
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
File: 7DaNWC4Rd-CZFeM_RO253k7zLFI.mft (raw, json)
Hash identifier: Mro28m4h6U5rvscb1sePqJIs5vx/oTeG3+tcDQ7RlvM=
Subject key identifier: DC:6D:80:3C:2C:6F:81:AE:C0:D2:AF:A8:53:1D:9C:EF:60:BD:9D:DD
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
Manifest number: B5
Signing time: Fri 25 Sep 2026 02:36:20 +0000
Manifest this update: Fri 25 Sep 2026 02:36:20 +0000
Manifest next update: Fri 02 Oct 2026 02:36:20 +0000
Files and hashes: 1: 7DaNWC4Rd-CZFeM_RO253k7zLFI.crl (hash: i1IlZguhHGSptrRPBFbdFrja8Z5zHOfRFZ6kLDoKVw8=)
2: 80564398B1B211F1B4449AB83511F970.roa (hash: x/24CC0yQGbvq8aHndmNJthTWBGKcSvL3FZJJTDE4fo=)
3: E4B8817A55BE11F19755025CA4833773.roa (hash: lYZjp9y0uXPEjcsK1iwiSC48vETuScT4C1ciPdaoKFM=)
4: 34705B9E59E211F1AE176CAE90833773.roa (hash: Y4FSjq6NpDU11XP5lRGViEc77fMM4dZ5RI+rwrWvqxw=)
5: 7BBEA23A81E211F18448C63773A30FBC.roa (hash: /S3reswQRe6QG2XFQIdmnPWz87DvWwN0Mt9l8y+jje4=)
6: 60D65D4E85A911F18503AAE15BA30FBC.roa (hash: knaW+lZw0fbnWRCsePO7EIeENsLvn4xCIFMtjXiYkn0=)
7: 2A8233E263E611F189F5BA418947A888.roa (hash: azSrx6uMgRU5WHByqSOBhufThnSRIw5W/2jqteEi26M=)
8: B872988654D711F1992D5F9296833773.roa (hash: JmWCmjScL98jwceDIWgE8shLzdIK5PAxIEq2d4FVTwI=)
9: 02CB9F9C829E11F185008F026AA30FBC.roa (hash: yha/Pvgltg13jTcaFGt6OfhkmQpW0p7X2QJweaAkVzI=)
10: 0CDEC76081E111F185BF86D772A30FBC.roa (hash: x39GQ3gTAp/T/smhd+Smfk3463f1DYz+REEZ4/JfSXM=)
11: 7ABEE1BA81E211F18448C63773A30FBC.roa (hash: vfHOYbedB2VpffqaIE+vsrAkKNRDh3wfSNls3RNvcdc=)
12: 3BA04952917211F1BE52DB413211F970.roa (hash: +gb3EDnRD3BYMDVwvi+JKbfHlJxgaqgckTYklt3ICqc=)
13: ECB1A1FE6AD611F18604C9006D47A888.roa (hash: F0MWXRwD7Kz/vbHgeno+BpH0Wa8YmbRWbL2tGb+tjtY=)
14: EDDEC9126AD611F18604C9006D47A888.roa (hash: mBul9qpd2CYOy9BKWwISAskLqehY5JRGwesEaHqvaxI=)
15: EF3ECA506AD611F18604C9006D47A888.roa (hash: so//akVTuloNjw0DdnqKuDj1WK/tdfuvQw0ikJkgWZs=)
16: 638F236875B911F1A660E8B862A30FBC.roa (hash: xUafc8hEI9Q4I/ZYsBx9iGCwWmw+VUeCk9JbLGFv2RI=)
17: 89C7E3A255B211F1AB301B6C9D833773.roa (hash: Ud57u/4onU2ULb6FSQyiz03UKna0ah+jPo8qNli4+h4=)
18: EB30BEDC6AD611F18604C9006D47A888.roa (hash: s0vWyt4y+sMskcjLO0YoqbccAPSUv+jsSFGPbEhNh34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Sep 25 02:36:20 2026 GMT
Not After : Oct 2 02:36:20 2026 GMT
Subject: CN=6ab5de24-d84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:78:db:2d:2e:95:01:66:22:44:85:cb:b5:
43:4f:44:ad:05:ac:44:42:cc:0d:56:d0:03:1c:56:
46:60:e5:64:b5:66:3d:eb:34:ba:1a:ff:56:ac:6c:
c4:94:cd:62:d6:c8:ec:35:fa:4b:8e:a2:25:c1:50:
78:10:af:f3:b0:ec:ae:f3:34:d8:f0:5a:14:4e:ef:
88:d2:cd:26:5e:7c:0e:a4:ff:72:1c:be:7a:2d:f2:
af:fa:d6:49:8c:39:63:37:61:6e:f1:f5:48:79:f9:
60:0a:cd:7a:6f:2a:ca:c6:2b:f5:1e:eb:b9:54:fb:
3c:ad:4c:8f:fd:11:5b:3e:da:51:af:3b:f3:51:2f:
2e:35:06:22:05:cf:e6:11:28:08:ed:da:d5:35:fc:
8b:ea:6e:80:74:a2:f3:ef:bd:50:33:50:76:af:6c:
37:bd:26:26:05:78:0c:24:11:6f:ca:47:cb:a0:12:
ef:67:b9:a7:22:86:6f:9e:e1:d5:7c:8a:23:8a:22:
c1:bb:8e:4f:32:84:bb:e8:d1:b0:84:21:b6:28:37:
6a:52:a9:c4:16:50:a1:57:85:b3:4c:86:a0:c1:8f:
11:9e:99:8e:73:89:3a:32:8b:be:a6:c9:86:05:44:
2c:7d:02:e1:ec:d7:9f:f5:65:c1:7e:d5:fa:03:36:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6D:80:3C:2C:6F:81:AE:C0:D2:AF:A8:53:1D:9C:EF:60:BD:9D:DD
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:ce:8b:37:61:83:bc:1e:7a:6b:48:b5:55:6c:a4:4b:e6:
28:bb:40:b0:a4:f5:ea:d6:eb:2d:f9:3a:2d:69:db:4d:85:e7:
94:61:74:57:11:a7:6f:29:d5:2b:bc:a5:fb:db:c4:48:64:0a:
cd:8d:8e:9e:2f:c7:84:6b:9e:0f:f0:73:0c:b7:50:91:c1:e9:
60:89:a5:45:aa:47:e5:e1:26:5b:b6:be:8e:b6:e4:77:4c:1a:
be:2f:2e:fe:54:67:e3:08:62:d0:93:73:a4:2f:31:cf:f9:a5:
6c:00:94:81:dc:c3:5a:d2:59:ce:4f:c0:a2:f3:0d:52:7c:59:
d3:b7:94:e5:35:7f:75:d7:3e:55:f7:ec:a6:9a:53:4d:dd:dc:
3b:34:bd:b1:b9:69:1f:4a:51:70:28:0e:ed:d6:99:41:34:e6:
7a:98:b6:31:99:9e:15:7e:6b:7c:ab:09:52:3a:79:59:9f:76:
ae:98:78:ac:27:c0:cc:11:47:f4:e1:3a:45:4d:0c:51:68:66:
51:19:85:4e:a1:64:c8:67:20:95:20:5e:5b:25:6b:c8:29:06:
5d:0e:fd:d4:af:6b:06:3d:07:1e:a3:c2:64:d0:2d:f9:f1:69:
8a:24:e9:20:f3:11:cf:dc:ea:b5:47:7f:09:7d:8e:f4:2a:fe:
14:b8:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:01:15 2026 by rpki-client