
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json)
Hash identifier: xOsXfELFmZV1nl5X1vdYWDBJY2Si8tR7cDHmUaGS3sE=
Subject key identifier: 65:79:9D:CB:85:D3:1F:E9:F1:CE:7D:57:17:80:53:22:20:C1:F6:DB
Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
Certificate serial: 075E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
Manifest number: 0752
Signing time: Tue 12 May 2026 21:47:48 +0000
Manifest this update: Tue 12 May 2026 21:47:47 +0000
Manifest next update: Tue 19 May 2026 21:47:47 +0000
Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: DymkmSOHo6BlQ7alKgOhxKB0bZ4Mm6p46Fz68pkiurM=)
2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: Y08aauLWlD/3KbKUWbhD8x6QFYVQbXZtknrvh7LrAZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl
rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
Validity
Not Before: May 12 21:47:47 2026 GMT
Not After : May 19 21:47:47 2026 GMT
Subject: CN=6a03a003-9212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:db:26:d9:44:78:2a:8c:69:2a:84:56:b4:
f1:c1:78:83:a6:5e:26:87:cc:4d:b2:43:a5:09:02:
3d:0e:da:28:5e:68:07:a2:98:92:8b:45:ad:f4:1c:
b4:2a:66:31:36:c4:93:88:c7:6b:00:a2:3c:4e:1e:
bc:da:24:d1:8e:d3:d2:3e:7c:3f:6e:6e:40:a6:36:
0d:06:b8:e6:cc:3b:65:f2:07:d5:41:d7:8e:a8:10:
c2:31:1e:27:19:0c:11:c7:cd:14:b0:59:a3:b8:29:
1f:95:e2:78:6d:61:ab:b4:f7:84:ef:9f:02:56:64:
d7:79:6d:28:40:c4:b8:a7:0b:d1:4e:b6:81:97:e6:
44:83:3e:ef:0a:e9:57:6a:ce:66:7c:a4:82:30:48:
4c:d5:aa:fb:a1:23:c2:ea:af:c2:76:6d:c8:21:d7:
24:4d:8a:08:d2:9e:34:1e:7f:19:c2:87:26:6a:f2:
3c:34:9e:7f:f1:07:f4:e5:91:fa:f6:88:d9:2b:84:
bc:3c:f1:40:aa:bc:cb:20:9d:1a:7b:62:14:cf:81:
c6:95:f7:4c:b6:9b:4d:49:43:07:27:7e:2b:57:43:
dc:2e:e4:a7:2d:8a:52:a8:cf:6f:b7:ae:50:e9:92:
47:61:e9:30:e9:58:91:69:a4:c4:13:ba:f9:30:52:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:9D:CB:85:D3:1F:E9:F1:CE:7D:57:17:80:53:22:20:C1:F6:DB
X509v3 Authority Key Identifier:
keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:47:31:68:25:6c:b8:1e:93:8f:d0:6c:ed:0d:b1:1f:9e:89:
36:e5:03:6c:92:c7:86:41:78:24:52:7c:21:55:57:eb:4c:69:
c5:d9:ef:1c:34:40:4e:74:88:5f:33:f4:16:a5:ed:3e:c4:1b:
82:bc:62:b7:0f:d2:a7:a8:dd:9f:93:1f:02:a0:8c:07:6b:f2:
f0:9d:48:56:15:bd:08:f4:7b:a3:2f:ab:75:65:68:15:aa:1f:
1d:c9:4d:a0:f0:d9:4b:81:e7:9c:60:8f:8a:73:27:58:b9:7d:
bd:fb:29:7c:86:9f:a7:b1:b8:90:1c:cc:d5:99:1d:b3:72:af:
e6:3d:ce:fe:3b:b0:eb:79:6b:a4:2a:98:f0:5b:ec:fb:93:5c:
b2:ce:bd:00:f1:f4:ea:dd:b6:f1:40:bd:99:16:f3:c4:c8:1d:
76:c5:a6:87:42:1e:40:28:f3:2f:8c:c0:cd:92:1b:72:1e:3b:
40:56:18:5b:6e:dc:6f:30:9a:12:a2:40:5c:2e:e6:40:e7:94:
05:4d:8b:b3:74:9d:01:cd:f7:b1:a7:f2:c0:ff:84:98:1c:ba:
13:72:05:7c:f7:73:01:f6:84:b3:c4:31:3d:59:3b:4f:e4:6a:
8d:d7:00:3c:1f:4f:9b:04:da:3c:ba:44:d9:6e:1e:9c:02:4a:
02:f6:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:56 2026 by rpki-client