
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier: x/9OXAPQtM7txq3HYqfTiyg7IvZneR7ebF2hyzXYMN8=
Subject key identifier: 65:4F:D3:9A:88:89:99:48:72:F7:7A:6D:A6:FD:95:11:64:E7:3A:86
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number: 0158
Signing time: Fri 25 Sep 2026 05:14:15 +0000
Manifest this update: Fri 25 Sep 2026 05:14:14 +0000
Manifest next update: Fri 02 Oct 2026 05:14:14 +0000
Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: nzXQW369yys4L6jFMZIs9UHOwI+RqGcWeYTMtZtb6UY=)
2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 1MNrxKgQIdnkp7DGKWCKsge4/v205nBecHy5tmcmZDU=)
3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: hENFINj2b9wOIFxjK3nr2DrkTGbz4MTQ9pqxVPQHBxY=)
4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: WDWRrI/KRtPcAbR2bWOuMpgztLrYoQZ12yzCIYDgRAs=)
5: C41B6A98396E11F1992DA1BA96833773.roa (hash: BPXuBuSemYn/E+9Uo6D+b9G7/Ig6Oc1u1YHeb89/AEQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Validity
Not Before: Sep 25 05:14:14 2026 GMT
Not After : Oct 2 05:14:14 2026 GMT
Subject: CN=6ab60326-de13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3f:d6:ba:12:45:c0:1a:2e:9c:db:ca:ef:ed:
8d:a7:57:46:3c:30:20:dd:ce:7f:9e:d4:04:43:98:
b7:37:32:7b:5b:e1:a6:21:f9:5f:37:2d:ba:26:6f:
b6:ce:69:9f:f4:07:11:72:af:3f:29:23:94:2a:85:
cf:14:a9:37:0f:e8:46:1d:61:4f:28:7e:4e:29:fe:
2f:d6:ab:0e:74:b4:a4:32:a3:18:37:88:b1:03:eb:
2b:15:37:6b:96:2d:f5:a3:69:e9:e0:63:a1:f8:05:
96:49:6f:28:f1:44:bb:07:ad:7b:aa:1a:bb:e3:40:
1d:dc:57:99:ad:99:cc:c9:0b:e4:29:93:da:14:60:
e4:eb:6c:e4:e8:84:9c:fc:60:27:fa:6d:e4:54:c7:
09:9e:e8:04:c0:4c:56:74:04:47:6d:02:51:72:c5:
cb:d7:80:b8:f0:db:5f:f1:3b:06:a1:7f:57:df:6e:
be:3f:85:0e:d0:71:aa:09:d0:76:cd:db:00:49:c0:
83:dd:f7:01:ce:66:7b:09:5e:09:ce:50:b1:ba:83:
51:12:7a:c0:c1:f2:ef:92:49:a1:af:05:dc:5b:0f:
dc:8d:5b:a8:96:32:8c:16:8e:e2:9e:95:b4:e9:b1:
ef:2a:ab:0e:2a:29:dd:ad:10:13:cb:f7:73:81:b3:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4F:D3:9A:88:89:99:48:72:F7:7A:6D:A6:FD:95:11:64:E7:3A:86
X509v3 Authority Key Identifier:
keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e2:66:e7:d8:f1:6f:a0:5b:fe:e5:25:5a:a5:df:17:c7:9f:
61:e5:ed:8c:4a:c9:72:01:0c:27:dd:e6:3b:56:b6:09:47:59:
3f:f5:4a:50:aa:79:3d:ab:42:17:43:74:cf:be:0b:f8:19:43:
16:97:e5:4a:98:09:af:af:3b:27:bd:c1:e4:10:11:76:e9:39:
fd:ad:6c:01:d5:63:5a:e1:26:63:f6:e4:09:75:64:67:4f:ff:
8e:90:27:1c:0a:ae:1a:df:ac:98:cb:ed:67:27:e2:a0:33:87:
c6:5a:9c:13:2a:c7:00:82:d9:9b:40:2c:3a:c6:6a:29:f4:57:
c8:fb:6d:29:8a:4b:fd:8a:22:61:81:f6:5b:15:5e:b1:b6:42:
25:cb:b8:f0:c2:96:40:b8:59:68:9c:a1:7b:48:f0:d0:1a:35:
d4:86:ad:06:98:6c:cc:71:9c:fa:e8:51:60:3b:bd:d6:4d:68:
4a:f1:e1:3c:ce:2d:a7:42:f9:b4:46:03:29:d7:cd:13:52:d9:
93:fd:96:e5:d4:b4:6c:88:b5:b9:43:90:7a:6d:cc:36:91:e7:
70:3c:45:f5:c0:79:12:93:d4:04:e7:99:53:94:05:dd:a5:5c:
5e:70:de:ec:df:a7:5f:0f:f7:90:33:cc:58:c2:c2:8f:70:8d:
41:2d:5b:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIxMkExMTAvBgNVBAUTKEVDRkYzMjQ0MEM0RUUxRDI3OTQzQ0RCNzJBN0Q0OTEw
NjM0MDJERjEwHhcNMjYwOTI1MDUxNDE0WhcNMjYxMDAyMDUxNDE0WjAYMRYwFAYD
VQQDEw02YWI2MDMyNi1kZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8T/WuhJFwBounNvK7+2Np1dGPDAg3c5/ntQEQ5i3NzJ7W+GmIflfNy26Jm+2
zmmf9AcRcq8/KSOUKoXPFKk3D+hGHWFPKH5OKf4v1qsOdLSkMqMYN4ixA+srFTdr
li31o2np4GOh+AWWSW8o8US7B617qhq740Ad3FeZrZnMyQvkKZPaFGDk62zk6ISc
/GAn+m3kVMcJnugEwExWdARHbQJRcsXL14C48Ntf8TsGoX9X326+P4UO0HGqCdB2
zdsAScCD3fcBzmZ7CV4JzlCxuoNREnrAwfLvkkmhrwXcWw/cjVuoljKMFo7inpW0
6bHvKqsOKindrRATy/dzgbOUGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVP05qI
iZlIcvd6bab9lRFk5zqGMB8GA1UdIwQYMBaAFOz/MkQMTuHSeUPNtyp9SRBjQC3x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9COUQ0Q0Y0MkFF
M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRkSjVRODIzS24xSkVHTkFM
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjEyQS9COUQ0Q0Y0MkFFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRk
SjVRODIzS24xSkVHTkFMZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuuJm59jxb6Bb/uUlWqXfF8efYeXtjErJcgEMJ93mO1a2CUdZP/VKUKp5PatC
F0N0z74L+BlDFpflSpgJr687J73B5BARduk5/a1sAdVjWuEmY/bkCXVkZ0//jpAn
HAquGt+smMvtZyfioDOHxlqcEyrHAILZm0AsOsZqKfRXyPttKYpL/YoiYYH2WxVe
sbZCJcu48MKWQLhZaJyhe0jw0Bo11IatBphszHGc+uhRYDu91k1oSvHhPM4tp0L5
tEYDKdfNE1LZk/2W5dS0bIi1uUOQem3MNpHncDxF9cB5EpPUBOeZU5QF3aVcXnDe
7N+nXw/3kDPMWMLCj3CNQS1b2w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:47:54 2026 by rpki-client