
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
File: 7dan-nQ2Pn9jFksaB04JvojSPDU.mft (raw, json)
Hash identifier: BcJH0KXxx/8w2qirAWdprgLdrAaTmbnMtBsD2dwezxc=
Subject key identifier: EA:08:AB:0A:7C:45:8C:F7:60:E8:41:AF:F5:CA:B8:73:D2:21:FE:3E
Authority key identifier: ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
Certificate issuer: /CN=A911AB93/serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
Manifest number: 20EA
Signing time: Wed 22 Jul 2026 16:06:03 +0000
Manifest this update: Wed 22 Jul 2026 16:06:03 +0000
Manifest next update: Wed 29 Jul 2026 16:06:03 +0000
Files and hashes: 1: 7dan-nQ2Pn9jFksaB04JvojSPDU.crl (hash: m/gQMf9RQFH0Lh9g9eARTeBAOloG0QVP8JEV5K+ZUXc=)
2: 34545918BA0B11EE9FC74745C4F9AE02.roa (hash: Bd4fyJFT0/RGzv/UYSeU75j4WeITlTSc+IrzdI1knD8=)
3: 729C414EB69711EE8D11887CC4F9AE02.roa (hash: mkwtrtoISKf8CdyaIFecJHKE1E9ofVlo41Lk0KTM6Gc=)
4: 99596A0EB6C011EE857A8B6DC4F9AE02.roa (hash: 2lKTFTR17ouH78nETD+nc1OMaBr5xooA7XkTTU+AJ/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AB93, serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
Validity
Not Before: Jul 22 16:06:03 2026 GMT
Not After : Jul 29 16:06:03 2026 GMT
Subject: CN=6a60ea6b-3bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:38:0f:80:06:de:ad:f9:de:36:b2:58:ee:
9c:44:c4:4b:a8:3e:5c:e3:8e:60:d2:61:71:ef:22:
b5:cd:68:bd:3f:64:87:40:27:a6:2b:cd:ae:52:33:
3f:80:dc:1f:0a:35:39:4e:55:d7:ff:ee:47:d1:be:
1a:ff:8b:1a:e6:1e:46:00:a7:15:40:ce:f7:6a:63:
14:24:79:dd:85:a6:38:57:a9:ae:c8:88:43:26:5b:
0a:2e:34:c2:66:5d:f8:31:c2:0e:b1:b7:a5:b5:72:
2d:ae:a9:8f:91:f4:86:ee:c3:85:41:4d:a6:40:04:
55:87:6b:8c:94:54:2d:89:98:2f:17:e8:49:53:81:
24:c6:51:78:3e:a3:31:9c:eb:14:bd:86:d7:ba:42:
26:8d:67:0c:23:03:40:0a:67:14:24:34:7d:46:4f:
7c:d0:da:60:54:6d:48:4a:bf:c7:ed:8f:08:fd:f8:
4f:99:f3:fc:78:81:19:52:a5:c0:c4:1a:9f:8e:26:
05:52:14:d1:6f:f5:8f:1f:f0:b3:66:cb:27:04:31:
8b:d5:b8:64:dd:3c:da:df:d8:62:69:9e:fb:aa:ce:
51:c5:01:61:3d:3e:b8:93:79:03:6d:5c:8d:ee:8d:
22:51:0e:12:3a:e1:77:b4:f7:53:9e:14:12:96:80:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:08:AB:0A:7C:45:8C:F7:60:E8:41:AF:F5:CA:B8:73:D2:21:FE:3E
X509v3 Authority Key Identifier:
keyid:ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:f6:7c:87:91:eb:32:70:d7:5e:f4:e0:d2:f4:a4:0e:5a:c6:
17:66:b3:f2:87:c0:fd:5c:0e:86:10:c1:45:56:5b:6d:50:ea:
