
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
File: g7x91dFCfoM0DS32wztiPUPX7KQ.mft (raw, json)
Hash identifier: /8Q3yT7cf7oTJ9lU5WYT3uOuK1DBfu2MlV03rIYTuMM=
Subject key identifier: 01:BB:FF:07:9F:84:7B:6A:68:40:92:4C:C5:73:A9:9E:87:15:61:D0
Authority key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
Certificate issuer: /CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
Certificate serial: 0F90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
Manifest number: 0F7A
Signing time: Tue 28 Jul 2026 17:38:49 +0000
Manifest this update: Tue 28 Jul 2026 17:38:49 +0000
Manifest next update: Tue 04 Aug 2026 17:38:49 +0000
Files and hashes: 1: g7x91dFCfoM0DS32wztiPUPX7KQ.crl (hash: XwCJfNAw004+kxS4nBhs+Asn3La9lcXL4g3r4u421ww=)
2: 16C329A4713B11F0A2354E78C4F9AE02.roa (hash: IL/E/nWcOLdpvY6kRKEbHNWbHgxGSummYUXsi86XlXA=)
3: E1769D329EF711EABE23195AC4F9AE02.roa (hash: t/D8IYKB/rM46dZgcTuJ/X2CfX2Uf2X0FQN7ZHOdxv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl
rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3984 (0xf90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B468, serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
Validity
Not Before: Jul 28 17:38:49 2026 GMT
Not After : Aug 4 17:38:49 2026 GMT
Subject: CN=6a68e929-530e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:2d:4f:12:51:19:00:d9:49:87:f8:9c:d5:
9e:79:13:ad:a8:92:56:3c:e4:84:73:f1:fb:3a:50:
09:fc:42:2d:8e:b7:19:e1:28:75:97:01:ac:c6:cf:
a3:22:86:04:34:74:9d:eb:34:b8:dd:32:91:de:00:
81:1b:2c:64:d1:45:1d:3e:2c:c4:52:a3:51:23:66:
1b:53:e8:3f:45:bf:70:3d:39:19:7b:51:ec:c2:66:
71:e9:54:8f:c2:c3:9f:6b:18:71:87:b9:1d:55:27:
c8:26:54:e0:33:e1:b3:97:dc:4c:90:c4:9d:dd:d5:
60:98:c5:5d:97:48:96:f5:57:d4:0e:3a:98:c2:0b:
b3:d9:7a:6d:10:d8:d5:bd:17:3f:32:5e:a4:f1:82:
75:a4:1e:79:16:2e:e5:8f:1c:51:46:98:8c:0b:4f:
3a:a8:01:1e:24:5d:66:47:31:77:85:b4:f9:ac:af:
f5:b9:cd:74:d8:dc:ca:e0:b1:ff:67:d8:28:70:9f:
46:3a:aa:e0:d1:39:90:b1:a9:35:ec:b1:ce:74:db:
97:da:69:c0:b2:0a:a7:ae:a8:8f:d1:a0:35:a7:a0:
a6:8c:48:23:5b:60:6d:a5:8a:7d:6d:44:7a:4a:30:
2f:ba:8e:ad:c8:bf:7f:d2:2f:a9:ab:15:0c:a7:02:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:FF:07:9F:84:7B:6A:68:40:92:4C:C5:73:A9:9E:87:15:61:D0
X509v3 Authority Key Identifier:
keyid:83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:9f:e7:ea:4e:12:95:f0:41:ce:0a:75:b7:31:ab:ce:60:
2b:7a:d7:0a:f3:03:33:04:f3:b8:f6:f1:69:82:47:df:81:33:
20:68:d7:36:5c:16:92:47:be:4f:c5:60:9e:c7:ed:67:99:02:
27:b3:20:be:c8:33:33:f4:bc:79:9a:bc:1c:29:c5:24:ef:be:
72:70:da:c8:b2:d7:53:c6:6c:4f:45:c4:8d:dd:a6:da:30:58:
a7:85:46:77:12:3e:58:a8:9e:1d:68:3a:08:03:3b:5f:8f:b2:
9d:53:17:1d:17:c5:28:d1:a0:ad:2c:45:c5:b6:da:3e:69:30:
d8:82:aa:e9:51:26:60:63:cc:47:6a:3c:b9:f0:0a:38:b8:ab:
36:f8:fa:97:f2:8f:11:ef:af:89:d9:6b:0b:58:42:d2:47:9e:
6d:6a:3d:2d:14:b9:d5:13:35:fe:3d:93:21:5b:92:ea:5a:72:
cf:49:d1:85:05:c0:20:b5:74:74:6b:c9:22:b7:ea:cd:4f:d9:
5e:1f:2a:75:ea:86:ff:81:d9:98:3b:62:ab:75:e2:a9:f0:85:
ce:41:4d:be:bb:21:40:87:75:41:02:4b:19:8c:f9:c0:33:9a:
32:7e:48:c2:a2:97:51:a9:60:7e:1f:1c:5b:f8:e7:44:66:52:
97:fe:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:02 2026 by rpki-client