
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier: Empv8gzzxdQbWvE5eG6LaGI/P9iScUP7QT86W4kAd/s=
Subject key identifier: 6F:9A:4F:B0:F0:EE:AB:C7:1C:05:F9:B7:3A:17:57:06:A9:96:6E:9D
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number: 0195
Signing time: Mon 27 Jul 2026 06:05:25 +0000
Manifest this update: Mon 27 Jul 2026 06:05:24 +0000
Manifest next update: Mon 03 Aug 2026 06:05:24 +0000
Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: dTMdzL0rv5lQvO3EgaDZlwh9Lty16BQq71ziuhmujLU=)
2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: MdOZTC8gpcPZCiwvzVVuxWOX/YON9CbP3KqKS9V1nVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Validity
Not Before: Jul 27 06:05:24 2026 GMT
Not After : Aug 3 06:05:24 2026 GMT
Subject: CN=6a66f525-1683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:2e:17:38:f4:c6:6b:be:f3:60:ff:4c:dc:
bc:d6:e2:50:c9:71:e1:0b:dd:c9:1d:ba:e3:90:13:
75:c2:72:14:a4:96:cb:d8:ec:13:5a:74:e5:29:93:
9d:13:65:04:64:cb:e2:82:f1:2d:cf:83:74:1c:ae:
84:84:79:b1:d4:9e:e8:9a:42:17:dc:5d:ab:6e:1e:
0b:41:20:da:16:5c:7a:d6:10:06:a0:ad:b9:c7:d1:
03:86:88:1d:93:5c:9e:2f:85:d6:11:2e:0a:81:2c:
ab:ee:99:dc:1a:fd:b3:78:d2:5c:95:65:77:72:60:
0e:cc:a6:57:16:fe:0d:8b:dd:eb:2c:da:c7:49:b9:
7e:8e:14:fa:d2:01:13:97:4d:62:8a:e4:80:52:66:
bd:62:87:df:d9:c4:80:d2:16:77:aa:f7:4e:a2:9e:
2c:5e:f7:50:b7:d8:6b:12:e8:57:a9:fd:75:1a:d6:
1c:52:94:1c:67:ac:1a:07:49:09:5a:d4:19:a8:24:
16:66:47:59:d5:e8:aa:72:1e:c9:85:68:71:5a:ec:
d8:1a:09:f1:ca:d4:50:88:77:5b:9b:5f:61:2e:f8:
a5:91:df:71:3f:86:41:e6:76:90:f6:cd:89:35:45:
0f:9b:87:a4:b0:73:73:08:8d:28:80:a3:f5:98:13:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:4F:B0:F0:EE:AB:C7:1C:05:F9:B7:3A:17:57:06:A9:96:6E:9D
X509v3 Authority Key Identifier:
keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:e0:9d:4d:18:d6:cb:ac:67:e4:14:22:93:dc:88:47:11:f9:
85:0a:2b:51:78:7d:80:b7:e8:7e:7b:6d:e3:7e:47:d5:20:f0:
59:a5:6c:02:5d:fe:50:ce:25:52:c2:8b:b5:a8:2a:59:75:31:
99:b5:b1:31:ee:88:6f:06:5b:f0:65:24:ea:3b:d8:4f:ff:af:
7d:db:70:b6:b4:3d:e2:ad:28:e5:c8:18:a3:09:be:fa:c2:99:
70:33:2c:10:96:58:bc:6b:33:0d:68:6c:2d:a2:11:0c:59:ed:
80:77:4d:62:69:e6:6e:c8:7d:0d:28:c1:aa:c0:e2:95:f8:9f:
eb:d1:fc:6a:18:32:f2:b7:76:a3:7f:66:ae:2e:5a:56:5b:47:
76:e0:5e:df:b2:3b:4d:68:96:3a:b6:86:1f:6e:a5:0a:79:85:
ef:d6:e5:73:8b:8e:b9:21:30:8a:16:8a:eb:1d:18:7e:23:75:
9c:ae:63:3d:27:03:99:0e:17:51:54:78:18:0f:80:ba:b9:28:
d1:2b:c1:91:7f:cb:5c:ea:11:8c:12:5f:5b:99:9b:ac:f9:c1:
44:dd:3c:6a:6f:c4:0d:e4:3c:e5:d3:f5:aa:c6:47:fe:62:0c:
20:5d:13:2d:26:13:24:1b:fd:b8:09:16:ea:b8:db:0e:5a:90:
65:b2:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:12 2026 by rpki-client