
$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier: tD/fs3GaAU9my4+5c1ZTC4uqvTiz/qF2zhf12PK8SeY=
Subject key identifier: 84:F7:94:FB:83:E1:D6:9D:D3:56:0C:CE:14:BE:8E:55:EB:00:12:A3
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number: 01A1
Signing time: Wed 29 Jul 2026 05:17:52 +0000
Manifest this update: Wed 29 Jul 2026 05:17:52 +0000
Manifest next update: Wed 05 Aug 2026 05:17:52 +0000
Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: FfO/Wsc8ic52tCyxfdAhPAyso5QtnU6gZvSKO28oqiU=)
2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: rTmYP4vftuu9LnK2M6aljj2neyfU2VajOjI+M4V6OzA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Validity
Not Before: Jul 29 05:17:52 2026 GMT
Not After : Aug 5 05:17:52 2026 GMT
Subject: CN=6a698d00-ac3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:89:dc:54:25:5a:80:71:a9:2f:21:15:db:
bf:97:97:88:cd:83:c6:14:80:75:65:43:ef:01:61:
34:ad:61:a6:12:9b:75:5c:10:b9:48:94:cd:5c:9a:
f1:67:36:6c:73:66:83:9d:3b:b8:ea:d3:85:1e:13:
37:e4:5d:55:95:b9:0e:83:c6:7b:fc:d5:72:60:60:
6d:7c:49:9d:ce:d0:3c:7e:82:82:c9:8e:e3:93:68:
7e:63:c1:36:3a:aa:76:bc:3d:1f:63:02:55:60:02:
c9:84:c8:b9:23:27:b3:c9:b1:6f:dc:0c:a9:13:0a:
5a:d4:7d:f7:32:7e:64:da:a1:58:e1:33:1b:00:50:
bc:fe:ed:7f:0c:bf:32:b3:c6:ba:61:2f:b3:e7:1e:
84:02:f0:6f:94:b2:16:29:e6:67:70:97:d1:a5:2a:
e9:4f:47:b6:4f:c3:51:5a:f9:de:1c:e0:d4:fb:7d:
39:95:e6:e9:0f:c6:80:42:56:ac:03:18:1e:2a:f2:
71:4e:e7:0a:99:86:19:e3:86:34:7b:e5:6e:98:2a:
2c:c6:d5:63:31:78:5b:a1:6a:08:66:2e:95:15:45:
47:24:60:f7:02:d4:fd:3f:c9:c4:3e:15:57:2a:81:
a5:51:55:68:bf:eb:9f:50:fc:b2:9e:27:1b:43:5c:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:94:FB:83:E1:D6:9D:D3:56:0C:CE:14:BE:8E:55:EB:00:12:A3
X509v3 Authority Key Identifier:
keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:27:71:0d:49:2e:39:f0:87:f4:84:79:f2:5f:b6:4d:b4:06:
ee:ec:09:e8:01:d9:90:54:4f:4a:a8:13:45:8e:0c:e2:a8:22:
9d:dd:8d:84:97:6c:ad:5a:e2:46:29:84:a1:4f:ab:f6:cd:c3:
8c:fb:31:7d:36:4b:8d:85:38:a8:eb:35:52:f3:fc:ad:b9:cd:
93:4d:3f:ff:13:fe:15:7a:c1:8d:a8:bc:59:ef:c1:81:1d:40:
fd:48:8b:d9:30:f6:09:5e:e6:37:53:4c:e2:1a:88:84:92:35:
8e:3c:a4:9f:39:81:82:89:b2:7e:dc:88:05:c9:e2:24:ff:36:
9f:d1:d0:96:d2:3e:93:7b:b3:c6:4d:de:60:73:c4:5f:07:f9:
66:ea:66:3a:51:e6:f6:1d:ea:3c:18:23:82:14:dc:cd:09:c8:
ec:17:76:1f:c6:e8:6b:42:0c:05:18:39:b6:a7:c0:64:14:17:
75:b4:b5:a2:03:25:67:8f:40:e9:0e:03:8f:3d:51:4e:80:7e:
a2:9e:5e:df:be:d7:00:75:ff:ed:50:4e:29:59:da:82:39:a3:
0c:41:15:5f:23:3b:df:92:07:e1:14:e3:21:ac:20:43:9e:01:
35:f9:62:50:22:09:8c:90:fe:7e:13:ee:04:36:3a:8e:f6:3f:
34:74:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:35:10 2026 by rpki-client