
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier: +W3Ml8SSETNR/vs98gOBQOt6juYSMM1jGqIIWCRYR8Q=
Subject key identifier: 7C:A0:3A:14:78:EB:23:AA:4D:6F:7C:43:10:98:6A:9C:1F:10:75:94
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number: A7
Signing time: Thu 23 Jul 2026 09:07:29 +0000
Manifest this update: Thu 23 Jul 2026 09:07:28 +0000
Manifest next update: Thu 30 Jul 2026 09:07:28 +0000
Files and hashes: 1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: MffyBNM7iaCIUzGKxm1IkYJW9avg72tBwkXAIjAvMuo=)
2: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: HH9ky92fQzGNTYsX0+VQPTLNrW/aQl3+AElKQhw1OdM=)
3: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: eXQMNO4T9SC2XkbTYizwJc2SFGid2A3mIxorvKFCeno=)
4: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: sPIf66/t3nPzaly4TLYXdFQdjV7uJL1S1ZXAusvb7xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Validity
Not Before: Jul 23 09:07:28 2026 GMT
Not After : Jul 30 09:07:28 2026 GMT
Subject: CN=6a61d9d0-d94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:ab:ac:dd:1d:c6:d0:da:e2:09:a2:93:4b:
bd:27:70:94:98:a2:0d:be:19:ea:77:f2:2d:7c:de:
71:6a:b9:94:57:78:05:e8:de:32:2e:82:34:f3:c8:
eb:43:68:57:31:71:0a:e6:75:e6:3b:af:8a:0d:51:
f7:4b:9b:e3:5d:9a:b4:f4:5b:54:65:bb:98:a5:a0:
04:b9:ea:99:4d:99:86:fb:39:fc:5a:99:24:aa:f5:
82:8f:1c:9c:b8:8c:cc:33:8e:c8:9e:c4:54:de:4d:
53:e6:d2:a4:ee:18:75:1a:5a:8f:c3:7d:38:a2:64:
8a:f4:75:f3:83:4c:2a:a6:38:1f:58:79:3f:35:cb:
71:99:84:15:55:e2:64:2a:b7:c4:62:08:dc:4e:95:
00:0f:a4:b2:38:66:f7:8a:c3:0d:69:25:09:82:95:
5e:f6:16:de:19:f1:97:60:e4:4d:28:1a:f4:9c:d7:
48:e1:19:01:b9:a8:6a:df:dd:a4:a1:40:4a:8e:a1:
1d:6d:c0:c7:dc:9c:31:12:b7:e3:80:da:65:9e:37:
f7:81:4c:8f:4e:cb:2b:00:1e:cc:7d:ae:c8:eb:83:
a7:df:c3:16:0a:08:72:33:5d:04:02:d6:2e:6b:5d:
f6:42:70:74:ba:e4:01:58:2e:e0:26:ab:02:90:b3:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A0:3A:14:78:EB:23:AA:4D:6F:7C:43:10:98:6A:9C:1F:10:75:94
X509v3 Authority Key Identifier:
keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:37:f2:41:cd:1e:7a:58:7d:00:22:aa:c1:b4:36:bd:42:22:
0a:cc:a5:b9:85:fc:ba:86:11:b3:cd:d2:f1:8a:fc:50:90:7e:
1c:2d:dc:27:8d:64:a3:6b:89:0c:04:cb:b1:3f:e2:6f:6b:bb:
30:b7:f8:f7:c7:17:ca:a2:8b:db:fe:01:c9:a2:a3:e8:23:5a:
aa:f1:30:c7:a7:78:78:c6:f2:1c:4c:b2:72:b4:9e:44:a6:86:
d1:b0:0b:49:89:e6:59:ee:bd:9e:f8:cf:80:31:24:ce:28:e0:
32:3b:1b:40:3a:bb:76:94:cd:4f:91:ee:3a:79:2b:74:41:00:
b4:f1:a5:d1:6d:4c:84:42:21:10:6a:c9:71:43:cf:ab:6a:16:
48:41:8c:4a:94:65:b6:3d:2b:97:f3:71:44:6d:10:1b:14:87:
24:6b:30:cf:de:7d:15:f2:a6:58:01:5f:e6:12:3f:8b:5e:83:
df:3a:a2:1e:0f:15:2c:49:45:90:ee:42:15:93:73:0d:61:6d:
d1:64:cf:64:89:ee:a0:e5:45:c2:a5:c6:12:5a:8b:86:71:06:
c3:b0:ee:6d:2c:df:7b:21:b9:bd:07:44:75:06:a3:5c:fa:71:
52:4d:92:3c:67:a0:0b:66:49:5c:09:06:28:c1:e1:3a:88:59:
b2:f7:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:20 2026 by rpki-client