
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier: RuwCwo6e7lLVIudehrz/QOzrJSQGbghCSY2BEh73xos=
Subject key identifier: C0:0A:D8:25:01:85:08:B4:43:90:8A:69:40:A2:66:8B:2C:9E:1A:09
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number: 0129
Signing time: Thu 23 Jul 2026 07:22:05 +0000
Manifest this update: Thu 23 Jul 2026 07:22:05 +0000
Manifest next update: Thu 30 Jul 2026 07:22:05 +0000
Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: SU2beMuBsb90PyhfQg33+lgWBUitP9KyH5rH8YwIA1I=)
2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Validity
Not Before: Jul 23 07:22:05 2026 GMT
Not After : Jul 30 07:22:05 2026 GMT
Subject: CN=6a61c11d-27e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:fa:42:d5:0b:a0:bd:e7:a4:da:34:1f:12:
8a:62:d7:7c:30:27:bb:1c:28:52:34:a0:fa:34:c7:
be:a7:3b:53:8b:66:9b:7f:f8:73:54:58:af:d8:47:
d5:13:c6:97:7f:2b:88:ed:be:b7:be:81:34:a3:6b:
9c:f2:8d:b6:2f:7e:f0:dc:8d:f0:aa:96:b3:ee:7d:
7f:05:06:c0:40:71:23:75:60:6e:f2:ec:08:4d:e3:
3e:b5:22:94:b6:5a:77:bb:aa:d2:87:e6:f7:80:d3:
05:43:30:e0:d3:ae:22:f3:ff:a1:3d:e7:65:d9:a9:
ba:2d:b0:9e:87:c1:08:5a:6c:f0:40:9f:d5:71:01:
fd:6b:7a:96:a7:67:1c:bb:3b:a3:d2:83:bb:b4:45:
84:58:d7:c1:6c:54:20:f2:38:c7:d6:bc:ce:20:af:
db:12:c3:1c:ec:0f:7e:c8:da:7e:1a:91:c7:d0:c9:
d6:ef:3d:d8:5b:b4:85:da:05:b9:65:79:7f:91:20:
1a:50:77:e1:f0:84:88:f8:57:36:e8:12:bd:7e:2d:
bc:e0:24:ab:1c:b2:11:19:f9:77:ea:34:5b:2c:60:
b0:30:88:07:d7:47:1d:e3:6a:a7:f4:8a:95:fb:d1:
58:bb:70:3b:d2:ce:f5:f7:c9:95:a0:38:70:d3:dd:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0A:D8:25:01:85:08:B4:43:90:8A:69:40:A2:66:8B:2C:9E:1A:09
X509v3 Authority Key Identifier:
keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:af:99:e7:72:9f:06:74:41:96:0e:99:42:fb:aa:61:08:89:
0a:5f:d2:19:a6:4c:42:72:a6:a7:6c:0d:b8:70:1e:fa:7e:7b:
c1:b0:fe:9a:e4:8e:c9:6c:3d:78:66:c6:3a:00:97:9c:86:aa:
98:81:9a:35:f9:f6:4c:e7:fb:fd:2f:65:f2:f5:f1:d6:53:f9:
ba:3d:99:d9:b6:e2:23:de:be:cf:bb:2b:b8:4b:0e:5d:ec:44:
ff:16:f4:ad:b6:40:a6:fc:f7:a9:ea:de:57:cd:05:2a:d0:53:
2c:56:91:7d:91:d7:b4:1e:64:c2:96:f4:69:c1:20:de:68:fc:
29:39:60:81:a4:c4:7c:ce:5a:e4:7d:2b:75:9d:c2:06:18:38:
a2:f9:51:c0:15:57:ea:19:07:24:af:90:3e:34:d3:b9:2c:78:
4f:26:82:6f:a2:4b:83:e3:ee:85:2c:f6:ce:ca:78:29:02:6d:
7b:de:aa:b0:49:b3:a9:a2:08:d1:72:24:df:fc:3e:a9:b7:61:
60:3b:6d:48:57:15:eb:96:68:8c:80:f2:e0:03:c1:cc:71:a6:
0c:64:67:c2:04:7e:04:d0:ed:1d:7c:db:51:48:12:23:81:17:
09:8f:52:02:1e:f6:25:f9:69:fe:d1:01:37:f9:97:73:9a:a4:
8c:c5:48:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjZBM0MxMTAvBgNVBAUTKDk3QjAzREEyRkI0NUY1NkUzRjU4MjE2M0RGN0JEOTUw
NjkzOTk5NDQwHhcNMjYwNzIzMDcyMjA1WhcNMjYwNzMwMDcyMjA1WjAYMRYwFAYD
VQQDEw02YTYxYzExZC0yN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Kn6QtULoL3npNo0HxKKYtd8MCe7HChSNKD6NMe+pztTi2abf/hzVFiv2EfV
E8aXfyuI7b63voE0o2uc8o22L37w3I3wqpaz7n1/BQbAQHEjdWBu8uwITeM+tSKU
tlp3u6rSh+b3gNMFQzDg064i8/+hPedl2am6LbCeh8EIWmzwQJ/VcQH9a3qWp2cc
uzuj0oO7tEWEWNfBbFQg8jjH1rzOIK/bEsMc7A9+yNp+GpHH0MnW7z3YW7SF2gW5
ZXl/kSAaUHfh8ISI+Fc26BK9fi284CSrHLIRGfl36jRbLGCwMIgH10cd42qn9IqV
+9FYu3A70s7198mVoDhw092utQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMAK2CUB
hQi0Q5CKaUCiZossnhoJMB8GA1UdIwQYMBaAFJewPaL7RfVuP1ghY9972VBpOZlE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkEzQy83MzkwQjM0QUM2
QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi9sN0E5b3Z0RjlXNF9XQ0ZqMzN2WlVHazVt
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1VUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NkEzQy83MzkwQjM0QUM2QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi9sN0E5b3Z0RjlX
NF9XQ0ZqMzN2WlVHazVtVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZa+Z53KfBnRBlg6ZQvuqYQiJCl/SGaZMQnKmp2wNuHAe+n57wbD+muSOyWw9
eGbGOgCXnIaqmIGaNfn2TOf7/S9l8vXx1lP5uj2Z2bbiI96+z7sruEsOXexE/xb0
rbZApvz3qereV80FKtBTLFaRfZHXtB5kwpb0acEg3mj8KTlggaTEfM5a5H0rdZ3C
Bhg4ovlRwBVX6hkHJK+QPjTTuSx4TyaCb6JLg+PuhSz2zsp4KQJte96qsEmzqaII
0XIk3/w+qbdhYDttSFcV65ZojIDy4APBzHGmDGRnwgR+BNDtHXzbUUgSI4EXCY9S
Ah72Jflp/tEBN/mXc5qkjMVIig==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:57 2026 by rpki-client