
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File: at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier: wjSK4N2GQAnYoL01mmHT6C6Q1ot6Q1i3hEQj0KceBw8=
Subject key identifier: 83:CE:B3:04:D0:D5:3A:E5:98:CA:C4:B8:EC:56:17:B8:99:B1:B4:1A
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial: 07FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number: 07E7
Signing time: Tue 28 Jul 2026 21:47:01 +0000
Manifest this update: Tue 28 Jul 2026 21:47:01 +0000
Manifest next update: Tue 04 Aug 2026 21:47:01 +0000
Files and hashes: 1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: L1h8zjEmE4pC8B3ftUAbJTA7wgw71uXmMgYL3xec4UU=)
2: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: z+ZRB0bBSa8oaRsVRAkD/aqR3zkYjW0hmksq+X5D7QA=)
3: 68894B22402811EB91B49250C4F9AE02.roa (hash: liLPy91xdDc1pdMOxAhLDDGEhSWylfhoV6UNE1PovoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Validity
Not Before: Jul 28 21:47:01 2026 GMT
Not After : Aug 4 21:47:01 2026 GMT
Subject: CN=6a692355-0de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:b1:8b:62:24:99:55:2d:45:58:04:89:4e:
6b:9f:00:70:ce:1e:4c:b3:4f:b1:0f:82:a9:64:94:
89:fc:fb:40:78:26:e5:8e:bb:31:ee:9f:e4:19:e5:
ad:9f:9c:11:e7:ef:60:61:43:49:f4:50:b7:dc:0f:
5c:61:91:da:d5:da:97:a7:db:c3:7b:9f:1d:c0:6f:
7d:2a:a7:d0:e2:49:c4:f7:f1:d1:e4:f5:89:fe:e0:
2d:60:7a:c6:2d:fc:d2:3a:91:74:16:4e:ad:5a:c7:
48:af:c4:74:73:98:d2:4d:0b:b4:69:d1:70:5f:00:
93:e8:cf:aa:6c:b6:0a:91:46:3a:eb:79:e1:03:39:
d1:42:63:e6:88:0a:2a:a8:fb:10:3d:6f:50:e2:fa:
69:e9:7e:bf:7d:0b:b6:c3:ab:12:a0:0e:a9:37:3b:
99:8b:ed:bd:57:1a:ba:d9:9d:9c:dc:98:b9:2e:4b:
6b:2c:6d:72:da:b8:3f:7c:cc:e3:32:0e:54:f9:9f:
ba:44:a0:1a:72:02:2a:21:74:b5:01:4c:32:a7:b5:
f0:0c:fc:7c:3f:7a:7c:52:d9:9e:97:64:31:ee:14:
da:86:64:41:fe:b1:bf:aa:ea:e8:d4:69:a8:c4:16:
60:9b:f4:8b:23:7f:a5:42:70:0e:5f:ff:7b:af:ea:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:B3:04:D0:D5:3A:E5:98:CA:C4:B8:EC:56:17:B8:99:B1:B4:1A
X509v3 Authority Key Identifier:
keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:7c:14:6f:1c:d6:af:9b:b0:16:62:b3:8b:ac:76:b3:8b:39:
2f:20:e9:14:27:13:d1:85:44:34:db:2c:50:e6:77:d5:0d:ef:
d5:33:ce:dd:b0:27:aa:c5:de:42:6a:f7:8d:37:de:b3:b4:51:
9d:34:db:5d:1b:77:7e:25:95:77:db:d5:16:db:ee:8f:72:86:
e6:33:33:7c:a5:b4:45:ca:fd:9b:41:92:b3:82:b5:6d:91:e9:
e1:f3:49:70:76:02:d7:e3:6f:93:a0:4b:d1:00:1d:27:cb:6d:
ab:ea:ff:01:f9:e1:e2:a4:33:3c:89:5e:1f:c0:05:ce:6d:11:
cd:24:05:42:b8:58:44:d7:40:94:41:c3:48:d8:4d:4d:6f:8a:
f6:de:39:d9:a7:84:9b:d7:f3:c6:46:6d:25:92:7f:f8:e9:c0:
7d:75:4f:65:10:cc:aa:79:cf:6c:f3:89:f6:6d:3f:7c:4b:b5:
a8:14:b8:b0:ce:47:0a:65:fb:53:57:5e:3a:9a:09:3f:64:7c:
f3:e2:69:37:6e:db:2d:89:82:d5:16:ad:41:ad:97:76:37:26:
20:ad:ad:88:22:99:3f:98:f0:95:34:07:89:fd:0d:f0:96:ba:
c5:19:cc:9a:3e:29:2c:8d:0b:a4:e2:3a:6d:7b:db:98:35:a2:
42:e3:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:18:14 2026 by rpki-client