
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json)
Hash identifier: NpPRwMzA/1fLuPvJR38PPtlkdtMn9pUmtmfb7QoKwgA=
Subject key identifier: 22:7E:D5:0C:51:90:4A:60:C2:AD:B1:8D:35:A9:9F:FE:05:EB:A5:35
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial: 0B61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
Manifest number: 0B46
Signing time: Sun 20 Sep 2026 19:12:18 +0000
Manifest this update: Sun 20 Sep 2026 19:12:18 +0000
Manifest next update: Sun 27 Sep 2026 19:12:18 +0000
Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: v6yi/KkKpmGr07hC39WuX4wwHP+fXEWnupLZdizVZEo=)
2: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=)
3: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 71Hm3TTvUXY6fbA6ubcd977cDED5QXch19XWZX6CKNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2913 (0xb61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Validity
Not Before: Sep 20 19:12:18 2026 GMT
Not After : Sep 27 19:12:18 2026 GMT
Subject: CN=6ab03012-756e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:40:d2:52:ca:64:a3:d8:2b:18:1f:b0:16:
ea:fc:61:be:08:6b:0b:7c:54:22:44:62:31:42:d7:
c8:83:f2:4a:86:13:93:11:fc:58:d8:fe:bd:57:57:
03:a3:0a:8b:c1:ba:80:46:54:e4:c8:cf:ca:4a:61:
79:24:14:22:ae:31:d2:98:e1:55:a4:15:09:57:75:
cd:ca:60:97:9d:7c:63:2a:60:83:1e:c7:5f:8f:c8:
4f:f7:54:49:3d:d5:35:e9:bb:70:08:70:4d:84:47:
ec:24:61:43:d3:89:29:ac:88:5a:68:29:a0:0e:3d:
68:db:17:6f:6d:84:b3:7c:c5:13:0a:5b:f9:cf:cb:
e5:7e:74:1d:b7:2b:7f:47:bb:36:c7:77:96:ec:5c:
64:18:66:f4:77:ee:21:17:62:28:fc:86:97:00:a6:
ed:19:3c:a8:bf:d1:0a:b8:0f:24:2f:b3:02:4c:52:
e9:04:9e:97:9c:1c:84:27:15:d1:88:ff:d2:10:b8:
d8:88:62:bb:ff:7e:27:eb:71:de:e0:b9:ce:7a:ea:
7e:f9:09:5a:84:c0:a1:40:45:9a:44:aa:7f:2d:74:
0a:d4:2f:4d:8f:ca:eb:1c:c2:32:6e:be:9a:03:30:
cb:17:d6:e7:44:a5:e6:51:60:82:19:73:08:58:a9:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:D5:0C:51:90:4A:60:C2:AD:B1:8D:35:A9:9F:FE:05:EB:A5:35
X509v3 Authority Key Identifier:
keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0a:4d:e4:2a:94:17:ea:4a:52:91:c4:be:37:e0:da:ab:e2:
e4:89:14:03:08:cb:d7:ba:53:45:6b:e6:f9:49:4b:f0:7d:c8:
8b:61:d8:9d:4f:20:e3:71:ee:3f:66:22:b6:bf:b3:2c:16:a5:
22:13:38:09:47:be:8d:64:32:ac:19:78:f7:c4:05:47:91:8c:
22:04:7b:04:3a:81:f1:0c:fa:df:87:bd:36:27:4f:16:88:af:
d4:ce:8b:03:f7:7c:93:81:50:8c:b5:25:44:7c:a9:c5:3b:62:
15:50:83:0f:3a:30:da:6a:1d:be:32:49:0c:20:d2:4b:56:28:
6a:1b:a8:51:fa:36:d1:33:ae:64:94:76:6d:82:41:26:9d:b0:
9a:0f:e5:77:7b:d6:aa:ea:49:98:e6:ad:47:cc:60:9d:7c:ce:
e2:31:72:a0:27:b5:8d:d2:29:d7:50:76:1e:a0:1c:05:52:a0:
6b:55:c5:2f:dc:25:fe:4a:49:74:c9:89:27:76:55:fb:cd:07:
da:46:f9:49:23:34:f2:51:61:5c:35:a5:6c:61:f6:e5:14:ff:
94:ba:ca:12:74:2e:8a:09:e6:b5:3e:1c:79:e4:3e:93:97:bb:
9a:49:fa:1c:05:9c:61:d2:3a:e1:7c:cd:a0:07:02:33:7d:e0:
0a:5a:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:08:42 2026 by rpki-client