
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier: IXZcTodnZJhC3PeyohnT3g3YI0cw6hy6OLvqrhiZ0Qs=
Subject key identifier: 48:F5:40:31:A9:F0:7E:8A:97:7C:84:6A:DA:E8:14:4E:18:FC:84:25
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 1A07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number: 19EB
Signing time: Tue 12 May 2026 16:22:57 +0000
Manifest this update: Tue 12 May 2026 16:22:56 +0000
Manifest next update: Tue 19 May 2026 16:22:56 +0000
Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: guItND03p8wXArUXvPUNcyf+EwFM1GuM/kJudXpSw00=)
2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: t4qQEhXVur27eUnpFLqlgSPz5OkbpRB/VWbuAT/SIEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6663 (0x1a07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Validity
Not Before: May 12 16:22:56 2026 GMT
Not After : May 19 16:22:56 2026 GMT
Subject: CN=6a0353e0-dabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:fd:c9:0b:61:35:e6:cf:6e:c4:34:f2:96:
bd:a8:5b:9d:6d:2c:75:4e:af:34:15:19:4c:c2:b6:
3e:7f:ca:cf:27:2b:c7:19:e6:cc:77:45:02:04:20:
97:f1:6a:fe:d6:ac:19:9f:ca:72:f1:1a:c1:01:b4:
b9:ca:ab:46:f8:4d:11:d2:8d:06:d9:31:8c:90:aa:
bd:79:0d:f5:d6:05:57:e4:92:c1:8a:f8:64:9d:fc:
bc:d9:ed:5d:f7:2c:75:c1:3e:db:b4:4e:66:22:da:
89:1f:35:c9:25:53:6e:b1:b7:53:30:b0:78:6b:75:
b2:10:00:48:64:30:b2:68:c7:5e:59:64:4a:1b:b4:
1d:1f:e1:f2:1a:6e:a0:a2:a4:c4:1d:66:9d:03:7a:
99:27:d4:dd:0c:8d:5e:d1:69:7a:36:93:82:66:f7:
ad:9d:90:22:12:10:37:a4:1a:37:fa:c0:e3:13:d3:
b5:5c:df:7b:76:19:ce:a5:c7:3f:63:c5:fe:65:a6:
f5:19:57:a1:a1:4e:b8:27:5b:f5:f8:72:f8:a6:1a:
f0:b8:d7:67:c0:8d:dc:d8:bb:96:a2:46:67:e6:cc:
3e:61:2e:0b:bd:d9:c5:b7:d3:58:29:16:fb:d2:46:
8d:90:60:b5:b7:0a:16:af:01:71:00:7b:44:de:dd:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:40:31:A9:F0:7E:8A:97:7C:84:6A:DA:E8:14:4E:18:FC:84:25
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:7f:30:89:40:f5:42:43:83:07:a4:44:a2:7b:ea:9c:0e:c0:
28:c6:d7:a1:d3:db:04:58:af:e2:2b:6f:c7:ad:a7:2e:2d:d8:
45:5a:fe:66:02:7a:81:8f:1b:61:51:b0:50:f1:7d:02:2a:b6:
bf:c5:ab:38:7d:75:17:97:e1:23:7a:82:7b:92:50:59:84:ab:
3d:fd:b4:06:de:4e:31:3a:ba:d4:f0:88:eb:1b:8a:f1:e3:74:
28:c5:76:aa:be:ae:91:d5:3e:41:ab:ff:10:36:56:3f:ed:1d:
3a:94:43:a8:12:6b:cc:e5:88:c2:35:59:32:02:80:a4:58:86:
51:b7:31:fa:07:5b:96:8c:ee:ef:e2:c2:02:48:90:e5:02:60:
fa:75:34:b1:9f:25:c7:08:64:28:24:4e:90:06:a3:68:07:75:
28:a5:b8:1c:dd:35:81:9a:a6:aa:28:c5:24:14:57:fc:50:12:
aa:25:1a:23:01:43:2f:95:3d:7b:db:58:ce:82:fc:3a:d8:f8:
42:d2:a7:9c:31:01:2b:e1:17:e0:ec:50:39:ad:ee:3f:95:5e:
95:d4:a7:df:df:84:f4:9a:44:29:2b:7b:d9:b8:f0:a3:59:97:
be:4b:12:1f:13:52:28:0e:82:8e:b5:90:f1:4d:ea:3c:4a:e3:
4d:90:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:48:50 2026 by rpki-client