
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json)
Hash identifier: 6PQv5AiIbg2QiPOjGrqAUO/G5cnoXtR1fuJ/XAdqixw=
Subject key identifier: 3E:41:FA:D0:DC:49:50:47:81:B7:6C:6A:BD:E5:52:3D:0C:7C:35:47
Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Certificate serial: 05FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
Manifest number: 05E6
Signing time: Wed 22 Jul 2026 23:44:14 +0000
Manifest this update: Wed 22 Jul 2026 23:44:13 +0000
Manifest next update: Wed 29 Jul 2026 23:44:13 +0000
Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: ztsiYXz1UzFFNP2DtFN4xi49IxT2Pasvkb1y1MIcBU0=)
2: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: vYjOUFbhsWomhdQCGDNjFRiRUNZnILccQOyVMSYu5mk=)
3: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: RAri4R9i13T7tcPaRZBEdOQRsJoO98ROLRiMbR2yLR4=)
4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: dobqjje96t2ByzCuxv07GsjoPcXnK+I6oVC5xcVUx1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl
rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1533 (0x5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Validity
Not Before: Jul 22 23:44:13 2026 GMT
Not After : Jul 29 23:44:13 2026 GMT
Subject: CN=6a6155ce-6d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5e:fc:45:ad:13:30:6a:ea:dc:c6:19:98:a0:
12:cf:11:66:92:bc:41:f8:bb:21:0f:4f:5d:a1:34:
e4:ba:ce:e3:c9:13:36:6a:27:20:08:32:5d:dc:9e:
4b:60:92:ba:49:9e:52:9f:c8:0a:68:59:4c:a5:90:
ab:e1:cd:ea:ab:7b:4c:9c:a4:9e:7f:90:8f:eb:a0:
ab:6c:71:7b:0f:9f:7c:7f:3f:ff:90:27:06:81:99:
49:b9:5e:c2:31:0b:22:6e:a8:3b:f5:a8:f8:97:cb:
a1:17:fc:bc:9f:5e:f7:92:e9:da:aa:65:c0:fc:e2:
cd:4e:d3:f4:b9:d1:bc:8d:65:b6:b4:82:89:af:26:
e2:a9:c7:3d:56:60:78:19:dc:3a:7f:f4:d0:b5:2c:
7b:c3:fb:b8:48:11:33:38:7e:85:9e:da:89:5e:b5:
d8:2c:ac:db:3b:90:99:70:9a:9f:d3:8b:b9:2d:7c:
16:42:85:8d:0b:4f:5e:3a:c8:aa:53:c0:cb:f4:5b:
d1:f9:ba:4b:8c:87:a9:1d:31:5e:bd:dc:99:fe:0f:
48:db:07:6c:9c:7f:67:19:ef:21:bd:b5:de:84:c4:
0d:1d:42:26:92:e5:54:cb:22:c5:29:bb:8e:8f:6a:
ab:7e:e8:29:3f:60:3f:a2:0d:3c:46:e7:28:2b:9d:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:FA:D0:DC:49:50:47:81:B7:6C:6A:BD:E5:52:3D:0C:7C:35:47
X509v3 Authority Key Identifier:
keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:c8:18:f6:06:c4:47:e7:4e:3c:c3:37:32:75:45:9d:15:0c:
f6:25:13:bc:91:95:b7:b5:35:40:31:3c:5d:17:69:c6:c3:86:
e4:e4:9a:dc:65:d8:dc:56:f8:96:01:4e:0e:e5:50:83:91:0c:
59:c2:49:2a:66:f0:07:dd:ec:b4:ae:51:ad:45:c6:cf:b7:2b:
08:f9:9b:1b:cb:c1:ac:55:b8:31:0f:46:49:84:b8:83:5b:ae:
30:87:a4:2f:3f:1b:60:bf:b5:22:93:b7:23:4c:80:e0:a5:c5:
da:77:a2:02:09:21:34:42:a8:74:78:a7:e7:85:f7:1e:b8:36:
71:cd:8d:cf:31:93:41:f2:2a:8e:e1:39:be:e5:d2:5f:58:18:
aa:7c:12:5a:84:45:59:40:5d:e4:42:8a:31:cd:38:ff:1b:68:
61:5d:54:4e:37:58:3d:a9:1c:48:fb:9f:b2:9a:9b:c0:34:da:
a9:9b:2d:b1:83:18:59:ac:dc:36:d7:11:34:8a:70:53:70:b9:
c6:9a:b0:3f:f5:91:82:cd:91:00:f9:f1:3c:96:a3:cb:a6:5a:
6e:7c:5a:8f:6a:c3:af:d8:63:43:1f:42:da:40:70:04:c2:56:
a0:4d:00:14:32:50:75:cc:2f:2e:11:7f:cd:33:58:03:91:1d:
1d:90:ff:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:47:22 2026 by rpki-client