
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier: FqLjb9umI01kB0OiIhxEE9MMAiJE+TeOz38LbgmrLVU=
Subject key identifier: CB:66:82:97:4B:20:57:70:C4:C8:A9:37:CD:D0:15:31:47:58:97:CB
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 1A31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number: 1A14
Signing time: Tue 28 Jul 2026 16:27:16 +0000
Manifest this update: Tue 28 Jul 2026 16:27:15 +0000
Manifest next update: Tue 04 Aug 2026 16:27:15 +0000
Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: oRvoGvmYCch1Uymh1vITOiyor4IZGRmiUNL4sRqZhg0=)
2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: lNZvb1hOs/cWIz88gsfEJjScBqxN5z+Y27yw+tnMCds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6705 (0x1a31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Validity
Not Before: Jul 28 16:27:15 2026 GMT
Not After : Aug 4 16:27:15 2026 GMT
Subject: CN=6a68d864-9b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:45:c7:5c:b5:5f:01:f8:92:0f:a3:93:45:
30:f6:5c:eb:c3:ab:31:89:fd:10:6a:3d:43:b9:b7:
bc:eb:f5:25:ba:fd:13:12:e6:0a:5f:02:3d:ec:7b:
cd:46:8f:0f:df:67:ed:1a:ce:b9:10:e5:ef:51:75:
66:bc:cc:f0:bc:ba:d0:8e:88:fd:26:2a:60:7d:38:
2e:7e:b7:e0:73:11:cc:0c:a2:52:e2:b2:f0:97:b4:
a8:86:c1:82:51:5b:d6:95:7f:b8:ac:e7:7d:fc:7e:
7a:99:5e:d5:c2:27:61:b6:16:8d:07:db:c8:d1:f8:
a4:70:d4:0a:78:af:be:d1:23:23:df:73:85:18:0a:
b7:a8:7f:a9:cb:6c:4b:d1:f6:7b:cd:af:95:d2:e9:
10:96:4a:78:7c:b1:05:36:d7:12:e9:65:24:51:13:
59:59:3e:2b:e3:97:a9:ca:ea:7c:d3:b7:23:e3:82:
35:c6:78:cf:87:cc:18:96:0d:cf:49:46:b4:71:93:
23:64:f5:42:c4:74:79:a8:05:f1:44:cd:99:9e:39:
cb:60:b0:0d:73:aa:82:1f:b3:88:4f:be:5c:c5:58:
c8:67:98:92:55:d5:ac:14:93:ea:45:be:28:16:81:
4c:40:fc:05:26:db:25:8a:da:ee:21:6a:92:04:4f:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:66:82:97:4B:20:57:70:C4:C8:A9:37:CD:D0:15:31:47:58:97:CB
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:8c:88:2b:6b:ee:0a:d8:e9:f9:20:c3:51:36:56:ac:10:b0:
7e:7b:13:6d:ea:8f:4d:b9:66:27:d1:97:19:11:09:78:4a:95:
4e:ec:b4:85:bb:8c:3c:f2:00:2a:7d:c1:0d:6a:aa:be:a4:37:
d0:2a:f2:66:9b:68:0d:19:87:c2:b3:a3:6f:4d:d4:85:ea:20:
81:74:a6:92:eb:a6:7b:ae:ca:c4:0a:29:88:2f:7a:a8:af:0f:
25:b0:2d:1b:03:ff:e3:45:fa:d2:e6:98:af:31:67:92:5d:9a:
dc:19:fe:a5:51:ad:2e:8b:aa:16:f5:57:d6:84:e3:59:1c:ca:
0f:24:84:52:7c:4e:1c:bc:36:cb:55:67:bb:50:ba:d5:c8:01:
2d:0d:6e:e2:3d:87:dd:cc:1c:18:d9:61:4f:b7:f8:dc:c0:c7:
09:9b:b2:ea:86:b1:2d:fe:02:8c:7e:3a:95:dc:fa:e9:f9:50:
ac:e7:02:28:1f:a3:cb:f8:2d:fa:7a:6d:91:52:18:5e:02:63:
b1:20:7e:1a:90:de:40:c3:cd:0b:47:d4:69:5a:95:27:f6:7e:
6d:b2:04:20:a8:ae:56:c8:6e:4d:7a:9b:33:e6:d1:1e:be:2c:
a8:73:c1:21:fa:04:e3:c2:e5:cc:41:bf:1b:24:36:04:7e:dc:
f1:52:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:18:27 2026 by rpki-client