
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier: FvXghiZXRBnl4M+5rzly3unyE0nCqqRINDPfULDglho=
Subject key identifier: AF:CC:71:13:C6:26:C1:99:72:BF:C1:91:3A:68:8D:9C:0B:06:AD:0D
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 1A17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number: 19FB
Signing time: Fri 12 Jun 2026 16:20:08 +0000
Manifest this update: Fri 12 Jun 2026 16:20:07 +0000
Manifest next update: Fri 19 Jun 2026 16:20:07 +0000
Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: nNd+L91wmJffZJsIMK7ENeokdKmLFysfe7s9L97z4tk=)
2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: t4qQEhXVur27eUnpFLqlgSPz5OkbpRB/VWbuAT/SIEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6679 (0x1a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Validity
Not Before: Jun 12 16:20:07 2026 GMT
Not After : Jun 19 16:20:07 2026 GMT
Subject: CN=6a2c31b7-f96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:16:2a:28:21:13:36:a5:90:75:73:a3:e6:
78:92:d7:62:5b:6e:2a:d1:c3:7c:f1:b3:83:58:52:
69:01:93:57:43:b9:40:19:52:c7:e4:27:be:8a:a0:
c1:04:47:6f:7c:3e:d4:14:64:09:55:05:67:b0:fd:
18:e7:68:ac:0f:a3:8a:53:d9:4f:d7:16:e3:91:a3:
c6:fd:fc:0b:78:16:50:e8:5b:de:c3:ce:b8:72:23:
4f:67:99:9f:37:22:09:6f:79:4d:30:9a:f2:b5:7a:
ea:f1:1d:1d:86:a0:97:cf:d0:e2:13:7b:31:9e:ad:
4f:dd:3c:cf:94:2f:14:9b:63:9f:92:ee:34:2a:49:
41:e1:40:5c:a7:c6:9e:26:86:0e:99:f9:f8:75:db:
d7:95:d3:8b:79:3f:b6:7f:70:b6:9c:1c:36:c8:65:
ba:6f:58:48:8e:49:87:24:4c:12:d9:61:10:f8:47:
61:51:f5:e5:f9:05:c7:1e:e5:08:d8:ae:69:63:91:
86:b1:25:ac:ee:e8:fd:a7:36:48:70:80:74:25:e7:
0e:ce:c3:ae:ed:be:83:46:11:5a:af:57:c4:b2:8e:
f9:3a:d0:2a:8c:bb:e8:27:00:e7:1e:05:ac:32:e3:
72:99:64:57:a5:84:8c:64:fb:56:0b:e1:7e:de:85:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CC:71:13:C6:26:C1:99:72:BF:C1:91:3A:68:8D:9C:0B:06:AD:0D
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:7c:2b:71:65:d2:25:83:bb:93:50:0e:bb:ca:d2:a0:fe:59:
06:67:de:80:51:fe:bc:53:ff:cf:7f:45:4c:26:16:f7:ab:19:
7c:80:ef:e3:87:eb:50:11:bf:a0:85:8b:8d:94:2a:c5:44:7a:
96:ff:a2:54:f6:51:7d:57:87:3c:3d:f3:ca:e2:e7:65:ec:d3:
2b:a3:22:5b:9d:2b:be:f1:b6:35:49:5d:50:07:34:4d:2b:d8:
df:d8:3a:39:29:41:a7:68:15:1b:32:e7:2a:0e:8e:ab:fc:f4:
b9:57:65:f3:1c:89:05:80:d7:e6:97:e7:2c:bd:a3:70:56:4a:
da:fc:cb:65:5e:4a:9d:7d:e0:70:e4:c0:ad:88:94:16:51:55:
42:7d:8e:61:29:c1:45:a6:9c:a5:24:b7:3a:39:36:3b:cc:d9:
4f:80:2f:c5:14:24:63:41:4b:2f:e0:eb:44:42:91:5d:4f:c2:
97:02:2f:c6:83:e2:1c:cf:e4:d7:90:ea:5d:27:75:52:4c:07:
ec:af:3b:b3:89:d3:bc:2c:0c:a7:f2:bf:78:b0:97:66:ed:07:
01:4c:8d:f6:fb:b5:02:f1:e6:ea:48:95:e3:8d:a5:f4:66:d5:
22:0a:d8:33:a6:6a:51:49:85:7c:e1:36:13:a0:91:41:2d:f1:
1e:ae:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:23:07 2026 by rpki-client