (hash: x39GQ3gTAp/T/smhd+Smfk3463f1DYz+REEZ4/JfSXM=)
3: 7BBEA23A81E211F18448C63773A30FBC.roa (hash: /S3reswQRe6QG2XFQIdmnPWz87DvWwN0Mt9l8y+jje4=)
4: 89C7E3A255B211F1AB301B6C9D833773.roa (hash: Ud57u/4onU2ULb6FSQyiz03UKna0ah+jPo8qNli4+h4=)
5: EDDEC9126AD611F18604C9006D47A888.roa (hash: mBul9qpd2CYOy9BKWwISAskLqehY5JRGwesEaHqvaxI=)
6: B872988654D711F1992D5F9296833773.roa (hash: JmWCmjScL98jwceDIWgE8shLzdIK5PAxIEq2d4FVTwI=)
7: 60D65D4E85A911F18503AAE15BA30FBC.roa (hash: knaW+lZw0fbnWRCsePO7EIeENsLvn4xCIFMtjXiYkn0=)
8: E4B8817A55BE11F19755025CA4833773.roa (hash: lYZjp9y0uXPEjcsK1iwiSC48vETuScT4C1ciPdaoKFM=)
9: 7ABEE1BA81E211F18448C63773A30FBC.roa (hash: vfHOYbedB2VpffqaIE+vsrAkKNRDh3wfSNls3RNvcdc=)
10: 02CB9F9C829E11F185008F026AA30FBC.roa (hash: yha/Pvgltg13jTcaFGt6OfhkmQpW0p7X2QJweaAkVzI=)
11: 80564398B1B211F1B4449AB83511F970.roa (hash: x/24CC0yQGbvq8aHndmNJthTWBGKcSvL3FZJJTDE4fo=)
12: 34705B9E59E211F1AE176CAE90833773.roa (hash: Y4FSjq6NpDU11XP5lRGViEc77fMM4dZ5RI+rwrWvqxw=)
13: EB30BEDC6AD611F18604C9006D47A888.roa (hash: s0vWyt4y+sMskcjLO0YoqbccAPSUv+jsSFGPbEhNh34=)
14: 2A8233E263E611F189F5BA418947A888.roa (hash: azSrx6uMgRU5WHByqSOBhufThnSRIw5W/2jqteEi26M=)
15: EF3ECA506AD611F18604C9006D47A888.roa (hash: so//akVTuloNjw0DdnqKuDj1WK/tdfuvQw0ikJkgWZs=)
16: 638F236875B911F1A660E8B862A30FBC.roa (hash: xUafc8hEI9Q4I/ZYsBx9iGCwWmw+VUeCk9JbLGFv2RI=)
17: 3BA04952917211F1BE52DB413211F970.roa (hash: +gb3EDnRD3BYMDVwvi+JKbfHlJxgaqgckTYklt3ICqc=)
18: ECB1A1FE6AD611F18604C9006D47A888.roa (hash: F0MWXRwD7Kz/vbHgeno+BpH0Wa8YmbRWbL2tGb+tjtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Sep 23 02:25:11 2026 GMT
Not After : Sep 30 02:25:11 2026 GMT
Subject: CN=6ab33888-48df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:77:10:9a:17:7b:2b:5d:19:ac:d3:53:5b:
c1:91:ed:d1:93:ea:7d:c7:f4:db:25:fe:d3:6b:60:
2b:b2:38:38:79:7d:df:ef:5e:a4:78:a4:8f:44:b6:
5e:16:eb:cd:5e:36:a8:6e:a7:50:47:f1:ed:06:69:
98:e6:36:59:c8:81:d4:aa:6d:4e:f5:74:dc:c4:b7:
d4:5a:79:5c:54:c4:73:84:1e:f9:93:a2:e8:db:f7:
14:b6:52:d6:57:e4:49:d5:2d:11:5f:5e:55:f8:ea:
d2:00:94:2f:25:e1:67:3b:7e:39:56:2e:ab:13:df:
da:77:af:93:9e:92:6a:16:b6:56:e6:90:88:47:b0:
9a:38:93:20:a1:9b:51:3e:d7:f6:c8:d2:cb:dc:6e:
e7:fe:fc:8d:e0:1d:da:46:17:c5:24:52:b0:60:94:
61:72:c7:69:af:43:2f:af:20:59:23:9b:90:f7:9f:
0f:4e:65:a2:88:bf:ba:17:06:b6:36:71:98:4f:a9:
a2:68:02:b0:16:72:c0:04:35:ce:cd:44:99:b1:88:
88:c0:1f:a4:34:df:f2:b2:a3:e8:aa:cd:4a:3d:34:
b8:83:af:50:45:9a:aa:2a:2f:73:bf:4a:20:13:cf:
19:28:6b:4e:1a:35:69:3e:4b:bd:2c:cc:61:3e:8e:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:11:EE:E9:38:D0:98:6D:51:71:63:34:C1:68:A0:7B:C4:B1:22:E3
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:d2:6d:c8:67:c0:06:d5:5e:ab:2e:63:d4:ad:7b:86:b8:46:
98:2b:9a:29:13:66:7c:30:6d:c0:30:57:86:6e:fc:96:e5:6b:
0c:db:82:5d:de:4f:c2:be:8d:5f:65:ba:c5:a9:e1:57:48:63:
d7:c0:ab:07:e0:03:23:f5:c2:0f:9e:c6:d8:e0:2c:52:30:78:
04:c2:2e:f9:38:db:93:56:fc:27:58:b6:11:8a:85:b9:91:0e:
d4:8a:0e:9b:b2:93:19:61:c1:55:23:7d:04:2f:23:da:f9:f9:
cd:1d:f8:74:24:1e:6b:25:e1:53:e7:43:2f:76:57:6e:17:12:
5f:35:b5:56:3c:af:7c:15:d8:f2:3a:08:23:21:4e:0e:d9:a0:
15:96:8f:b3:76:fb:ea:fb:c8:67:7f:7f:ac:01:89:97:c7:49:
a2:aa:67:f4:95:57:62:6b:39:72:28:cf:68:6c:a8:14:e4:79:
5a:33:fb:6b:a3:f5:29:55:2d:33:98:f3:0e:1e:55:59:59:a8:
82:b4:07:e1:51:c3:70:79:53:4a:dd:cc:c7:19:1a:68:4d:88:
49:fa:f2:67:14:86:ea:c9:84:8f:45:f1:46:f3:7b:ef:51:3d:
a9:9e:d6:05:21:aa:20:5c:98:2e:0a:b7:26:ed:59:0a:20:ff:
a7:40:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:11:17 2026 by rpki-client