
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier: 3cywiRc0YdmRG9b5kopYrYUxOJq5nUF49HzFhXuRg+8=
Subject key identifier: FB:4E:22:D4:26:95:BC:4D:32:AE:AC:2A:23:97:E0:1F:48:55:B9:F6
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number: 0154
Signing time: Thu 15 Oct 2026 06:10:47 +0000
Manifest this update: Thu 15 Oct 2026 06:10:47 +0000
Manifest next update: Thu 22 Oct 2026 06:10:47 +0000
Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: Y21luOWAclqopMxEz3I1W9hwVdKlGyBPWWENSG+hZq8=)
2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Validity
Not Before: Oct 15 06:10:47 2026 GMT
Not After : Oct 22 06:10:47 2026 GMT
Subject: CN=6ad06e67-b841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:e3:b3:a6:fc:6b:a9:d2:3a:4c:c9:04:ff:
4c:c6:7b:b3:f6:f4:a5:1e:b0:93:a0:47:8b:34:9e:
7a:1c:87:ec:19:2f:46:b7:86:0f:9a:54:1d:7f:b1:
8b:45:9e:c8:09:1b:7c:5c:a5:ab:18:89:68:7e:f1:
fe:c6:a7:18:d2:51:f4:28:59:bb:aa:d7:91:7e:60:
d7:b7:84:6b:fc:ad:86:11:6f:b7:9a:13:cb:58:cd:
f6:2c:b2:61:4e:42:bf:8c:c7:d7:b2:0a:3b:4c:9b:
1d:20:6c:d7:53:cf:d1:ac:aa:37:4e:b8:50:42:ad:
2c:7a:3d:42:82:e6:64:69:e0:a9:28:fa:de:e4:1d:
11:9c:37:06:c7:5a:f1:22:64:c9:d1:53:5a:a5:d4:
fb:58:43:0b:f8:c5:2f:41:ed:af:d5:52:7d:dd:8d:
f2:21:25:79:5a:2e:1b:ec:9c:4b:c8:25:cf:ac:42:
69:41:c9:4f:f9:48:39:de:be:19:1c:01:ae:d6:fd:
10:b0:d9:d3:ed:85:f8:65:75:b5:9c:41:43:e3:d3:
19:24:b1:59:d1:72:90:80:be:60:9e:7d:4e:5a:f3:
84:56:9f:9e:14:4b:75:4d:0f:32:cb:4b:e7:7a:7a:
ff:27:28:0c:b4:6b:b0:b9:3f:5f:cd:4c:ea:bb:3b:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4E:22:D4:26:95:BC:4D:32:AE:AC:2A:23:97:E0:1F:48:55:B9:F6
X509v3 Authority Key Identifier:
keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bf:f5:5b:ff:f6:5a:a8:83:9a:cb:d8:40:3f:ec:ca:c5:63:
14:f5:4d:bf:e8:04:7d:e2:21:7a:34:0d:27:44:b7:fd:8f:ff:
2b:a6:c2:e9:6d:ce:20:1f:a2:28:1e:8c:4e:8e:bd:12:28:cc:
0f:b4:27:82:c3:21:e8:c4:01:1b:b3:8d:6e:ac:bf:99:71:72:
6d:b0:7d:24:a0:11:cc:e1:ac:f6:14:1f:da:1d:bc:05:43:78:
85:53:95:1a:b3:1c:33:b5:d9:73:30:5d:2f:f8:e2:50:f7:be:
ef:95:dd:06:54:17:c6:cd:02:cb:ed:91:ac:9f:c9:0a:03:7f:
49:9a:4d:fd:66:81:b7:6a:e6:c1:d1:9d:97:4d:fb:d6:f9:78:
6b:f6:c3:3e:1c:b7:80:93:1b:bd:9a:88:aa:be:ea:40:cf:33:
27:61:13:55:49:a8:5e:52:63:41:2a:5e:75:c6:e9:6a:c4:05:
c8:74:c7:41:d6:48:f0:43:bb:e3:a5:76:21:58:df:79:df:77:
c0:86:2c:7e:ac:9f:58:17:e0:d6:fd:6b:e5:38:7c:08:4c:89:
c8:9b:07:a1:3c:2b:b0:b4:61:00:0c:0a:1e:b9:19:8c:73:4c:
65:7f:20:0d:da:45:bc:59:22:65:e3:e6:56:fa:97:28:8d:38:
48:35:60:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:42:31 2026 by rpki-client