
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json)
Hash identifier: EddrDCoCbj3M0uLzcD5CnsvLlmYJhtdUYiKLCX2Jhb0=
Subject key identifier: 26:95:B9:EA:C6:8F:DC:8A:29:06:44:62:9E:C1:45:31:44:58:F0:B7
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial: 0B62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
Manifest number: 0B47
Signing time: Tue 22 Sep 2026 19:06:06 +0000
Manifest this update: Tue 22 Sep 2026 19:06:06 +0000
Manifest next update: Tue 29 Sep 2026 19:06:06 +0000
Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: UfICguTlykYTANcTZqTZddxEOf84jHbUSHraM9p4wPE=)
2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 71Hm3TTvUXY6fbA6ubcd977cDED5QXch19XWZX6CKNY=)
3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2914 (0xb62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Validity
Not Before: Sep 22 19:06:06 2026 GMT
Not After : Sep 29 19:06:06 2026 GMT
Subject: CN=6ab2d19e-23f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:7b:ca:25:2c:48:bc:5e:83:4b:f5:34:d0:
cb:db:d1:14:df:74:c8:8e:53:72:d5:cd:2e:47:c2:
33:0b:6d:91:ff:2f:b5:e9:ff:19:f7:e9:ef:47:f2:
99:54:9c:72:98:aa:40:71:81:d0:9f:d7:32:ea:59:
51:b1:25:40:27:cd:b3:e1:5b:ac:fd:1f:57:d4:b1:
3c:4d:c6:8e:db:3e:be:a1:6e:0a:7e:9a:00:1a:c5:
0e:96:6c:d2:4c:0a:b4:12:7b:45:a4:40:cd:fc:33:
43:1d:bc:89:55:b2:85:ae:b8:af:f4:90:67:35:a6:
84:38:18:c1:e6:48:12:22:9a:e2:d6:d3:f2:29:52:
12:ee:cd:e1:59:80:32:b4:cd:ea:5a:d8:91:c3:d9:
ba:85:1f:10:42:0f:69:83:02:f2:0b:1b:12:8c:d2:
4b:d7:fe:ba:fa:f4:7c:2f:cd:3d:88:9b:1f:24:dc:
be:ef:3a:4a:79:b2:d4:c3:53:f3:34:1d:1b:f2:1e:
ad:a3:c5:67:42:19:fa:4e:d6:87:06:77:21:68:54:
a8:54:ea:3a:c1:89:d9:38:ae:e8:1b:5e:e9:a7:17:
35:b5:3b:d8:79:73:42:36:92:a7:0c:f1:d8:25:7a:
92:f1:10:45:74:2e:36:68:36:9c:54:68:e7:66:f3:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:95:B9:EA:C6:8F:DC:8A:29:06:44:62:9E:C1:45:31:44:58:F0:B7
X509v3 Authority Key Identifier:
keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:18:ea:14:a7:46:95:90:92:f6:b8:de:52:ae:86:0c:08:
3e:e9:9f:c1:84:40:49:2d:d1:37:e3:7c:03:e5:4f:02:29:04:
1c:cd:c8:84:1a:96:03:bf:90:b6:cf:ee:f5:c7:d6:47:ab:ad:
05:90:f4:fb:c0:48:3f:6d:9e:9e:8d:18:1d:cd:8a:97:ac:ff:
43:21:89:bf:64:50:83:df:03:ab:ca:09:0f:1b:f9:8e:45:b4:
0e:1c:af:c7:75:0f:36:81:81:40:58:b7:b2:3e:d7:d2:25:55:
f6:d4:6b:25:c6:67:6f:a8:9d:2e:d0:90:7b:9e:9c:d3:ff:ac:
8d:c2:94:4c:ef:58:ac:a2:01:20:d3:ef:c0:92:56:d7:c8:92:
51:de:71:e1:0e:0a:22:84:29:da:b8:7f:bb:fe:42:97:2b:78:
b8:f9:f9:9e:42:12:12:fa:6e:bb:cd:c1:32:db:a4:65:34:07:
84:79:3c:9b:bf:f0:62:b1:8f:42:e8:54:8f:d3:2c:6e:83:c4:
58:f2:d4:dd:94:25:4b:ec:e2:bd:ae:8a:18:03:f7:84:be:3c:
23:b8:7d:3a:2b:09:bf:d3:c3:a8:67:28:27:d0:00:f5:e0:dc:
70:eb:b9:af:03:a9:3a:19:1a:83:42:8d:c9:db:b8:cb:f9:3a:
84:3a:e9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:26:28 2026 by rpki-client