
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json)
Hash identifier: +tWj+g3P7P7xIu92bm15/asuhJQVwIr/HkQOCNcldaU=
Subject key identifier: E9:E9:C2:40:B9:96:94:B8:EF:EE:28:18:62:F8:CE:FF:5C:2A:89:B8
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial: 1AC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
Manifest number: 1A8F
Signing time: Tue 22 Sep 2026 16:15:36 +0000
Manifest this update: Tue 22 Sep 2026 16:15:35 +0000
Manifest next update: Tue 29 Sep 2026 16:15:35 +0000
Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: DpJweFOuv3OIoWaaPRWq8IsvBnRvwjqLK68QkIO5Rm0=)
2: oE5Js6fuq9GoJiD5YEoKTn7lWD8.asa (hash: XOfYdUr0l2VrVLv76J2LlNBLB7DRmoLstUjCzoxLsnY=)
3: CBBF13566EA911F1979A4FB45FA30FBC.roa (hash: InjAFjFfD9Kqc+Wu+wt8coAIdhYTvUAL4QI7Q5j856I=)
4: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: +4dDlburVO2MmfNARrkvQtCk1fegQCkSHo+kZlpjT9U=)
5: 545743246D1911E7A4448D81C4F9AE02.roa (hash: aF9bVVw6Gwu2L83wIJh2aO8mDQcLr1IwMLw9hro7LqM=)
6: DCD75050315011F0BC916269C4F9AE02.roa (hash: it0EUJuF/f2xwJeSJJN9QRAuHCVD+ovbX5Fq/ZrMmKg=)
7: 361BDEB6315011F0A08FB267C4F9AE02.roa (hash: hQaqyHy+IglmfnIs2mH5KDdafmYlJZXnRBxvCuoPjT4=)
8: apb7pbLzTh2padrozWKikjQdy4Q.asa (hash: j3Yhkh9MeeMK19J3d4fQ/WfPoNUH53OkQJ4FYlVEwwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6850 (0x1ac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Validity
Not Before: Sep 22 16:15:35 2026 GMT
Not After : Sep 29 16:15:35 2026 GMT
Subject: CN=6ab2a9a7-cb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:7d:84:fe:0f:56:9f:05:ec:5a:81:2f:84:
83:31:9d:69:08:6f:8f:5e:59:9c:d4:43:8e:22:ce:
4b:21:bb:8b:12:c8:c4:47:d1:8e:d9:46:04:db:1b:
b3:53:2f:11:a0:e7:e6:dc:2d:00:6f:b1:a3:0d:f9:
14:c2:69:fb:04:37:13:77:5e:d9:14:ff:d2:30:6a:
df:af:59:d3:a4:ae:e4:fb:65:3d:09:d3:9c:6b:49:
f3:f3:99:b5:1c:5b:5a:5a:9f:80:b6:95:b3:9b:dd:
20:8f:3d:a0:f3:bd:c3:dc:25:78:d4:28:b1:d9:4e:
a0:87:b6:d6:55:25:d3:92:10:e8:c0:88:fe:95:82:
ca:00:51:dc:6a:03:e9:94:02:91:21:6a:97:d5:d7:
62:fb:a3:7e:94:8c:af:4b:f9:32:ff:1f:90:ca:c7:
07:8b:1f:18:7f:dc:88:ce:35:53:99:49:0b:dd:94:
e4:b2:0e:96:1b:d0:22:8b:4f:1d:6c:76:1c:49:70:
cb:7c:28:96:93:fb:2a:d2:bd:0f:60:4f:ab:08:db:
08:ea:68:b3:49:37:74:d3:14:12:13:c4:29:1a:d9:
74:8d:cb:7a:7d:78:76:65:27:d5:f0:ec:70:06:73:
