
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
File: 7KeHdUGmkz3VBhpsggg9O4ORXIU.mft (raw, json)
Hash identifier: h/UZn8GqLn8/DskZ14ruFSAzzbD8K1iyiqpClcimdds=
Subject key identifier: D8:29:1C:D3:CB:68:DE:A6:DE:07:04:49:B3:65:27:0D:86:F3:25:30
Authority key identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
Certificate issuer: /CN=A9142127/serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
Manifest number: 9B
Signing time: Tue 22 Sep 2026 18:56:19 +0000
Manifest this update: Tue 22 Sep 2026 18:56:19 +0000
Manifest next update: Tue 29 Sep 2026 18:56:19 +0000
Files and hashes: 1: 7KeHdUGmkz3VBhpsggg9O4ORXIU.crl (hash: Sr8weo18X2GejW5XzJc62La+9Qfu1ZBga+gUdL8OQoE=)
2: 0A6F23BCD89011F0809DF24792D3641D.roa (hash: LF3tnAF+s60btudK/C+MWOKUVDskcOU/sbbTIojV6RQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142127, serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Validity
Not Before: Sep 22 18:56:19 2026 GMT
Not After : Sep 29 18:56:19 2026 GMT
Subject: CN=6ab2cf53-bcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:a9:54:ae:43:87:62:95:d7:ba:b6:24:d8:
dc:04:b3:ab:8f:f2:a8:bb:64:11:ef:70:a9:e8:1d:
9e:3e:4d:77:d1:0a:33:0d:d4:04:3d:be:50:84:c0:
f0:99:fb:93:e2:8f:ae:52:b8:87:7f:18:e1:b5:91:
1a:12:94:7b:a7:67:de:6c:e3:49:b6:e4:80:e1:5c:
f7:a0:eb:43:38:c1:04:b6:33:8e:87:95:fe:f6:e4:
d2:0f:b8:3d:8d:1e:2b:07:8e:4c:02:03:04:e8:02:
2c:82:d7:31:6e:d6:48:d8:b0:58:9e:84:e7:2c:30:
1a:a0:41:cd:38:20:e5:17:91:ce:ec:b4:34:50:28:
8e:00:a0:0f:8f:0b:05:5a:e0:00:54:d8:83:be:27:
c2:26:ff:5d:3f:a3:96:15:75:01:90:16:cd:43:69:
18:83:48:20:34:db:93:1f:c7:45:7a:7f:68:38:1c:
6a:ce:d4:d2:87:b3:2e:62:de:60:67:8e:1c:ae:2d:
e6:67:e0:51:24:b3:c6:be:42:79:22:ad:3e:1d:47:
1f:17:4a:df:45:48:92:37:6f:a6:05:08:64:03:b7:
2d:63:bd:ab:76:d6:ed:6e:93:3f:ff:5f:6e:47:9f:
84:04:5a:c1:3c:57:8c:0d:87:f2:02:2a:d2:ad:78:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:29:1C:D3:CB:68:DE:A6:DE:07:04:49:B3:65:27:0D:86:F3:25:30
X509v3 Authority Key Identifier:
keyid:EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:20:5c:7f:a9:0d:b1:8c:d4:e6:85:ec:f3:6c:c3:b0:9d:38:
07:8d:82:9b:80:61:d7:89:7d:05:21:13:7b:54:a3:c7:5d:e1:
9f:a4:da:bd:43:ed:81:b4:3a:bd:ac:4e:cc:8f:2a:20:53:3a:
c0:e4:64:3c:7c:48:fe:4a:68:4d:b3:59:e3:cc:de:e8:58:9a:
f1:53:0a:9a:96:6b:ca:e7:a6:46:1e:3d:24:ce:8a:31:18:3d:
04:97:e3:65:d4:a5:af:20:08:0a:05:93:87:ff:9a:3b:b5:e9:
3c:46:41:6a:26:b2:88:d0:97:46:7a:fd:14:7a:72:c5:b8:7b:
99:45:ed:94:e7:d6:1c:e6:99:26:df:78:ef:f0:95:b1:39:65:
ef:9e:89:4a:f3:c3:d0:72:8a:8b:dc:81:0a:5c:c5:f0:f0:c4:
fb:7f:08:2b:63:7e:9a:f1:05:88:29:c1:24:54:60:cf:33:ee:
32:ce:b4:53:32:d5:0f:fb:92:95:a4:e3:19:94:aa:b1:37:33:
54:18:9a:d4:08:3c:2f:38:a3:07:cf:fe:76:07:c1:69:be:b9:
ff:17:d8:58:46:93:88:37:1b:e0:55:af:0d:35:3e:00:77:b0:
8f:6f:2b:3e:eb:89:69:83:bd:3a:b4:0b:cf:e2:37:36:e1:12:
2e:9d:32:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIxMjcxMTAvBgNVBAUTKEVDQTc4Nzc1NDFBNjkzM0RENTA2MUE2QzgyMDgzRDNC
ODM5MTVDODUwHhcNMjYwOTIyMTg1NjE5WhcNMjYwOTI5MTg1NjE5WjAYMRYwFAYD
VQQDEw02YWIyY2Y1My1iY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOGpVK5Dh2KV17q2JNjcBLOrj/Kou2QR73Cp6B2ePk130QozDdQEPb5QhMDw
mfuT4o+uUriHfxjhtZEaEpR7p2febONJtuSA4Vz3oOtDOMEEtjOOh5X+9uTSD7g9
jR4rB45MAgME6AIsgtcxbtZI2LBYnoTnLDAaoEHNOCDlF5HO7LQ0UCiOAKAPjwsF
WuAAVNiDvifCJv9dP6OWFXUBkBbNQ2kYg0ggNNuTH8dFen9oOBxqztTSh7MuYt5g
Z44cri3mZ+BRJLPGvkJ5Iq0+HUcfF0rfRUiSN2+mBQhkA7ctY72rdtbtbpM//19u
R5+EBFrBPFeMDYfyAirSrXhcXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgpHNPL
aN6m3gcESbNlJw2G8yUwMB8GA1UdIwQYMBaAFOynh3VBppM91QYabIIIPTuDkVyF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy9DNDhGQThGQUQ3
NDgxMUYwQkExQjBEOUU2QkQzNjQxRC83S2VIZFVHbWt6M1ZCaHBzZ2dnOU80T1JY
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdLZUhkVUdta3ozVkJocHNnZ2c5TzRPUlhJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjEyNy9DNDhGQThGQUQ3NDgxMUYwQkExQjBEOUU2QkQzNjQxRC83S2VIZFVHbWt6
M1ZCaHBzZ2dnOU80T1JYSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeyBcf6kNsYzU5oXs82zDsJ04B42Cm4Bh14l9BSETe1Sjx13hn6TavUPtgbQ6
vaxOzI8qIFM6wORkPHxI/kpoTbNZ48ze6Fia8VMKmpZryuemRh49JM6KMRg9BJfj
ZdSlryAICgWTh/+aO7XpPEZBaiayiNCXRnr9FHpyxbh7mUXtlOfWHOaZJt947/CV
sTll756JSvPD0HKKi9yBClzF8PDE+38IK2N+mvEFiCnBJFRgzzPuMs60UzLVD/uS
laTjGZSqsTczVBia1Ag8LzijB8/+dgfBab65/xfYWEaTiDcb4FWvDTU+AHewj28r
PuuJaYO9OrQLz+I3NuESLp0ybg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:28:32 2026 by rpki-client