ba:72:7f:ea:c0:27:20:23:26:37:f4:0f:e7:7b:8a:50:c3:b2:
23:68:06:cc:23:f1:3a:e7:c3:c1:4c:aa:cf:a2:89:71:12:4d:
89:cb:4b:1f:2b:58:d9:4a:32:3e:76:fa:4c:95:7c:75:d8:59:
99:4d:13:14:eb:fd:0d:a0:f7:07:dd:5a:dc:88:91:d9:15:27:
fd:38:f9:88:78:01:74:ed:e0:40:19:38:8c:c8:84:fd:1d:52:
02:3f:57:ed:b8:3b:61:3e:35:f5:62:e6:7d:cb:2b:5e:27:81:
52:c1:27:c9:bb:37:84:9c:19:ad:37:c5:c3:22:b2:c1:48:e8:
e4:14:66:b1:d3:bf:f5:83:61:70:99:79:52:74:aa:0a:e9:cc:
27:15:38:3f:6f:ff:e8:6d:76:6e:a6:2a:8c:78:59:ed:06:8b:
a7:05:b4:8d:fb:b5:90:cb:81:bd:6d:78:25:df:f0:9c:4f:2a:
ad:82:34:42:eb:52:dc:a9:44:3b:f6:f2:a5:fc:4b:02:5b:34:
7b:a7:f4:40:33:ff:8c:b1:29:da:db:17:bd:6d:96:df:51:4e:
a6:3a:25:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFCOTMxMTAvBgNVBAUTKEVERDZBN0ZBNzQzNjNFN0Y2MzE2NEIxQTA3NEUwOUJF
ODhEMjNDMzUwHhcNMjYwNzIyMTYwNjAzWhcNMjYwNzI5MTYwNjAzWjAYMRYwFAYD
VQQDEw02YTYwZWE2Yi0zYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAc4D4AG3q353jayWO6cRMRLqD5c445g0mFx7yK1zWi9P2SHQCemK82uUjM/
gNwfCjU5TlXX/+5H0b4a/4sa5h5GAKcVQM73amMUJHndhaY4V6muyIhDJlsKLjTC
Zl34McIOsbeltXItrqmPkfSG7sOFQU2mQARVh2uMlFQtiZgvF+hJU4EkxlF4PqMx
nOsUvYbXukImjWcMIwNACmcUJDR9Rk980NpgVG1ISr/H7Y8I/fhPmfP8eIEZUqXA
xBqfjiYFUhTRb/WPH/CzZssnBDGL1bhk3Tza39hiaZ77qs5RxQFhPT64k3kDbVyN
7o0iUQ4SOuF3tPdTnhQSloBpNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoIqwp8
RYz3YOhBr/XKuHPSIf4+MB8GA1UdIwQYMBaAFO3Wp/p0Nj5/YxZLGgdOCb6I0jw1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUI5My84RDMwMzk0Njgx
OEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi83ZGFuLW5RMlBuOWpGa3NhQjA0SnZvalNQ
RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdkYW4tblEyUG45akZrc2FCMDRKdm9qU1BEVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUI5My84RDMwMzk0NjgxOEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi83ZGFuLW5RMlBu
OWpGa3NhQjA0SnZvalNQRFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF/Z8h5HrMnDXXvTg0vSkDlrGF2az8ofA/VwOhhDBRVZbbVDqunJ/6sAnICMm
N/QP53uKUMOyI2gGzCPxOufDwUyqz6KJcRJNictLHytY2UoyPnb6TJV8ddhZmU0T
FOv9DaD3B91a3IiR2RUn/Tj5iHgBdO3gQBk4jMiE/R1SAj9X7bg7YT419WLmfcsr
XieBUsEnybs3hJwZrTfFwyKywUjo5BRmsdO/9YNhcJl5UnSqCunMJxU4P2//6G12
bqYqjHhZ7QaLpwW0jfu1kMuBvW14Jd/wnE8qrYI0QutS3KlEO/bypfxLAls0e6f0
QDP/jLEp2tsXvW2W31FOpjolpA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:21 2026 by rpki-client