
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json)
Hash identifier: IgKyIGcv4Qm5fdWrA+Pl1r4MFmalFsydqEMO2HDE3/s=
Subject key identifier: 4D:94:36:50:B2:EC:38:A6:56:48:8D:4D:98:77:C6:56:E3:C7:76:56
Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
Manifest number: 012B
Signing time: Mon 27 Jul 2026 07:39:33 +0000
Manifest this update: Mon 27 Jul 2026 07:39:33 +0000
Manifest next update: Mon 03 Aug 2026 07:39:33 +0000
Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: NOCLxwbXpxqJ+qytrFRxDgWR7IM6GRDjFJvc/5MElOI=)
2: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: aHk0t2Hy2gHuEUEuWNA047fzWOktHu8vocVNcFbAJjo=)
3: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: qt3HSjdPuhwdbu7y+IBM5bXY+abtccfmEZI2ywYOKv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Validity
Not Before: Jul 27 07:39:33 2026 GMT
Not After : Aug 3 07:39:33 2026 GMT
Subject: CN=6a670b35-bd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:ec:75:8d:4e:bd:94:e4:f1:9a:d1:b4:bf:
90:59:26:73:df:bd:cc:c7:70:5a:33:ea:c9:a2:21:
4d:6c:d7:0a:6c:b7:9e:08:d4:d8:74:6e:0b:f6:22:
59:2b:2d:b5:cd:96:43:27:a3:32:cb:17:de:0f:9f:
7b:29:14:bb:ab:27:be:68:a6:b5:69:86:87:80:03:
5d:06:1c:21:8c:88:10:cf:19:4b:4c:a8:00:f8:86:
ab:ec:67:61:5d:0a:37:72:7e:9a:c8:1a:be:50:00:
9e:81:7d:29:8a:11:b4:60:7a:17:b5:a3:17:71:7b:
aa:54:4a:c7:14:4c:90:56:55:b9:45:cf:f7:1b:f4:
b6:6f:05:01:cf:21:9f:8a:c3:e5:19:6b:c0:ea:17:
ea:f6:bc:c5:65:7d:55:dc:d1:52:83:ea:e0:39:0d:
94:3b:58:a4:79:95:6a:e5:70:ba:93:70:01:de:f7:
43:6c:af:c7:e4:68:b8:f2:54:9c:fb:0b:c8:17:af:
b4:93:d5:08:4b:08:72:50:f9:e5:50:dc:45:e8:19:
f3:5c:a4:f2:43:c5:0f:70:d6:05:96:19:35:64:7f:
9e:30:35:44:e4:91:aa:3e:f7:46:44:6d:f2:f9:b2:
46:78:f6:d8:32:3d:c7:f9:87:ea:0c:e7:e6:ac:d6:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:94:36:50:B2:EC:38:A6:56:48:8D:4D:98:77:C6:56:E3:C7:76:56
X509v3 Authority Key Identifier:
keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c3:ae:27:54:df:ba:d0:48:82:74:a4:81:d9:59:6b:94:75:
88:34:63:7f:c3:e1:41:59:df:87:c0:a8:f2:63:fa:e5:29:d9:
66:45:60:90:d5:5b:f9:48:7a:0e:21:87:ef:27:0b:46:26:d2:
cf:f9:99:7d:2a:df:24:b2:fc:5f:76:ab:3a:d5:f8:19:9c:36:
90:fa:45:f5:e4:4c:c2:52:86:40:0d:56:0a:51:7a:b0:a5:3a:
00:8e:f7:0a:b7:ce:e3:1a:1a:e2:73:e7:67:81:f0:22:bf:ae:
8f:a7:cd:5b:3b:96:5a:68:8b:99:6b:24:52:35:08:3c:30:c0:
6b:9e:a6:36:79:55:79:62:2d:64:8c:4f:c4:c8:62:a2:1b:54:
16:c1:da:5b:45:65:8a:18:e0:aa:e1:14:4e:df:b3:44:83:e2:
94:fc:cf:92:b2:54:69:27:e3:d8:23:3b:8b:01:32:9f:14:9a:
cc:a3:6a:fc:22:82:9c:05:9f:a5:1c:c1:3a:ab:bf:86:62:d7:
c1:0e:0e:91:bc:7c:75:2f:92:c0:ee:1a:1e:3d:15:d3:02:44:
3b:8c:0a:ca:7a:63:10:ef:c7:8f:56:d1:32:f0:59:aa:f7:63:
91:ac:c0:90:15:51:bd:b4:f0:01:c0:38:9b:9d:d1:75:7a:5e:
d6:66:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:13:48 2026 by rpki-client