
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier: 4V8ZHREK9NNSmpW0P+u/yuMck4mDZPt8IEVqaR0NHfI=
Subject key identifier: 4B:3B:5E:02:D1:AC:11:A9:29:34:D9:0E:0A:48:32:DA:D6:41:06:B1
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 1A5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number: 1A3F
Signing time: Sat 10 Oct 2026 16:21:22 +0000
Manifest this update: Sat 10 Oct 2026 16:21:22 +0000
Manifest next update: Sat 17 Oct 2026 16:21:22 +0000
Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: Irisqp1qYuzzzhD68HQoFkIX02piQ0fym3RLAasibwI=)
2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: k6JasZ6qDQky92WYRiIlqMqoQzsCwvXop3AMU2lxOjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6750 (0x1a5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Validity
Not Before: Oct 10 16:21:22 2026 GMT
Not After : Oct 17 16:21:22 2026 GMT
Subject: CN=6aca6602-708b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:ba:f9:d7:11:ed:1d:f3:dc:b7:ed:1a:c4:
46:32:ca:da:b8:77:03:97:cd:a1:5a:57:f7:5c:1c:
b3:68:85:fa:f5:dc:bd:67:9a:e0:e9:79:bc:0c:08:
06:c0:82:2e:8e:8d:ea:e5:63:8c:aa:2c:18:74:f3:
ce:52:7f:a4:7e:06:a6:9e:01:d4:a6:0b:dd:30:20:
c4:7d:25:c6:ff:09:f8:55:9c:37:fd:50:34:43:67:
7f:fe:e6:10:c1:99:8c:04:bd:a0:03:86:5b:24:a8:
bd:ff:56:bc:17:93:39:f7:28:81:0b:56:74:9a:d1:
f1:59:88:12:03:8e:ce:bc:14:79:01:be:82:88:cf:
00:54:ad:89:0f:e4:21:ed:56:e2:7e:6a:22:72:9a:
92:9d:97:ee:72:f1:24:cd:f2:26:20:8f:73:7a:74:
34:cf:c9:d4:e6:c5:f2:6c:b9:92:47:88:b1:25:14:
06:a1:6b:ba:f1:e3:9c:ef:a7:43:58:27:4f:8c:2e:
79:04:20:ec:fe:94:11:c4:20:82:73:e2:5d:b5:95:
be:58:1d:ca:3b:dc:77:0e:b3:86:c5:c5:50:1c:fd:
b7:a7:0c:de:e2:c8:2d:f2:28:ed:9c:33:43:cf:23:
07:2d:a9:23:d5:ac:5e:f2:56:10:86:75:a4:d4:c2:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3B:5E:02:D1:AC:11:A9:29:34:D9:0E:0A:48:32:DA:D6:41:06:B1
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ba:ca:94:28:17:17:22:9a:85:fb:e1:2d:f1:12:f9:e9:f8:
15:86:33:60:69:7f:de:f7:f6:59:e0:3a:be:b0:ac:3b:3d:48:
a4:7c:cb:35:5a:67:8d:1f:e1:21:95:92:70:f8:c9:d2:7e:1f:
9b:c5:3e:8a:ec:39:d9:9e:c9:2f:b1:d0:c1:a7:0f:b2:06:71:
b6:c5:5e:ba:8d:40:fe:cc:72:9c:ef:be:53:24:9c:ee:56:7c:
2b:22:65:3d:dc:b2:ca:cc:e8:94:e4:07:32:b7:68:30:dd:87:
55:dd:13:f3:47:b0:70:9b:00:7e:e3:88:80:1f:53:f3:16:80:
22:53:9a:17:04:73:5d:b8:1b:9e:8f:c3:7a:be:a3:51:a9:61:
93:29:28:1e:ba:2a:2c:a0:f7:3e:01:e2:43:ca:8b:89:cb:cf:
33:ac:76:dd:4a:a0:eb:c2:44:20:b0:72:db:cc:f9:73:c3:08:
e0:e7:e3:a9:ca:d7:0e:53:22:57:7a:d5:db:88:c7:20:a7:b9:
36:ca:53:b5:a1:84:3c:bb:3a:e6:9b:9a:9f:a2:57:e7:48:3e:
af:0c:1a:b4:dc:4b:c3:6d:d1:c1:28:05:86:be:2b:75:e3:d6:
42:b5:4a:f3:47:2c:b6:99:06:6c:72:52:41:da:ba:9a:e2:9f:
d3:4e:9b:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM3MjUxMTAvBgNVBAUTKEVEMTdEMUJFM0Q1NzExQzZDOThDOENDQzU5QUFGNzM3
RTg2NUMzODQwHhcNMjYxMDEwMTYyMTIyWhcNMjYxMDE3MTYyMTIyWjAYMRYwFAYD
VQQDEw02YWNhNjYwMi03MDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm8u6+dcR7R3z3LftGsRGMsrauHcDl82hWlf3XByzaIX69dy9Z5rg6Xm8DAgG
wIIujo3q5WOMqiwYdPPOUn+kfgamngHUpgvdMCDEfSXG/wn4VZw3/VA0Q2d//uYQ
wZmMBL2gA4ZbJKi9/1a8F5M59yiBC1Z0mtHxWYgSA47OvBR5Ab6CiM8AVK2JD+Qh
7VbifmoicpqSnZfucvEkzfImII9zenQ0z8nU5sXybLmSR4ixJRQGoWu68eOc76dD
WCdPjC55BCDs/pQRxCCCc+JdtZW+WB3KO9x3DrOGxcVQHP23pwze4sgt8ijtnDND
zyMHLakj1axe8lYQhnWk1MLrnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEs7XgLR
rBGpKTTZDgpIMtrWQQaxMB8GA1UdIwQYMBaAFO0X0b49VxHGyYyMzFmq9zfoZcOE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzcyNS8zMTg0NEMzNjgw
OUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVjYkpqSXpNV2FyM04taGx3
NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdSZlJ2ajFYRWNiSmpJek1XYXIzTi1obHc0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzcyNS8zMTg0NEMzNjgwOUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVj
YkpqSXpNV2FyM04taGx3NFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq7rKlCgXFyKahfvhLfES+en4FYYzYGl/3vf2WeA6vrCsOz1IpHzLNVpnjR/h
IZWScPjJ0n4fm8U+iuw52Z7JL7HQwacPsgZxtsVeuo1A/sxynO++UySc7lZ8KyJl
PdyyyszolOQHMrdoMN2HVd0T80ewcJsAfuOIgB9T8xaAIlOaFwRzXbgbno/Der6j
UalhkykoHroqLKD3PgHiQ8qLicvPM6x23Uqg68JEILBy28z5c8MI4OfjqcrXDlMi
V3rV24jHIKe5NspTtaGEPLs65puan6JX50g+rwwatNxLw23RwSgFhr4rdePWQrVK
80cstpkGbHJSQdq6muKf006bpg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 07:05:00 2026 by rpki-client