
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
File: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json)
Hash identifier: yAunScS+08VG8/YQhmMtFhHztnSJfRgr2SPAoJNQ06A=
Subject key identifier: B4:1F:E9:F8:08:7D:DD:01:A4:15:EA:EF:29:B7:27:E3:B5:5C:27:46
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Certificate issuer: /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
Manifest number: 7B
Signing time: Wed 23 Sep 2026 07:35:02 +0000
Manifest this update: Wed 23 Sep 2026 07:35:01 +0000
Manifest next update: Wed 30 Sep 2026 07:35:01 +0000
Files and hashes: 1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: gRgnrM9KNxozAw/C8TvHKNs5Asmr5MUXlDxsx6Aw4CI=)
2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Validity
Not Before: Sep 23 07:35:01 2026 GMT
Not After : Sep 30 07:35:01 2026 GMT
Subject: CN=6ab38126-df54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:cf:e0:60:7e:3e:fc:cb:04:2b:1e:1b:f9:
00:4b:a1:ff:37:b4:72:4a:ae:8d:96:56:24:70:fe:
f8:d4:29:21:af:f5:f0:7c:9a:a8:53:f8:c0:ac:34:
41:16:08:2c:d0:dd:fc:ea:64:b2:70:02:72:9a:7e:
ce:eb:03:c7:b7:6b:7c:e2:36:e2:7f:6b:55:b4:31:
bd:c9:16:a0:7c:8d:62:24:2e:64:07:fb:40:90:2e:
41:31:58:1c:83:ac:1f:54:8e:8f:c8:55:12:69:59:
49:b5:cf:e1:9e:fd:7f:e6:d2:e1:d7:47:a2:30:bc:
63:5b:53:d9:9d:ad:e4:cd:0f:ae:d4:9b:16:e4:6e:
58:67:bf:e4:8e:55:b4:55:59:ed:e3:5a:22:90:32:
3c:65:f7:c6:4b:dc:5a:75:f6:4a:db:c4:ba:f9:55:
be:45:ad:8e:26:35:8f:28:01:78:a9:f5:65:73:73:
76:1d:cb:3c:62:1a:9f:4c:b2:2e:2d:5b:9d:ec:e6:
fd:78:ca:6a:74:7b:a5:1c:f2:9f:b7:e8:b6:a6:9c:
6f:9c:ab:21:e2:1c:ad:e4:81:0c:7d:c4:cc:ec:7e:
30:ad:65:3e:0e:41:14:a8:0c:e0:9e:c8:fa:9a:75:
af:c0:3d:ca:07:0a:ba:d1:a8:7b:42:69:94:a6:cc:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1F:E9:F8:08:7D:DD:01:A4:15:EA:EF:29:B7:27:E3:B5:5C:27:46
X509v3 Authority Key Identifier:
keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:92:43:b7:4f:b3:01:3d:85:6f:f8:99:21:ff:a9:35:a9:5e:
f7:f3:69:68:5d:20:a8:a8:6e:ad:3a:bb:62:2b:68:41:a2:eb:
6d:f5:18:d7:d1:7c:c7:0f:d6:a6:35:fc:e5:84:e1:02:01:a3:
fd:9c:fa:0d:c9:76:0a:ee:fc:48:a0:b0:3e:8a:c6:29:73:4e:
e1:c9:a8:2a:6f:57:94:23:4f:0b:06:77:25:d2:94:6b:53:c3:
b6:c3:a5:9c:03:1d:ce:89:f5:15:38:07:ca:7f:13:f3:c0:38:
5b:d6:36:f4:4e:8e:a9:af:05:1e:3b:51:35:27:a9:1b:f6:a6:
3b:54:09:24:3b:8e:0f:e4:ac:9f:2f:38:7d:8c:9e:3a:bc:15:
7a:01:4c:88:12:b2:4d:0a:be:2e:2a:33:da:5c:77:24:df:48:
bf:fa:c1:0d:f0:b2:71:6a:87:d4:02:46:14:2b:e8:90:8f:e7:
ad:8c:33:38:89:38:b7:f3:54:e5:1e:26:2f:59:47:5d:4b:66:
41:e4:75:c4:85:8b:35:28:fb:32:6f:f9:f0:77:f4:b7:3a:f6:
e6:40:3d:7c:80:4a:47:5f:fd:a4:db:80:d4:76:03:03:8d:fc:
09:a9:50:f5:98:7b:23:c4:16:63:51:1c:6e:c0:45:c0:ee:08:
75:4f:1b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:26:35 2026 by rpki-client