e2:81:4b:a8:82:b7:f5:d2:d0:fd:2e:85:f8:09:7e:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E9:C2:40:B9:96:94:B8:EF:EE:28:18:62:F8:CE:FF:5C:2A:89:B8
X509v3 Authority Key Identifier:
keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:7a:6f:75:68:66:d3:51:4b:c4:01:05:7e:4c:b0:de:39:bf:
ad:64:58:28:e4:c6:c0:1b:0c:ef:2c:b9:47:60:8b:7a:3f:65:
7d:ea:e0:f0:65:b4:ba:b1:6a:95:69:9e:a1:8d:cd:02:5b:7b:
98:00:a3:34:91:7a:b5:4c:b5:c7:16:55:88:78:8c:0c:10:ca:
f8:b7:5f:0e:83:f6:f5:93:3f:e5:79:b7:15:b6:3a:7d:42:3d:
b5:e3:ef:ed:67:b8:cc:4f:38:ff:58:a4:f2:6e:18:07:87:8f:
e3:40:de:8e:11:23:5d:86:0e:34:fc:98:b5:f4:e1:da:65:d2:
e7:b9:0d:a6:cf:60:61:13:02:2f:07:bb:ae:10:da:31:97:32:
78:2c:90:a5:2b:6b:da:e9:bf:06:8b:1e:8a:96:a1:32:93:85:
f0:bb:ee:3b:a4:fc:ae:6e:34:6d:a9:a1:73:82:5a:1b:eb:33:
3e:e8:21:23:cc:ba:d9:6a:e5:e3:3d:42:29:0a:2b:b6:54:e2:
5c:ba:30:03:84:7b:4b:28:a5:f5:17:e2:d7:be:62:23:68:e2:
f4:ae:7e:38:75:59:6f:7b:e0:35:e7:9c:8e:61:59:db:a1:1e:
b2:09:c1:44:c7:a5:f2:73:06:ab:ae:1d:03:5f:8d:f4:33:c0:
db:d0:58:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2
REI3RTZDRTUwHhcNMjYwOTIyMTYxNTM1WhcNMjYwOTI5MTYxNTM1WjAYMRYwFAYD
VQQDEw02YWIyYTlhNy1jYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGp9hP4PVp8F7FqBL4SDMZ1pCG+PXlmc1EOOIs5LIbuLEsjER9GO2UYE2xuz
Uy8RoOfm3C0Ab7GjDfkUwmn7BDcTd17ZFP/SMGrfr1nTpK7k+2U9CdOca0nz85m1
HFtaWp+AtpWzm90gjz2g873D3CV41Cix2U6gh7bWVSXTkhDowIj+lYLKAFHcagPp
lAKRIWqX1ddi+6N+lIyvS/ky/x+QyscHix8Yf9yIzjVTmUkL3ZTksg6WG9Aii08d
bHYcSXDLfCiWk/sq0r0PYE+rCNsI6mizSTd00xQSE8QpGtl0jct6fXh2ZSfV8Oxw
BnPigUuogrf10tD9LoX4CX4uNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOnpwkC5
lpS47+4oGGL4zv9cKom4MB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE
MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhx
ODlHdlhHcThBeHB0dC1iT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM3pvdWhm01FLxAEFfkyw3jm/rWRYKOTGwBsM7yy5R2CLej9lferg8GW0urFq
lWmeoY3NAlt7mACjNJF6tUy1xxZViHiMDBDK+LdfDoP29ZM/5Xm3FbY6fUI9tePv
7We4zE84/1ik8m4YB4eP40DejhEjXYYONPyYtfTh2mXS57kNps9gYRMCLwe7rhDa
MZcyeCyQpStr2um/BoseipahMpOF8LvuO6T8rm40bamhc4JaG+szPughI8y62Wrl
4z1CKQortlTiXLowA4R7Syil9Rfi175iI2ji9K5+OHVZb3vgNeecjmFZ26EesgnB
RMel8nMGq64dA1+N9DPA29BYSA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:16 2026 by rpki-client