
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
File: 7BWoR694TfECWIIbq5lKyCA1ld8.mft (raw, json)
Hash identifier: 4o81E+0nwjrpsEEh8TAdto6Oe8kBkA2s62W6+I98kAc=
Subject key identifier: D1:27:68:E6:F0:A0:BD:2D:0D:1D:EF:57:91:E6:AF:56:EF:DD:1D:A6
Authority key identifier: EC:15:A8:47:AF:78:4D:F1:02:58:82:1B:AB:99:4A:C8:20:35:95:DF
Certificate issuer: /CN=A917B218/serialNumber=EC15A847AF784DF10258821BAB994AC8203595DF
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
Manifest number: 77
Signing time: Fri 25 Sep 2026 08:00:19 +0000
Manifest this update: Fri 25 Sep 2026 08:00:18 +0000
Manifest next update: Fri 02 Oct 2026 08:00:18 +0000
Files and hashes: 1: 7BWoR694TfECWIIbq5lKyCA1ld8.crl (hash: mQc4jxKABMjOzTBlyOFZr/YIotKXpvB9b4XXXuu9ExE=)
2: 0ADA2358606511F1B2EB18476447A888.roa (hash: CLI1Bc70GNr1M6sLi1g14vwbCgYMCVC3xxYYksxjaGU=)
3: D2DAE050606411F18D93D7436447A888.roa (hash: p8bynTpUtraazzZ/QKRgqMb6jcWdyLWfJk6eYm7MHMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.crl
rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B218, serialNumber=EC15A847AF784DF10258821BAB994AC8203595DF
Validity
Not Before: Sep 25 08:00:18 2026 GMT
Not After : Oct 2 08:00:18 2026 GMT
Subject: CN=6ab62a13-7d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:57:f9:05:1d:28:d9:ac:d6:19:14:60:6b:
ff:fe:83:62:78:4c:36:eb:84:0f:a4:8d:2f:58:80:
48:12:85:13:83:35:8d:bd:e0:9a:10:01:4c:17:86:
89:29:da:1f:09:d1:b2:9a:7b:36:0b:b7:ef:7d:c9:
9e:86:5f:a0:df:79:fe:aa:b5:a5:34:f7:76:42:73:
36:16:f1:79:76:d2:9a:0c:90:bd:1f:06:d8:18:75:
4f:5a:91:5b:e4:da:68:6d:7c:02:6e:7a:6a:08:57:
de:b0:df:87:49:8f:34:f8:6e:3a:c1:cf:ca:fe:ef:
c1:6b:ba:41:7f:d0:1b:a8:ce:ee:b9:38:b5:e8:cb:
af:16:fd:90:36:4f:31:9d:5d:be:55:64:a3:b1:6d:
cf:e3:a3:51:ef:da:fa:f6:e5:44:8c:94:36:e4:cf:
26:f7:8d:b8:4e:d6:fd:c9:3a:72:3b:80:a6:18:d6:
3b:bf:f1:38:19:59:90:22:32:77:19:52:6d:a6:39:
53:b6:f6:8f:83:9a:fc:8b:ab:c9:19:ab:75:66:98:
86:6f:99:9c:e2:eb:3b:60:39:5d:fe:40:d9:00:25:
ed:82:4d:a5:20:64:ae:ff:80:39:96:0c:c2:89:98:
e5:92:a1:1f:65:d9:2a:70:b7:56:f1:cd:03:28:35:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:27:68:E6:F0:A0:BD:2D:0D:1D:EF:57:91:E6:AF:56:EF:DD:1D:A6
X509v3 Authority Key Identifier:
keyid:EC:15:A8:47:AF:78:4D:F1:02:58:82:1B:AB:99:4A:C8:20:35:95:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7BWoR694TfECWIIbq5lKyCA1ld8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B218/6BE6C7000DF411F1A7584300043D8C67/7BWoR694TfECWIIbq5lKyCA1ld8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:cc:24:eb:d1:c6:a0:6a:17:c7:48:b3:d1:ee:2a:77:9b:9a:
e3:5c:ce:57:0a:49:a7:66:96:af:38:bf:e9:e0:ed:26:58:83:
6a:37:88:23:d3:5f:2b:e8:45:ff:e4:e7:39:d8:f1:40:2a:98:
d5:c2:b1:b5:55:5b:9f:dd:0e:50:16:05:ed:10:da:14:44:67:
86:fe:0a:a7:2f:62:eb:cc:c6:16:15:39:3d:08:b7:b5:bd:09:
d5:fa:a2:3e:fe:7e:51:60:0f:43:0b:be:1e:9d:00:ec:44:43:
59:87:5a:55:a8:8a:aa:ca:9c:73:d3:15:22:f4:ad:18:4a:6e:
e3:cd:70:19:9a:e3:81:2a:02:c6:30:54:69:2a:7f:cf:a8:bc:
ba:a0:6d:85:a4:82:5a:e2:38:a9:db:18:d6:d9:40:4b:f4:76:
aa:71:51:b1:23:91:5c:fe:bb:22:53:67:23:c4:fc:2f:66:30:
b2:d8:28:45:e7:74:98:40:50:50:f1:44:53:68:41:3c:7f:88:
72:2f:a0:70:e4:06:c2:e6:10:31:d6:f7:d6:23:84:ae:e6:22:
95:db:5c:66:68:c2:be:12:e6:1c:82:ec:59:23:48:f2:69:f8:
98:c0:69:97:f1:bb:c4:59:a6:8e:d6:63:db:67:5c:f2:c5:3f:
97:da:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:58:01 2026 by rpki-client