
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
File: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json)
Hash identifier: mi5pt/PtqiLH9b0CRl6lVNdNs4Zk56yx+g8cQhOThdw=
Subject key identifier: BF:95:2A:48:84:AD:AD:D3:4C:9B:8D:8B:70:A1:CA:58:CE:11:5E:46
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Certificate issuer: /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
Manifest number: 37
Signing time: Mon 11 May 2026 08:50:02 +0000
Manifest this update: Mon 11 May 2026 08:50:02 +0000
Manifest next update: Mon 18 May 2026 08:50:02 +0000
Files and hashes: 1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: mjfmg/L4NvcLkgmeChdvQNdlNdYrNN3OBOKWLPoSYIc=)
2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Validity
Not Before: May 11 08:50:02 2026 GMT
Not After : May 18 08:50:02 2026 GMT
Subject: CN=6a01983a-f8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:7b:e6:fb:b6:b5:32:9a:6b:ae:77:f3:5e:
c5:1e:8a:8b:ca:59:4b:68:2b:56:1f:ff:b5:88:51:
82:d5:eb:da:5d:b4:56:3b:92:01:07:a2:37:bb:6c:
0c:ed:2d:ee:1c:c4:2f:11:f6:92:55:6e:49:35:5e:
39:1c:06:b6:7c:c4:e6:96:20:7b:34:6a:bd:42:f3:
8b:17:f1:98:a6:72:7c:09:ed:4a:0c:ee:cc:37:d4:
af:ea:6e:41:99:f0:78:aa:75:63:a9:99:61:20:64:
5a:59:7a:9a:96:08:48:ac:40:d3:4d:27:33:71:91:
dc:6f:ec:d5:87:6f:43:68:71:d9:1a:fe:cb:16:b0:
8b:4a:82:05:56:f1:cf:4c:37:84:02:2b:07:4a:96:
45:e2:7a:af:9e:68:55:a9:f2:7c:37:00:44:d0:13:
4b:c5:3d:7d:e5:a2:02:1e:04:fa:50:37:bc:a7:b3:
ae:c4:bd:07:b7:e3:7d:09:d4:5c:b2:81:f5:6a:5f:
0d:dc:45:89:fc:67:41:76:b4:50:79:6b:a6:df:b8:
41:9a:a2:40:d3:be:e0:c4:91:35:79:1a:9f:5e:62:
72:d4:0d:64:43:04:7d:94:23:2b:b8:02:52:be:46:
14:f5:f5:2f:85:eb:93:dd:7f:f5:8f:13:69:3d:71:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:2A:48:84:AD:AD:D3:4C:9B:8D:8B:70:A1:CA:58:CE:11:5E:46
X509v3 Authority Key Identifier:
keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:61:24:a5:af:1b:d9:a8:93:a5:3f:a5:45:76:50:b4:6a:f8:
6e:a7:fb:2a:e8:9b:51:c5:03:b3:84:c2:9f:72:e9:0d:7e:6e:
d3:8c:c5:f5:58:9a:4c:82:24:e7:67:3b:b2:b5:72:c3:92:b0:
57:c0:a3:c9:9c:a3:9f:fa:cc:46:0b:72:cd:6b:d1:92:85:8e:
a2:60:70:3a:e9:98:86:74:a2:2e:f8:da:f6:d9:c1:3e:a9:7d:
e9:0d:79:13:1d:1c:36:85:2d:4b:ae:30:5f:34:ba:61:0d:fe:
93:96:87:f2:5b:6b:96:7d:9d:80:25:37:35:1e:4b:04:1c:3a:
aa:f7:45:ec:66:a2:de:7e:4d:ac:15:8e:ec:17:7f:c1:48:50:
b3:c0:6a:c2:a0:eb:bb:b9:31:00:f8:95:99:d8:eb:2d:01:52:
ab:6c:01:3d:22:99:01:48:20:a6:54:44:7a:97:79:a8:49:49:
94:4b:07:98:b6:8c:d1:a1:47:68:ee:9b:31:40:fa:d7:0c:32:
79:2a:2e:98:84:b1:8f:5d:b6:ae:9e:33:4d:15:c3:04:a8:90:
ca:2b:a2:0f:d9:17:96:9f:90:83:ec:fb:84:99:b4:05:00:4a:
5f:97:2d:84:03:63:bd:4a:34:e4:bb:43:94:c7:ad:4d:88:f8:
34:ca:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:15 2026 by rpki-client