
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
File: N7DwEA07w97mXZvrCuzEzuH7NlU.mft (raw, json)
Hash identifier: yh9TLutN5LwIEE2TSCgl0dPra2fgNmK+rMU2dH8Se7E=
Subject key identifier: 6B:92:AC:5F:4F:A4:B3:4F:DA:87:E8:AD:38:94:1A:1A:BF:47:20:4E
Authority key identifier: 37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55
Certificate issuer: /CN=A911F587/serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
Manifest number: 76
Signing time: Sun 27 Sep 2026 08:28:51 +0000
Manifest this update: Sun 27 Sep 2026 08:28:50 +0000
Manifest next update: Sun 04 Oct 2026 08:28:50 +0000
Files and hashes: 1: N7DwEA07w97mXZvrCuzEzuH7NlU.crl (hash: oXPNDG5OG8l6w3jV+1zK4qxXL3yw+8GZHOzTEy8w0wk=)
2: 24A691EAA4E911F18E8000426A11F970.roa (hash: aqIC7cEjxikxYBSUGYod7Mkk4JXeHKhdEfKHZGO4EJY=)
3: CD7290AA136F11F1982A4804323D8C67.roa (hash: qDyZwBwrqthySOB52fs7wXlt74iPUc5q4sz33hWCJXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl
rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F587, serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655
Validity
Not Before: Sep 27 08:28:50 2026 GMT
Not After : Oct 4 08:28:50 2026 GMT
Subject: CN=6ab8d3c3-9095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:00:3c:8d:a4:85:84:33:eb:74:94:24:a7:
35:40:1e:b0:cf:96:e7:50:ea:f5:6e:bc:4b:59:6f:
46:4e:91:1e:71:9e:b9:00:d6:72:1f:55:56:64:b1:
a0:b7:8e:56:86:25:79:ca:4d:bc:3c:50:ac:de:d2:
9b:66:bd:48:21:7b:72:87:f4:98:90:f5:31:f0:da:
4f:1d:65:dd:9c:47:64:52:5a:54:ee:01:7b:80:61:
7c:41:47:0c:38:2d:16:5e:f7:2d:e3:d2:1d:70:5e:
5e:c2:17:bf:43:fe:f4:93:14:d2:bb:bf:3d:c3:0d:
79:24:91:b3:8a:55:64:5d:ed:d4:2e:3e:d3:0d:52:
f0:5f:a3:89:1b:d0:9c:88:6b:fc:6f:0a:7c:5f:5c:
68:ce:03:f8:9b:c8:ea:0a:3b:bc:5b:39:a5:58:f1:
fb:b5:7b:37:65:62:bc:86:1b:1a:02:dd:d1:29:ba:
e5:b6:d3:10:3f:5a:5c:a9:db:73:04:9c:55:c1:35:
a6:0b:2e:b0:ea:69:b2:c2:d2:cb:ef:7a:84:90:50:
a8:e2:a1:af:5a:cf:51:83:49:b4:f3:d4:d8:ce:fb:
cb:82:da:ac:2e:60:07:ab:8f:d9:5e:9a:52:45:78:
5c:ef:a1:05:d4:95:2a:bd:b6:27:8d:50:ea:cc:22:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:92:AC:5F:4F:A4:B3:4F:DA:87:E8:AD:38:94:1A:1A:BF:47:20:4E
X509v3 Authority Key Identifier:
keyid:37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:66:04:2a:28:9a:d8:b2:6b:47:ab:84:df:57:ae:83:58:88:
e3:e7:fe:2d:ff:a9:b2:84:cb:fc:c3:fa:21:d8:eb:8d:0b:6d:
81:9e:80:27:83:ae:c4:34:a0:cf:61:24:97:2d:67:43:ff:9b:
5a:36:8f:55:7a:dc:53:51:90:fe:85:ef:da:50:ee:6f:b6:43:
9a:3c:e2:40:38:0a:44:b7:0c:f8:a5:38:ed:a4:23:a8:11:93:
62:88:a2:75:45:14:d5:44:1d:78:4a:23:a4:8f:fc:1c:5c:00:
27:99:e2:69:28:1f:b4:6d:47:c3:50:0c:9d:1c:a9:72:3e:97:
cf:bc:cf:b0:5c:83:5a:0a:25:81:9f:57:96:a4:77:6a:5a:7b:
44:cb:53:93:78:4c:d3:27:df:57:fa:c8:f4:33:5e:84:a3:7b:
0c:27:e2:d0:bf:15:4e:92:c0:aa:ec:70:e3:e9:29:a6:bf:09:
df:bb:e6:62:ee:5d:da:42:e0:14:4a:e6:a4:b6:cc:36:17:c8:
d5:88:d2:eb:3c:d0:16:af:83:05:a5:81:5b:ec:85:7e:9a:73:
c9:9d:5b:88:b0:1f:07:da:0f:da:64:dd:44:48:4a:26:c0:c3:
08:c4:12:dd:37:8b:c1:b3:20:7d:85:bb:58:cd:82:5a:1f:2c:
13:ef:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:45:26 2026 by rpki-client