
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.mft
File: C4zb4QaNRa7HNM5wBquUwKTEoME.mft (raw, json)
Hash identifier: 6FlQ4KftsvdzQPiUqKMEPmPZvmaq7cjovk+yuRZM04M=
Subject key identifier: 7F:F9:1A:01:30:73:80:03:F1:C2:BB:83:86:6C:30:E9:30:BF:D9:B3
Authority key identifier: 0B:8C:DB:E1:06:8D:45:AE:C7:34:CE:70:06:AB:94:C0:A4:C4:A0:C1
Certificate issuer: /CN=A9178F3F/serialNumber=0B8CDBE1068D45AEC734CE7006AB94C0A4C4A0C1
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4zb4QaNRa7HNM5wBquUwKTEoME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.mft
Manifest number: 07
Signing time: Thu 23 Jul 2026 11:17:35 +0000
Manifest this update: Thu 23 Jul 2026 11:17:34 +0000
Manifest next update: Thu 30 Jul 2026 11:17:34 +0000
Files and hashes: 1: C4zb4QaNRa7HNM5wBquUwKTEoME.crl (hash: i30th2Qjv8b50jXfbkOSieEqbfg1IpS7XDK+3eHyRCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.crl
rsync://rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4zb4QaNRa7HNM5wBquUwKTEoME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178F3F, serialNumber=0B8CDBE1068D45AEC734CE7006AB94C0A4C4A0C1
Validity
Not Before: Jul 23 11:17:34 2026 GMT
Not After : Jul 30 11:17:34 2026 GMT
Subject: CN=6a61f84f-76de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:aa:1a:cd:99:36:dd:6f:08:8f:2e:11:da:
a9:7f:52:47:d7:49:a4:7a:da:10:8e:e5:bb:bd:fd:
00:4f:5d:43:49:4a:6f:f1:0a:b1:4b:3f:38:35:30:
58:a7:58:0f:4c:42:06:e3:4b:f5:40:c6:89:11:74:
0d:7d:21:cf:ee:af:b5:bf:9c:6a:ed:01:13:e1:77:
b2:b6:0c:f0:72:e4:9e:5f:23:d0:b0:d4:48:39:b7:
c4:12:19:8e:6c:f5:c8:ca:94:38:09:f6:dd:af:e1:
77:da:af:e1:04:09:01:53:37:c0:e0:b1:38:c3:48:
bd:53:b1:4a:49:7d:1a:fb:60:f5:63:59:d4:7a:c3:
7e:f5:4c:3c:79:cc:45:62:63:a2:ae:f9:65:c6:bc:
70:18:7d:b6:c0:06:f1:05:80:7c:ae:00:c0:05:98:
03:5c:89:26:85:19:03:5a:89:d0:3f:e3:b4:6f:dc:
e9:78:b7:94:f2:f6:62:42:a1:f5:dd:89:7e:29:67:
37:74:86:ac:16:7b:d9:5a:d0:99:60:16:4d:ce:64:
18:65:37:2e:45:23:0e:cb:9a:be:ee:c7:6a:f8:8e:
67:b6:a7:39:7e:38:6e:04:0f:21:01:b1:5d:eb:0a:
07:bc:88:a3:4a:7f:ab:f7:a2:10:e7:f5:04:3c:d2:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F9:1A:01:30:73:80:03:F1:C2:BB:83:86:6C:30:E9:30:BF:D9:B3
X509v3 Authority Key Identifier:
keyid:0B:8C:DB:E1:06:8D:45:AE:C7:34:CE:70:06:AB:94:C0:A4:C4:A0:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4zb4QaNRa7HNM5wBquUwKTEoME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F3F/51E478027F4611F19147BB5D95A30FBC/C4zb4QaNRa7HNM5wBquUwKTEoME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5b:64:a7:bf:e9:0c:c2:cd:b9:61:c8:3f:e5:60:dd:bd:f5:
8e:27:0d:9b:3d:39:86:bd:de:e3:36:b8:bc:5a:d6:a7:b8:8b:
2e:79:2a:64:0d:bb:18:86:94:b9:1c:33:da:c1:0a:ba:a1:75:
ba:6d:65:43:92:87:8d:83:de:8e:2f:38:22:44:2b:13:b8:d9:
cf:23:8d:57:51:1e:f7:f1:61:d2:b6:1b:07:5a:9a:1e:29:b5:
7f:26:11:94:e7:47:60:3e:c6:e0:0d:13:7d:ff:af:ef:87:b9:
79:af:b2:86:c9:23:74:f3:25:a4:4b:38:1c:ad:66:d4:82:94:
09:c8:45:39:55:34:10:4c:ef:c2:ac:12:77:da:e9:81:e0:e7:
0f:c1:c5:8e:b2:60:47:42:3c:d5:2a:14:9f:be:dd:e8:d1:68:
5c:73:b3:db:89:64:cb:36:d1:2e:f5:aa:1a:42:16:b5:15:ac:
02:ba:89:e0:39:80:87:b7:de:12:5d:f3:07:6d:59:bb:f5:34:
6f:f2:e4:b8:2d:87:a2:c3:3f:83:9d:b5:68:51:e2:e3:50:a8:
cd:58:77:5c:50:83:1e:a6:6a:d7:1b:e7:ca:4a:07:ef:3f:0c:
57:e0:61:0f:a2:90:de:44:8c:5c:5d:bc:8c:6b:0c:c8:0c:7c:
b6:12:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:44 2026 by rpki-client