
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File: x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier: Ck4m8fna0M/UKDi5EM5su1+2bWnqD9Ag7Whp7xgJHeg=
Subject key identifier: F1:56:94:DE:FF:F7:E2:63:22:23:96:53:14:B1:37:51:36:E7:3B:FD
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer: /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial: 029B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number: 0291
Signing time: Wed 13 May 2026 01:44:03 +0000
Manifest this update: Wed 13 May 2026 01:44:03 +0000
Manifest next update: Wed 20 May 2026 01:44:03 +0000
Files and hashes: 1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: LAwIEiuZXsBo3QAQf9fte2LK78pgMs34csME9FhWN/o=)
2: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: 6YJJzl5drZKIcUPjGHkkRR3YgQuFHkEPTeKqUES1L5c=)
3: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: tKFaHITtLZAQ61mcV49Br1vxEy6JkCTzuDJ4xLJ+YOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Validity
Not Before: May 13 01:44:03 2026 GMT
Not After : May 20 01:44:03 2026 GMT
Subject: CN=6a03d763-1bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:91:b9:99:28:c5:5d:6f:f0:f0:72:63:fd:
07:ba:30:5b:d1:1d:ef:28:2c:98:63:28:37:ee:9b:
34:b0:a9:55:1f:34:0c:f6:c5:b5:45:8c:68:82:fb:
b9:99:5f:8f:ae:90:89:ee:52:5b:48:b4:36:b1:30:
22:c8:6d:7d:d8:15:61:43:58:93:d1:b4:67:75:c6:
df:ab:8f:21:1e:e3:7b:19:4a:80:7a:77:3c:93:53:
1a:13:c6:4e:21:52:73:64:cc:76:76:fe:e2:38:0e:
11:bf:9f:1b:15:6a:fe:8e:20:8b:f6:67:7b:ad:ec:
6d:10:4f:a2:43:b3:af:26:74:cf:36:21:51:30:87:
a0:3f:8a:7f:b7:0e:97:61:0e:b1:96:17:d5:dd:9c:
eb:b1:50:6e:a1:43:c8:a5:91:1c:01:45:54:81:51:
c6:b6:5b:e6:87:21:b4:54:96:48:9c:23:8c:83:b3:
9c:7a:4b:16:b1:6d:c0:a4:e4:f9:a1:aa:77:c9:57:
50:d1:36:07:b8:28:8c:8a:1c:49:c3:ca:26:8f:d3:
a3:bb:4b:ab:08:40:8e:89:2a:af:02:61:f5:05:cc:
b2:83:b5:15:be:2c:ee:e0:ec:be:5e:97:1c:20:c5:
2a:41:7f:b8:b9:b2:0e:31:03:38:6e:db:19:b3:12:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:94:DE:FF:F7:E2:63:22:23:96:53:14:B1:37:51:36:E7:3B:FD
X509v3 Authority Key Identifier:
keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9c:52:68:0b:86:0c:68:5e:9d:ed:6c:66:75:f8:35:a8:ec:
df:dc:83:e3:50:17:67:36:39:fc:f9:df:e5:ef:f7:dc:53:25:
55:50:12:b4:00:cb:8e:33:33:9a:36:67:1d:37:d7:75:e9:69:
ff:b1:a3:a2:7c:5f:f1:a4:b0:08:42:80:05:19:ba:82:99:70:
ac:fb:09:fa:cc:54:63:ee:2c:20:f4:56:14:90:07:0d:07:d3:
93:ba:4b:14:89:6f:a8:01:9e:ea:3a:3c:75:bb:d8:94:41:c0:
ae:44:43:f6:cd:32:e1:8e:3a:3c:d9:58:af:a1:e6:5a:42:ea:
0c:4c:49:87:ea:a7:49:c2:34:70:1d:f0:e3:0f:62:01:d5:45:
c6:4a:b3:c3:c7:b4:08:c1:21:55:10:bf:8e:eb:b6:9e:4e:9a:
b4:f1:c1:8e:a0:8f:7d:d7:af:06:ae:6f:86:f3:54:4c:3b:53:
5f:f7:6b:a8:2a:11:e0:ed:e1:3c:6c:8b:ae:51:79:0a:ad:d2:
b3:b8:e6:a1:95:b6:cd:fa:d4:4f:21:a1:37:36:4d:e4:2d:f7:
a5:f0:f9:fd:e3:a9:ec:50:72:1c:af:f0:68:1b:74:61:b7:05:
f3:cc:5b:17:42:40:15:2b:dc:53:a1:48:ea:b6:83:d9:7e:3b:
8b:b9:4d:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NzUxMTAvBgNVBAUTKEM3QjEzMDlEMDA4NzJEMDY2NjM5NkI0QzIzRDhFRjVD
MzEyQzZCRUIwHhcNMjYwNTEzMDE0NDAzWhcNMjYwNTIwMDE0NDAzWjAYMRYwFAYD
VQQDEw02YTAzZDc2My0xYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAox+RuZkoxV1v8PByY/0HujBb0R3vKCyYYyg37ps0sKlVHzQM9sW1RYxogvu5
mV+PrpCJ7lJbSLQ2sTAiyG192BVhQ1iT0bRndcbfq48hHuN7GUqAenc8k1MaE8ZO
IVJzZMx2dv7iOA4Rv58bFWr+jiCL9md7rextEE+iQ7OvJnTPNiFRMIegP4p/tw6X
YQ6xlhfV3ZzrsVBuoUPIpZEcAUVUgVHGtlvmhyG0VJZInCOMg7OceksWsW3ApOT5
oap3yVdQ0TYHuCiMihxJw8omj9Oju0urCECOiSqvAmH1Bcyyg7UVvizu4Oy+Xpcc
IMUqQX+4ubIOMQM4btsZsxLOmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFWlN7/
9+JjIiOWUxSxN1E25zv9MB8GA1UdIwQYMBaAFMexMJ0Ahy0GZjlrTCPY71wxLGvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY3NS82RDExRjU3ODVF
NUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExRWm1PV3RNSTlqdlhERXNh
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g3RXduUUNITFFabU9XdE1JOWp2WERFc2Etcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTY3NS82RDExRjU3ODVFNUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExR
Wm1PV3RNSTlqdlhERXNhLXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqpxSaAuGDGhene1sZnX4Najs39yD41AXZzY5/Pnf5e/33FMlVVAStADLjjMz
mjZnHTfXdelp/7Gjonxf8aSwCEKABRm6gplwrPsJ+sxUY+4sIPRWFJAHDQfTk7pL
FIlvqAGe6jo8dbvYlEHArkRD9s0y4Y46PNlYr6HmWkLqDExJh+qnScI0cB3w4w9i
AdVFxkqzw8e0CMEhVRC/juu2nk6atPHBjqCPfdevBq5vhvNUTDtTX/drqCoR4O3h
PGyLrlF5Cq3Ss7jmoZW2zfrUTyGhNzZN5C33pfD5/eOp7FByHK/waBt0YbcF88xb
F0JAFSvcU6FI6raD2X47i7lN7g==
-----END CERTIFICATE-----
Generated at Wed May 13 11:44:24 2026 by rpki-client