
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json)
Hash identifier: OS7EuTtit9lUiSpqraSPdd0FSRq06JnaSblYnSICqkw=
Subject key identifier: 3F:4C:6E:F3:6C:C3:DB:17:5F:79:04:C1:A6:EE:36:C9:81:51:4F:B3
Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
Manifest number: 0152
Signing time: Sun 11 Oct 2026 05:50:16 +0000
Manifest this update: Sun 11 Oct 2026 05:50:15 +0000
Manifest next update: Sun 18 Oct 2026 05:50:15 +0000
Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: 4x54fIdp6FuS75oRJbxXoooKPh4FUJWO5eoMpYutPtM=)
2: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: qt3HSjdPuhwdbu7y+IBM5bXY+abtccfmEZI2ywYOKv4=)
3: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: aHk0t2Hy2gHuEUEuWNA047fzWOktHu8vocVNcFbAJjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 05:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Validity
Not Before: Oct 11 05:50:15 2026 GMT
Not After : Oct 18 05:50:15 2026 GMT
Subject: CN=6acb2398-1ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ec:18:25:26:88:78:d5:7c:cb:f4:7b:bc:e1:
2d:13:02:8a:65:37:be:67:43:cf:be:da:d3:b2:38:
13:f2:4d:04:43:c4:16:ca:af:f2:07:12:11:c2:a6:
c4:cf:50:5a:8a:f1:6d:bf:04:ae:e5:b2:ea:d4:ce:
ca:9f:d1:06:86:94:11:82:80:54:8a:0c:92:23:82:
36:e5:8f:32:72:f0:cb:aa:02:d0:9d:07:d9:51:91:
2a:69:98:86:24:a6:15:8f:00:43:bc:79:90:cf:32:
20:4f:50:44:70:b7:45:b5:82:5f:8d:e8:1a:15:c5:
ab:37:6f:20:ad:65:98:86:b9:15:a5:3d:33:6c:5f:
46:69:27:e1:75:22:45:8b:e5:c1:68:f7:6e:ed:cf:
89:9a:d7:e4:00:86:10:cd:b2:1e:46:cf:bd:c8:15:
74:8a:a4:fd:2d:1c:37:8c:e6:be:3f:58:67:0d:a7:
dc:62:76:71:ee:83:97:cf:0b:ed:6b:30:0a:38:a4:
70:2e:9f:ce:fb:8f:a8:ec:7e:94:80:90:6d:98:f2:
ab:33:4a:fc:ce:a2:46:16:5b:eb:88:93:bf:10:4c:
f2:bb:60:29:b8:da:e6:46:21:8c:44:8a:56:db:f2:
6b:10:3b:34:f7:37:ba:28:70:eb:c6:10:28:d5:24:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:6E:F3:6C:C3:DB:17:5F:79:04:C1:A6:EE:36:C9:81:51:4F:B3
X509v3 Authority Key Identifier:
keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:32:4a:ce:37:74:e0:cd:d4:a7:97:92:9d:55:67:13:1c:70:
0b:fd:c2:a5:f1:7b:ad:de:fd:4a:9d:07:29:01:f4:9f:9f:1e:
49:10:ef:ad:55:f1:46:d0:65:60:b6:30:5c:5d:20:bc:94:9e:
af:c4:1e:c3:95:fb:40:0e:f9:47:6b:0e:bf:99:c7:66:9f:65:
4a:df:38:ba:41:75:2c:c9:47:2a:bf:f8:0e:6c:f5:5c:cc:61:
69:ef:4d:1b:79:b9:ff:21:fe:5b:f3:f1:08:9e:4a:d3:8c:c9:
a8:21:1d:d9:0c:c7:3d:ab:e2:60:1f:b2:12:11:99:d3:17:5c:
cf:9a:70:80:c0:1b:92:32:2e:9c:9e:25:05:52:98:1d:cf:af:
d5:6f:40:97:1b:5a:2d:d0:5d:de:d4:02:f4:63:16:93:67:ca:
cb:61:18:77:b0:de:3c:39:77:6f:4f:46:85:6d:b3:ee:c3:63:
e0:40:9c:9a:df:37:5c:3c:37:2d:09:3a:6a:f9:7c:02:fe:a2:
4c:1f:95:a7:43:a1:5d:9a:4b:ae:9f:c9:fb:11:9e:1f:fa:f0:
09:e4:8e:ea:37:4d:27:18:2f:d0:a1:bd:2f:bd:0c:06:94:52:
74:c5:fa:ec:72:fd:90:8f:a7:78:45:53:70:fd:df:9d:02:ae:
ba:92:33:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:50:00 2026 by rpki-client