
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
File: 7KeHdUGmkz3VBhpsggg9O4ORXIU.mft (raw, json)
Hash identifier: 8L3LmptePCw337oXriKz9ZRAD61q9059YrixP0Hz+KM=
Subject key identifier: 9A:C6:27:58:D7:85:39:FE:55:26:14:20:DF:EF:D1:35:DA:E5:47:04
Authority key identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
Certificate issuer: /CN=A9142127/serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
Manifest number: 7E
Signing time: Tue 28 Jul 2026 19:24:14 +0000
Manifest this update: Tue 28 Jul 2026 19:24:14 +0000
Manifest next update: Tue 04 Aug 2026 19:24:14 +0000
Files and hashes: 1: 7KeHdUGmkz3VBhpsggg9O4ORXIU.crl (hash: yh1pCTsp9nUbTcFX5zuC8McZ5s0Ncurqu1BTUtBjfu8=)
2: 0A6F23BCD89011F0809DF24792D3641D.roa (hash: LF3tnAF+s60btudK/C+MWOKUVDskcOU/sbbTIojV6RQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142127, serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Validity
Not Before: Jul 28 19:24:14 2026 GMT
Not After : Aug 4 19:24:14 2026 GMT
Subject: CN=6a6901de-9aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:93:74:98:f0:f6:5c:b2:4b:44:68:e3:22:
cc:b4:c8:fc:3e:0d:f3:cc:b9:a4:ac:72:35:3f:71:
83:c4:9f:50:d8:16:92:15:ae:68:82:05:7d:8e:a4:
2a:cf:7b:9e:a8:2c:b8:fd:54:b0:f5:39:06:51:ce:
6f:38:ff:31:89:0a:cc:1c:dc:e8:9b:05:29:8f:9e:
27:27:4d:e0:d5:59:7f:9b:91:ba:6b:c4:0e:c6:73:
ca:50:54:09:dd:3c:57:1b:e7:cb:9d:db:37:d2:0b:
4f:3b:07:0d:a3:1c:e4:57:68:b6:cf:35:a4:6d:3b:
b0:4b:41:78:e5:0a:fe:19:af:14:39:86:8c:ea:28:
99:9a:84:a4:2d:f7:29:e9:47:69:12:b7:ba:b5:f0:
41:e3:b9:57:0c:4d:55:6b:3e:21:ef:1d:27:8f:d6:
9d:a6:5c:dd:70:96:d8:6f:28:74:a4:dd:8e:19:92:
32:0d:1d:00:4a:28:7c:43:1c:c0:55:c7:14:f1:5e:
0a:d3:da:fd:89:24:9a:72:ee:a3:cf:5f:c3:8e:44:
2e:9d:1e:6f:4d:7b:d3:31:e0:de:8d:e2:4f:73:56:
c8:1e:b4:8c:a7:3b:ba:aa:c7:f8:86:5e:2d:9e:44:
5d:d9:45:c2:d2:26:89:10:98:47:89:d4:ac:c1:e1:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C6:27:58:D7:85:39:FE:55:26:14:20:DF:EF:D1:35:DA:E5:47:04
X509v3 Authority Key Identifier:
keyid:EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:c1:b6:3d:5d:cc:b2:0e:52:9a:81:be:04:8a:d2:42:02:2c:
70:76:02:8d:62:52:b7:ac:e4:47:79:c0:f2:ee:e0:e1:77:f4:
f1:cb:48:93:99:c0:2c:b2:e2:20:d5:97:30:86:41:d8:fc:2d:
d1:13:7e:d2:0b:42:c5:30:24:71:6f:8b:6c:c1:4a:e3:9c:16:
10:bf:5a:01:5a:af:c1:11:65:1c:05:ed:8c:3a:d8:38:be:2f:
ca:49:43:b2:57:8c:64:72:b8:b7:c6:61:18:2e:fe:ee:9f:d3:
7b:1e:7d:5c:af:60:bd:21:75:18:db:58:f6:d6:01:83:3f:68:
2b:0a:40:3a:de:64:b4:8b:f0:39:0a:95:cf:0c:24:a9:f8:9d:
36:b4:f4:8c:6b:cb:5f:cf:ce:77:06:c0:b7:6a:ff:d5:a0:dc:
86:3c:68:60:d8:35:11:75:2a:24:61:7e:63:f5:fe:c4:21:fd:
4c:41:30:bf:24:5d:f5:84:64:ce:56:9f:bf:5f:94:a8:f7:fa:
d1:78:f4:23:29:cb:9a:bf:63:20:87:20:a8:dc:37:48:64:3b:
ae:f5:cd:99:78:2d:f3:26:b5:d4:3d:27:d3:8b:9d:5a:19:16:
53:0d:a0:db:ca:2e:d5:c3:29:94:b0:e4:fd:f2:df:86:d7:e5:
b0:53:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:30 2026 by rpki-client