
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json)
Hash identifier: +m6BI61VZEBql7/04SDgz0FlM6AgiWSQKGaJeFCWfUU=
Subject key identifier: 31:64:20:B2:0F:53:ED:09:46:51:34:A9:A3:FE:C4:13:96:7C:2A:71
Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
Manifest number: 0210
Signing time: Thu 23 Jul 2026 04:13:33 +0000
Manifest this update: Thu 23 Jul 2026 04:13:32 +0000
Manifest next update: Thu 30 Jul 2026 04:13:32 +0000
Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: H25YlFrxCE3EFVNCAk4WPauXLJkYyIsG3Kkcd+CfXos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Validity
Not Before: Jul 23 04:13:32 2026 GMT
Not After : Jul 30 04:13:32 2026 GMT
Subject: CN=6a6194ec-167c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:78:44:e5:ee:35:5c:7a:72:44:b6:3d:fd:
4e:e2:c2:65:b6:37:6f:f1:db:fd:73:8a:ef:17:7d:
15:d9:ba:d6:7a:ad:fd:ea:34:6f:9a:b1:b4:4c:37:
4f:25:fe:ff:17:de:fd:e5:f0:38:7d:31:6e:21:b4:
da:e3:3e:e8:10:94:76:03:f0:32:98:f5:d6:72:95:
e3:b4:62:30:0f:ed:48:25:1f:71:44:d5:78:fa:b8:
98:46:ab:d6:db:a9:7d:11:cb:40:27:59:70:22:a9:
1b:b0:2d:c7:5f:9c:7b:44:8b:1a:a7:6e:4c:31:63:
0a:88:f1:9b:62:1b:2e:04:74:5c:11:21:e8:98:cb:
65:77:14:02:6a:04:d2:ed:cb:3a:94:ad:e1:aa:20:
42:37:39:8b:5e:cd:cb:2e:10:7b:73:6b:28:f8:02:
94:38:9c:ab:5f:67:e1:27:d7:b2:b7:31:02:99:df:
d5:38:39:21:5f:dd:d2:b6:db:17:fc:2c:c2:81:95:
4f:42:bd:99:9a:67:3f:fc:b2:ce:81:52:77:3a:57:
fc:96:42:7f:ab:df:ac:9a:ff:0d:9a:7b:bd:09:fa:
b6:75:ff:e2:09:1e:82:b7:81:8d:25:51:3c:d5:8a:
96:3e:60:a0:cd:ea:b8:6a:c5:69:c5:c2:77:0d:05:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:64:20:B2:0F:53:ED:09:46:51:34:A9:A3:FE:C4:13:96:7C:2A:71
X509v3 Authority Key Identifier:
keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d1:67:aa:c6:97:f4:7a:c7:7f:6e:5e:ec:e0:22:29:ff:9f:
56:53:b8:d3:f1:3d:1a:91:f0:16:6a:bb:ef:16:d2:45:f9:ae:
3d:79:13:b4:db:6e:54:8e:f3:95:8b:b6:c9:f3:7f:ff:e0:46:
a0:43:50:3a:29:db:36:a8:be:95:3d:17:b9:36:de:96:c3:6b:
2b:fa:65:dd:e8:6f:a3:ea:61:3a:c1:89:5e:55:79:65:69:cf:
18:7c:83:ca:2a:37:9c:30:0a:b4:49:2f:3c:0c:91:e1:63:f3:
6f:02:ec:16:4c:93:31:71:7f:13:0b:61:15:fa:01:59:e3:0f:
98:82:9a:74:a3:66:a5:9d:f9:f1:90:62:8f:dd:f4:b9:be:b1:
19:39:f1:e6:80:43:cf:2b:d3:91:7c:38:d9:c9:6d:37:f5:f1:
b4:1b:69:d1:68:94:7f:e5:cd:6f:38:f6:89:c6:3d:5e:6b:37:
c9:06:6a:4e:97:20:7e:89:af:f5:7d:64:ca:aa:62:e5:2f:0a:
aa:42:0b:cc:2e:3f:68:a1:cc:0a:31:76:53:9a:f7:17:84:f9:
51:35:e0:27:ae:51:36:24:f0:45:19:a7:7c:20:50:95:44:21:
e9:f3:18:6f:ac:8c:9a:2f:40:63:45:37:60:95:10:af:75:2e:
44:a7:2b:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB
MEVCRDdENEIwHhcNMjYwNzIzMDQxMzMyWhcNMjYwNzMwMDQxMzMyWjAYMRYwFAYD
VQQDEw02YTYxOTRlYy0xNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAntt4ROXuNVx6ckS2Pf1O4sJltjdv8dv9c4rvF30V2brWeq396jRvmrG0TDdP
Jf7/F9795fA4fTFuIbTa4z7oEJR2A/AymPXWcpXjtGIwD+1IJR9xRNV4+riYRqvW
26l9EctAJ1lwIqkbsC3HX5x7RIsap25MMWMKiPGbYhsuBHRcESHomMtldxQCagTS
7cs6lK3hqiBCNzmLXs3LLhB7c2so+AKUOJyrX2fhJ9eytzECmd/VODkhX93SttsX
/CzCgZVPQr2Zmmc//LLOgVJ3Olf8lkJ/q9+smv8Nmnu9Cfq2df/iCR6Ct4GNJVE8
1YqWPmCgzeq4asVpxcJ3DQW65QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFkILIP
U+0JRlE0qaP+xBOWfCpxMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD
NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ
VU44Tnl5MG5hV3VnNjlmVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnNFnqsaX9HrHf25e7OAiKf+fVlO40/E9GpHwFmq77xbSRfmuPXkTtNtuVI7z
lYu2yfN//+BGoENQOinbNqi+lT0XuTbelsNrK/pl3ehvo+phOsGJXlV5ZWnPGHyD
yio3nDAKtEkvPAyR4WPzbwLsFkyTMXF/EwthFfoBWeMPmIKadKNmpZ358ZBij930
ub6xGTnx5oBDzyvTkXw42cltN/XxtBtp0WiUf+XNbzj2icY9Xms3yQZqTpcgfomv
9X1kyqpi5S8KqkILzC4/aKHMCjF2U5r3F4T5UTXgJ65RNiTwRRmnfCBQlUQh6fMY
b6yMmi9AY0U3YJUQr3UuRKcr+w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:52:48 2026 by rpki-client