
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json)
Hash identifier: cmnMeZTR40oFphAx64+5IE7ptWSm5dwpGhYhZYAvWP0=
Subject key identifier: 2A:54:8D:EC:FA:E2:A1:92:76:B9:2E:5B:AD:09:79:24:C1:E8:74:D4
Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
Manifest number: 013E
Signing time: Thu 23 Jul 2026 07:07:42 +0000
Manifest this update: Thu 23 Jul 2026 07:07:41 +0000
Manifest next update: Thu 30 Jul 2026 07:07:41 +0000
Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: hriWB5OrdKKXEMKcRc2G3AI2qJ9X2bDjW4v8cfXgt3Y=)
2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: kXIL4LSVHjTAmVfJOU7g+OrmcpQ5rxALmYlyD25Zr5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Validity
Not Before: Jul 23 07:07:41 2026 GMT
Not After : Jul 30 07:07:41 2026 GMT
Subject: CN=6a61bdbe-2957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:88:e2:89:21:09:59:19:f3:60:28:75:cb:
ad:2d:cd:f4:4a:a9:6f:2d:cc:76:59:5f:2b:c9:99:
bc:44:7f:04:a4:e0:12:f1:90:08:f1:05:3c:6e:a5:
e6:37:80:a1:51:da:73:e1:c8:b8:46:71:3b:39:1e:
af:01:1a:72:bc:53:3f:62:7c:7b:a1:a9:ac:b9:02:
48:46:a7:b3:b7:0b:98:54:88:5b:e8:a5:46:53:af:
ed:fa:c4:e9:45:d3:14:86:9d:df:2e:95:c6:a2:c4:
78:9d:a7:9d:0d:1e:5f:16:a4:8e:d1:4d:ad:0b:26:
04:cc:70:10:8f:39:b4:bf:d1:19:52:a2:fa:0d:04:
34:f0:df:c2:20:a7:60:25:44:64:cf:6f:c2:59:56:
29:cf:ee:d5:97:70:d8:29:52:11:78:9e:dc:11:0a:
01:5b:72:5d:5e:ba:9b:7f:d6:5f:46:6e:01:60:c0:
33:90:af:14:d3:c5:4a:ec:7f:20:6f:6a:36:2d:c0:
7a:ef:73:f1:72:de:b2:53:ad:bc:14:9a:f2:58:ab:
d8:ef:e2:73:7b:75:c1:81:3b:24:11:5e:61:9c:08:
52:4e:9c:1e:40:ac:ea:4a:72:31:ce:96:de:b1:54:
1a:55:ed:40:d0:cf:a6:14:f0:fc:b1:ed:1e:e3:77:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:54:8D:EC:FA:E2:A1:92:76:B9:2E:5B:AD:09:79:24:C1:E8:74:D4
X509v3 Authority Key Identifier:
keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:68:88:e2:24:98:5f:17:09:ec:a7:27:a0:24:17:3f:31:71:
40:da:96:ef:1d:af:22:58:e0:53:f2:fd:ca:fd:88:93:de:33:
d5:5b:5e:06:ee:f6:52:ab:91:97:c1:7f:e6:52:08:29:98:ef:
08:85:83:4d:a0:44:fb:b0:b7:3f:22:17:99:69:fe:57:2f:a1:
48:1a:66:e2:d9:a8:d2:4a:8e:e7:ce:a8:a3:c7:a0:56:d6:ee:
cf:1c:03:b3:e1:09:4e:10:c1:d6:42:1f:53:77:9e:66:c2:4e:
25:23:9a:3a:64:39:de:73:dd:65:1e:1c:4d:14:d8:eb:55:7d:
6c:16:c6:01:bd:e1:ff:1b:f9:55:a5:63:03:a0:3c:2b:c7:f4:
61:7f:2e:ce:51:c3:3f:87:bd:7f:b7:50:b1:44:d5:a5:b8:ba:
83:3c:95:89:54:59:f7:04:ae:cf:ce:39:24:08:0a:e0:2d:8a:
08:be:0b:ff:d0:35:3b:3d:82:8b:7a:ef:b1:aa:f8:d0:11:dc:
ef:1b:27:ae:01:c2:da:01:29:b1:f0:d4:22:b7:fa:6c:34:8f:
89:67:38:b6:59:e0:a3:df:34:2d:23:f9:b0:eb:7b:ef:da:00:
03:e4:c9:37:74:26:c6:0d:13:85:18:b3:eb:7b:97:80:5e:f9:
61:7e:55:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc2MjcxMTAvBgNVBAUTKDA4MEVDMTRBMDAxMjVEOTE0QzdFNjI4NURFOUM1NjY4
OUM1ODcyQTQwHhcNMjYwNzIzMDcwNzQxWhcNMjYwNzMwMDcwNzQxWjAYMRYwFAYD
VQQDEw02YTYxYmRiZS0yOTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo72I4okhCVkZ82AodcutLc30SqlvLcx2WV8ryZm8RH8EpOAS8ZAI8QU8bqXm
N4ChUdpz4ci4RnE7OR6vARpyvFM/Ynx7oamsuQJIRqeztwuYVIhb6KVGU6/t+sTp
RdMUhp3fLpXGosR4naedDR5fFqSO0U2tCyYEzHAQjzm0v9EZUqL6DQQ08N/CIKdg
JURkz2/CWVYpz+7Vl3DYKVIReJ7cEQoBW3JdXrqbf9ZfRm4BYMAzkK8U08VK7H8g
b2o2LcB673Pxct6yU628FJryWKvY7+Jze3XBgTskEV5hnAhSTpweQKzqSnIxzpbe
sVQaVe1A0M+mFPD8se0e43eAdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCpUjez6
4qGSdrkuW60JeSTB6HTUMB8GA1UdIwQYMBaAFAgOwUoAEl2RTH5ihd6cVmicWHKk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzYyNy9FN0QyNTc4NkE4
OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1haRk1mbUtGM3B4V2FKeFlj
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzYyNy9FN0QyNTc4NkE4OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1ha
Rk1mbUtGM3B4V2FKeFljcVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZmiI4iSYXxcJ7KcnoCQXPzFxQNqW7x2vIljgU/L9yv2Ik94z1VteBu72UquR
l8F/5lIIKZjvCIWDTaBE+7C3PyIXmWn+Vy+hSBpm4tmo0kqO586oo8egVtbuzxwD
s+EJThDB1kIfU3eeZsJOJSOaOmQ53nPdZR4cTRTY61V9bBbGAb3h/xv5VaVjA6A8
K8f0YX8uzlHDP4e9f7dQsUTVpbi6gzyViVRZ9wSuz845JAgK4C2KCL4L/9A1Oz2C
i3rvsar40BHc7xsnrgHC2gEpsfDUIrf6bDSPiWc4tlngo980LSP5sOt779oAA+TJ
N3Qmxg0ThRiz63uXgF75YX5V+Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:10 2026 by rpki-client