
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
File: 7ObXRymptklRLPzniy2vzsFGlzo.mft (raw, json)
Hash identifier: qXoEXiCOYi5YOHdbqDRYypc7stCfvIWcUeEL+dMnnH8=
Subject key identifier: 40:FF:23:7B:4C:DC:5E:DD:2A:DC:07:23:FF:22:24:35:D3:BD:95:F1
Authority key identifier: EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
Certificate issuer: /CN=A916A171/serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Certificate serial: 0D83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
Manifest number: 0D77
Signing time: Wed 22 Jul 2026 18:11:20 +0000
Manifest this update: Wed 22 Jul 2026 18:11:19 +0000
Manifest next update: Wed 29 Jul 2026 18:11:19 +0000
Files and hashes: 1: 7ObXRymptklRLPzniy2vzsFGlzo.crl (hash: b79EQeXRVk8YPVillbvhHGgGTmI5ez+6/FZEu3Zb0Nc=)
2: F268590C1B9911ED9A50C30EC4F9AE02.roa (hash: WNQo1gJzwhXWEpc2UK9IPm/NBGxZHgROjQVKTAiSKXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3459 (0xd83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A171, serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Validity
Not Before: Jul 22 18:11:19 2026 GMT
Not After : Jul 29 18:11:19 2026 GMT
Subject: CN=6a6107c7-8d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:18:5c:04:15:f0:38:bc:2f:b1:05:07:50:
85:fb:3b:48:6d:53:9d:0b:8a:20:2a:ae:4b:50:ee:
44:4e:72:e9:68:fb:d0:99:2f:98:dd:18:86:a2:9e:
7f:c9:49:6f:51:40:fc:ba:e8:85:b7:9c:e9:57:57:
d0:f2:de:64:65:b1:de:6f:45:78:a1:40:82:4f:17:
14:db:0d:4a:42:1a:03:cf:b7:c6:bf:ef:54:b2:36:
63:8b:83:13:59:8c:1e:8c:18:93:bd:32:b0:a1:83:
83:4b:4f:2e:7b:0f:aa:5d:50:53:4f:b6:97:6b:de:
34:59:95:d9:c0:78:53:52:b7:d8:8b:f9:6b:88:6a:
00:2d:34:60:a8:7f:50:be:5d:c6:90:c7:dc:40:4f:
39:d6:b7:19:44:86:91:db:b6:ae:14:dc:2e:4b:84:
04:95:69:49:21:2b:7f:43:38:d3:dd:4b:ae:dd:32:
04:62:0d:50:64:47:ce:3d:37:5d:51:9a:ee:15:b8:
d3:bd:01:ec:a3:dc:3a:e5:4e:05:78:da:c9:10:97:
d1:73:89:52:c2:b0:bf:d3:32:3b:91:63:1a:cb:aa:
6f:3c:bf:3c:32:8f:f6:f3:47:6b:10:c1:14:3f:88:
6d:d1:a9:01:e1:d0:48:80:7b:94:76:45:f7:22:42:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FF:23:7B:4C:DC:5E:DD:2A:DC:07:23:FF:22:24:35:D3:BD:95:F1
X509v3 Authority Key Identifier:
keyid:EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:63:b6:ed:2d:9d:ed:a4:87:da:23:75:ae:a5:aa:62:d9:3d:
b4:71:4e:80:13:4c:f4:17:22:b4:5b:a1:17:9a:6b:b9:29:a4:
7b:2c:10:c2:49:df:9c:82:e6:20:72:b0:ec:8b:39:ee:a4:53:
6c:a5:b3:04:16:e5:5b:d5:45:03:92:66:05:a2:65:cb:6e:8d:
5e:78:84:fd:da:bd:e9:74:f0:43:71:73:78:94:0c:f3:64:74:
5e:af:0a:10:e2:45:70:10:f4:a8:0b:9f:0c:dc:2f:50:8c:b7:
01:6d:e2:e5:a5:5e:aa:07:5c:17:44:cf:0b:5e:81:64:bb:39:
21:fe:ec:67:a6:55:a6:6c:f3:3a:38:1c:57:38:53:a6:a9:a1:
0c:33:eb:d5:99:db:a9:72:9f:f3:4b:75:36:f7:a8:db:87:91:
8f:0d:5a:ba:29:b7:5a:fa:e1:73:fc:bd:6a:4b:98:9e:47:ce:
f5:3b:5b:0d:a1:e3:57:ed:dc:5b:ed:e0:fa:3f:36:9b:e3:56:
b4:c9:0a:07:d7:c9:c0:31:c2:d2:cd:8d:1a:40:6f:95:12:b2:
0a:8a:16:d2:4c:ab:ab:fc:01:82:f8:cc:c8:99:e5:2c:86:94:
f4:30:ea:e1:b5:4f:9d:a9:43:c9:b5:17:79:98:fc:02:74:07:
34:7f:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:23 2026 by rpki-client