
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json)
Hash identifier: pcmu4+irh/eKX3JYy0HF36GuXWiDufAOhhe+AGdh57M=
Subject key identifier: C5:ED:84:8E:45:B6:D2:EC:2A:22:AD:EF:99:98:7D:14:65:09:0E:71
Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F
Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
Certificate serial: 2202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
Manifest number: 2202
Signing time: Wed 22 Jul 2026 15:57:17 +0000
Manifest this update: Wed 22 Jul 2026 15:57:16 +0000
Manifest next update: Wed 29 Jul 2026 15:57:16 +0000
Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: h9dpWWUO0s2giVIKzEaw5XElZgpWVrWbmeMeySIIZiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl
rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8706 (0x2202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
Validity
Not Before: Jul 22 15:57:16 2026 GMT
Not After : Jul 29 15:57:16 2026 GMT
Subject: CN=6a60e85d-429d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:53:68:96:aa:bd:00:66:65:44:9c:02:7a:
16:70:e4:44:b4:81:b6:fd:6e:ff:36:2b:54:0f:e8:
8d:0f:69:a8:35:56:b4:ed:ce:49:2b:8a:cc:39:02:
a3:d4:36:66:52:b6:a7:b3:d2:99:f7:a8:5d:97:b5:
ec:76:79:e5:a7:a7:0d:eb:cf:ee:7f:ea:03:14:77:
74:77:cf:d6:69:97:2f:5a:d9:65:31:5b:35:4e:66:
ab:ba:5f:bc:ac:1f:c7:34:a6:14:00:f1:65:34:fd:
82:9e:d7:49:3d:8d:f3:58:62:08:dc:7d:9c:1f:6f:
2e:b1:d7:70:ef:5b:ad:5c:7e:e6:c1:e7:10:39:98:
02:c9:24:eb:ad:05:7b:68:c8:32:77:e2:3a:fd:8e:
1a:e5:9e:ea:fc:40:ac:cc:8b:46:9d:55:a3:75:b5:
f2:68:62:48:4f:d3:26:2a:df:60:67:41:e4:76:1a:
10:4f:1d:25:54:5a:3c:58:7c:2c:e1:49:81:4c:9e:
d2:a8:a0:e9:ba:66:40:62:65:dd:75:b3:1b:2e:b7:
60:47:3c:03:0f:2e:d8:da:e5:23:5c:ce:03:10:ce:
55:65:7e:89:80:96:8d:af:ff:76:ef:3c:54:b8:d0:
4d:11:30:52:a6:8c:0f:eb:b6:92:3d:e3:50:1f:0e:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:84:8E:45:B6:D2:EC:2A:22:AD:EF:99:98:7D:14:65:09:0E:71
X509v3 Authority Key Identifier:
keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f3:be:32:05:30:33:38:5a:92:d7:05:43:00:08:94:db:27:
1a:1f:25:08:3d:35:af:da:a7:f6:b1:a3:b1:22:31:a2:1e:ad:
2c:b9:5e:68:f7:94:34:3c:62:07:66:a6:5d:00:98:eb:e1:73:
c6:be:79:02:9f:62:37:11:bd:1c:30:5c:0e:f2:32:e3:6a:70:
47:a6:45:43:2e:47:32:1c:b7:74:68:9c:73:65:46:ad:a2:66:
84:1d:17:81:5a:69:54:d6:e4:b0:9a:fa:47:01:8f:97:3d:d9:
d2:62:2e:27:ce:15:c9:91:35:c1:53:8c:c7:55:c1:ed:79:2a:
a9:21:52:ee:d6:ac:ae:34:38:e5:25:b2:e6:db:b6:5b:a3:60:
91:e9:1a:7a:a3:d9:2b:2c:15:25:b5:16:dd:fc:d5:1d:4d:56:
6b:bd:c1:ec:d2:ed:57:2a:b2:56:a6:99:c3:37:f5:50:55:49:
c2:66:1c:d5:1d:bd:14:d9:d8:1a:af:b2:3e:49:ad:89:ab:b7:
0c:98:8d:78:8d:4f:72:a3:8a:48:3d:f4:6c:a4:a3:fc:12:e7:
65:91:8d:58:e0:9a:06:e9:dc:dc:a6:24:33:de:c3:d7:c1:c9:
07:a8:31:d1:d8:f7:7f:62:8f:33:dd:10:56:04:de:53:fd:4d:
d8:79:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:50 2026 by rpki-client