
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json)
Hash identifier: LBD2ZUT5wwnADwDmIjj4uYrojf4GrrIQkw8m1V184PU=
Subject key identifier: 08:73:57:CC:A7:F4:F2:92:E9:F0:66:B0:78:27:DC:9A:7B:0B:2F:AE
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
Manifest number: 0124
Signing time: Wed 23 Sep 2026 05:35:21 +0000
Manifest this update: Wed 23 Sep 2026 05:35:21 +0000
Manifest next update: Wed 30 Sep 2026 05:35:21 +0000
Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: a9eR1zQmwk1fJiO48K3mQwH9igKN/ajLlbtB3y1c230=)
2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: gjmWESjalzP1QqYOn23fGwUgWwKzWh8l/34qUOiA6Ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Validity
Not Before: Sep 23 05:35:21 2026 GMT
Not After : Sep 30 05:35:21 2026 GMT
Subject: CN=6ab36519-8a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:a5:17:7f:73:82:27:8a:34:62:01:92:27:
45:b5:dd:f0:78:b1:93:af:a8:84:bf:2c:63:f5:01:
43:a2:47:d7:2c:92:27:7b:ee:e0:72:8d:cf:24:a1:
18:59:67:4e:c9:6c:ab:66:a1:9a:fb:5b:11:86:c6:
33:ac:21:64:b3:af:d7:ad:06:a7:da:55:22:1a:01:
8e:8b:ee:70:e3:b6:82:00:ca:eb:14:51:19:80:0b:
ff:cc:6b:85:c6:a4:49:1b:bd:c9:4a:80:f9:42:1a:
37:28:e3:5b:26:7e:c2:60:6c:0f:e8:1f:79:ba:7f:
0e:16:c8:6f:2d:de:6b:4b:de:65:06:f0:81:a8:37:
e6:1b:50:d9:f7:63:38:c6:08:53:1e:0f:29:0f:67:
d8:e2:f9:11:c1:7f:44:b7:16:ae:08:e9:8e:7a:63:
52:9c:88:aa:c6:2c:c2:a0:50:03:72:52:71:46:2a:
d0:39:2a:ef:90:75:47:74:27:32:91:ba:ff:58:b2:
e1:55:c7:12:06:dc:8e:66:77:cf:bb:f6:1f:da:1b:
80:2b:8d:6a:3a:13:d8:a0:30:e4:9c:d7:3d:51:06:
c0:68:3b:46:88:37:e2:ad:c0:62:72:7b:f8:c6:0d:
f2:8f:b8:c0:85:5a:17:f3:35:3a:fe:8c:1f:f9:19:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:57:CC:A7:F4:F2:92:E9:F0:66:B0:78:27:DC:9A:7B:0B:2F:AE
X509v3 Authority Key Identifier:
keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:5c:92:e8:75:a5:10:65:da:90:2c:0f:7d:d6:44:73:72:d6:
bb:f0:2d:2a:ec:02:25:27:42:d6:e8:f6:44:a1:2f:43:e4:44:
a8:bd:f8:c2:fe:90:65:3b:c2:45:34:f4:a1:a7:8a:95:34:9f:
57:a8:db:cb:0f:c2:32:42:fd:97:5e:a4:6f:e1:4b:5a:73:3d:
4c:77:20:0b:76:a2:c7:af:e1:c4:d5:20:94:3f:b0:fb:c5:88:
e1:78:49:9a:d3:41:0d:fc:ce:10:1a:57:40:a6:d2:e8:c5:26:
b6:ad:4e:24:51:a8:0a:39:6d:f8:fb:e5:2e:28:04:e7:bc:d8:
33:ad:0e:1f:9e:61:b9:d7:d1:e0:15:5d:45:cd:e9:c4:68:95:
5d:96:79:0e:af:37:ae:d1:81:0f:0c:7c:c5:72:b6:35:db:48:
0e:45:fa:09:00:fd:1b:d8:74:d7:e6:45:75:8f:8d:90:15:8f:
d1:a5:73:0b:5f:9b:ec:6e:d7:c7:0e:da:77:c7:b0:c0:8d:79:
58:4d:e2:16:ce:c3:41:9b:08:e7:f1:2a:d7:db:bf:43:13:bb:
be:8d:c3:28:91:05:e6:ec:0b:eb:83:df:95:86:ba:26:91:50:
4a:47:a9:d4:31:c1:e4:84:30:4d:7c:12:b9:14:09:af:1d:e8:
3e:56:d0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:20:54 2026 by rpki-client