
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json)
Hash identifier: HrUeo9vPcxLqzZcLejnQTg8unNPoSlMPyRG+2G85viw=
Subject key identifier: 2F:7D:19:DE:64:9C:AC:09:2E:A8:72:11:77:67:BA:30:52:55:78:51
Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Certificate serial: 17EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
Manifest number: 17BD
Signing time: Tue 06 Oct 2026 16:36:59 +0000
Manifest this update: Tue 06 Oct 2026 16:36:59 +0000
Manifest next update: Tue 13 Oct 2026 16:36:59 +0000
Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: TT4YrAwhBbatKB80+ltSobSxcxzOHaMyNvgxu4x95Tc=)
2: 211910241E9E11F1A28347ED0E3D8C67.roa (hash: ZSTWW9qrTYokmi90xJvxyauGPHUOECGBx3bhI8hlBGM=)
3: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: puJkWVITf2df7u3Qj+93ztEl+0qqlVGDPJp1OeHAKxQ=)
4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: WA8xCRlxR3rKk8ClNGxGNEmsKJNt1HuKBEMk6slXSYM=)
5: 0897E314434811EF8E76757AC4F9AE02.roa (hash: hPIaiMSBFYLOvrueCE00fDgAwAADdWAf1f9rpZpgG+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6127 (0x17ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Validity
Not Before: Oct 6 16:36:59 2026 GMT
Not After : Oct 13 16:36:59 2026 GMT
Subject: CN=6ac523ab-2771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:4e:a4:68:9d:23:cc:1d:ac:91:0e:a7:70:
70:16:0a:00:80:2b:78:f3:e4:19:3b:f3:88:2a:4d:
16:00:77:c9:08:ce:c6:2d:c1:ae:fc:d4:2c:de:1e:
3b:f8:19:54:90:0b:19:b6:6b:8a:a0:9c:24:d9:8e:
9d:ab:b1:fc:6b:32:e5:82:ea:9f:8f:8f:59:8a:f3:
98:5b:e7:57:d4:a2:60:18:73:27:3a:2f:69:26:25:
31:0a:87:a5:38:f8:64:8b:59:83:79:5e:9d:d9:cd:
96:f9:a4:0f:2d:02:36:89:fa:b1:c7:cf:fb:6e:c2:
08:8e:30:8d:4d:19:49:d4:fd:5b:5d:f9:02:53:b8:
a5:26:34:3d:1f:be:2a:00:42:6a:10:ac:a8:01:e9:
98:6f:1f:a0:22:c3:42:67:d4:eb:ed:9d:b7:55:e2:
2f:f3:85:fc:a7:66:e8:d0:2d:f2:8e:50:16:1c:fc:
96:a4:2d:4b:a4:56:0c:40:fa:de:7d:0c:1d:9f:7a:
0a:49:f4:ed:17:58:9d:59:3f:d5:82:46:e1:fa:c4:
b8:e6:10:9d:66:59:46:68:75:75:0e:e0:d9:a3:40:
f5:e3:21:e9:6b:e0:8a:32:e5:d6:94:1f:d9:d4:51:
e0:60:cd:88:20:b0:41:80:fb:b2:b9:5e:bb:ef:14:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7D:19:DE:64:9C:AC:09:2E:A8:72:11:77:67:BA:30:52:55:78:51
X509v3 Authority Key Identifier:
keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:97:12:02:ba:25:8c:0f:48:c6:9a:8a:92:a4:e1:69:d3:a5:
69:28:1a:a8:5e:27:ac:c6:97:bb:73:fa:44:2a:cd:64:a3:fd:
c8:35:51:90:fe:f1:d7:58:c8:14:e4:6a:e0:23:ba:13:3c:29:
78:51:a1:70:cd:39:82:d4:d8:77:01:17:25:04:5b:b9:b5:5d:
91:fd:16:d0:39:3e:31:3d:48:f3:01:25:0f:0f:db:5a:c2:16:
30:01:5d:3a:59:73:78:ca:15:f6:b1:68:fd:37:cc:c0:ed:88:
7c:6c:1a:c4:53:48:d1:95:09:d1:a5:23:92:07:37:22:dd:e8:
ba:3f:0f:90:0c:25:49:fb:6e:c3:67:e4:8c:e3:a5:4f:9e:5b:
a4:c5:2b:8d:cd:68:19:01:37:56:0d:4d:7d:3b:f2:30:42:66:
46:7d:93:b4:72:60:4f:65:17:1e:1b:11:b2:a5:0c:a8:48:7e:
8c:e5:37:19:47:cd:c5:eb:66:8c:a1:23:08:c3:a3:72:ae:f9:
6c:bd:e8:91:ba:7c:a0:24:74:b7:92:97:e6:bd:cc:a8:1a:90:
75:9d:36:37:35:ba:01:dc:63:15:13:1e:95:07:31:e5:f7:94:
70:70:18:84:3d:29:c7:e1:e3:bd:d3:70:00:41:3e:ae:3c:e4:
cb:89:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:07:49 2026 by rpki-client