
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json)
Hash identifier: HAvKiKNnliv1FqTqZG9v41mPuWKrHg+OJoz0rtjHskM=
Subject key identifier: 09:67:E1:E4:88:D5:06:F4:75:18:02:10:2D:18:D5:EC:0A:4A:75:DC
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial: 0B17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
Manifest number: 0AC7
Signing time: Wed 14 Oct 2026 19:46:48 +0000
Manifest this update: Wed 14 Oct 2026 19:46:47 +0000
Manifest next update: Wed 21 Oct 2026 19:46:47 +0000
Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: YBxWhPr54ad0jpaxKn/JPzfcJs2DWyPUQYNnKEF27eM=)
2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: /MynAjOlsPDDrLH0ofjr2IcwJe85uR/Yh/gIQF7Gksg=)
3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: Yak8zAvp+zCmTFiqBb7JfPxw1OHM+UY0jPPh/BPCu6I=)
4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: Z4njT+LfGD0hhTdG6fH7Bq3vm9YCgyhIlI8vWteffgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 19:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2839 (0xb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Validity
Not Before: Oct 14 19:46:47 2026 GMT
Not After : Oct 21 19:46:47 2026 GMT
Subject: CN=6acfdc28-3873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:bf:47:1e:37:66:e9:4b:e0:67:65:18:34:
1b:38:14:e5:c4:3e:fc:ee:f0:9f:ba:1f:8f:42:08:
48:80:ae:37:8c:37:40:47:45:05:87:ae:e6:65:34:
5b:52:55:60:3a:29:55:a3:41:2e:32:0f:8e:30:6f:
1d:df:49:45:da:f2:f3:d8:c1:cd:f3:40:9c:8a:fd:
6e:ac:0b:ca:6f:30:58:e8:3a:de:20:10:ce:8b:c2:
cc:aa:5e:89:68:d6:e1:e8:6c:6e:1c:40:37:48:a2:
8c:85:3f:91:4c:14:d5:d0:2c:61:79:fb:00:e3:6e:
db:2c:fb:10:da:8b:81:b9:cb:9c:7a:12:cc:8d:92:
fa:b4:f0:0d:09:ba:fd:d8:53:15:45:d4:f6:b9:35:
e8:7f:35:b8:4b:97:6e:40:41:e5:44:6d:a7:02:d8:
b0:9f:1a:e2:2c:93:8b:2f:70:83:ee:01:b3:03:43:
cb:ad:c8:b1:be:bc:80:63:99:a7:d4:de:4c:ec:33:
24:f7:6c:46:31:64:ac:fd:ff:32:da:d1:00:03:3d:
2b:e9:68:b2:51:31:6f:e1:d3:db:c6:45:bc:1c:68:
1b:c3:c7:90:59:8d:7b:05:cb:31:0f:c4:e8:97:a9:
ed:2c:fc:3d:5f:f4:bc:6b:ca:80:6f:57:e2:0d:81:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:67:E1:E4:88:D5:06:F4:75:18:02:10:2D:18:D5:EC:0A:4A:75:DC
X509v3 Authority Key Identifier:
keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:27:06:9d:79:e8:0f:35:8b:6f:5b:db:41:d0:b7:54:5d:bf:
a2:9a:9e:51:bf:56:17:87:93:48:46:b0:57:88:f3:25:9e:25:
c7:ba:41:ec:3d:cf:1e:c1:5c:40:dc:3d:0f:d9:ac:8d:91:a9:
fe:71:2c:c4:a0:c9:48:2b:f6:71:d1:59:f4:a0:ff:66:94:d6:
da:40:fe:77:6e:bd:f4:ec:15:5f:3b:b2:db:b1:1c:22:c4:50:
0d:bf:50:57:f2:09:3b:76:e4:c7:15:8e:cf:8b:5d:1a:b2:96:
1d:58:aa:14:ee:e7:95:fc:ca:e9:3d:1c:46:70:b5:b7:a6:da:
9a:41:57:77:5b:af:de:30:5a:5d:28:d4:92:12:d1:d2:96:82:
2c:b0:3c:ac:e3:94:30:01:8b:63:cf:7d:96:bf:06:c4:9e:1a:
7d:c7:05:e4:27:ee:3a:8e:b3:9a:db:e0:c0:1b:8a:77:07:3e:
e8:a7:95:43:02:35:ad:5e:97:33:f0:40:e9:1f:20:e9:5d:6a:
7c:b9:9c:b2:79:e1:61:31:74:99:bb:0a:95:ef:25:15:4e:95:
96:51:be:17:da:d5:dd:a5:5c:30:c2:5c:20:1a:61:03:e2:87:
6e:a9:e1:b0:0a:91:ea:f1:b9:8e:50:76:73:ad:1b:7a:04:7e:
c5:10:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:03:39 2026 by rpki-client