
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File: x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier: BgAwIL6c6KjG48fZZbIqPulzDwXk1ydHds5AjQEF7EY=
Subject key identifier: DC:37:BF:1E:44:04:D7:64:83:CB:5D:CA:F0:09:93:44:3A:18:E4:7A
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer: /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial: 028E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number: 0284
Signing time: Fri 17 Apr 2026 01:33:21 +0000
Manifest this update: Fri 17 Apr 2026 01:33:20 +0000
Manifest next update: Fri 24 Apr 2026 01:33:20 +0000
Files and hashes: 1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: ICfhfjFp+2xA4JMK3JvZHrEV5sqRjL1ZqaJdxRZMkDU=)
2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: tKFaHITtLZAQ61mcV49Br1vxEy6JkCTzuDJ4xLJ+YOA=)
3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: 6YJJzl5drZKIcUPjGHkkRR3YgQuFHkEPTeKqUES1L5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Validity
Not Before: Apr 17 01:33:20 2026 GMT
Not After : Apr 24 01:33:20 2026 GMT
Subject: CN=69e18de1-660d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:02:1f:5f:92:1e:45:61:29:ca:c8:0b:39:
ef:7c:98:2f:29:58:4a:fe:f8:d9:98:1b:90:f5:75:
f8:18:11:07:22:5d:a7:a5:94:0b:be:4d:e4:f6:bb:
5a:7a:7b:2b:b5:9b:d2:91:bd:2e:9e:be:03:e9:6b:
1c:bc:49:74:10:fb:88:a2:c2:7a:60:db:e2:88:48:
7c:6a:aa:f9:37:82:d2:28:b1:77:bc:26:95:65:47:
ba:16:42:70:ec:65:e7:26:59:b9:9c:4c:1c:6c:aa:
7e:7e:6f:64:09:22:a6:7a:bd:21:45:32:b1:82:98:
04:e1:92:cd:64:96:a5:d2:57:f3:c8:7a:9b:70:37:
ad:d6:83:8c:6c:17:1e:ac:d1:a2:32:63:48:49:c6:
97:1e:a8:60:ac:8e:c7:be:b0:85:8c:4e:76:cf:a9:
33:c8:f5:6d:7e:71:99:a3:60:a4:95:29:2b:98:ce:
db:61:b9:71:bb:1c:f9:e0:a3:f8:55:58:26:cb:0b:
49:3a:ac:69:6c:d1:e5:11:6e:5c:58:24:66:b4:4d:
2e:e0:81:b5:da:14:0e:04:4d:1e:70:5c:71:5a:bc:
05:b9:df:fd:27:a7:2b:8c:88:56:36:bc:08:bc:55:
a4:14:17:a7:9c:85:d0:46:28:8a:26:26:29:55:73:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:37:BF:1E:44:04:D7:64:83:CB:5D:CA:F0:09:93:44:3A:18:E4:7A
X509v3 Authority Key Identifier:
keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:46:c2:11:93:1c:b8:e4:00:d7:25:11:74:08:f9:dd:b9:
87:7b:32:c9:55:4e:30:d9:a4:b3:2f:86:22:02:c7:9e:b9:83:
84:26:f7:f8:ee:37:1b:6a:94:c3:04:d5:9c:c3:2e:e6:80:df:
86:24:94:4c:79:68:5d:65:44:5e:2a:ea:d9:d7:23:33:46:a8:
d7:d5:5d:96:f4:96:fc:b5:d6:51:61:99:ba:1e:4d:d5:3b:bf:
76:ee:30:d8:38:cc:7d:ea:7b:28:8b:de:a3:90:97:65:2e:19:
ca:7c:bb:58:e2:2f:c4:96:f7:37:e6:86:be:ce:e6:5a:e6:77:
19:ce:b1:3c:be:67:04:89:d3:c2:83:8b:62:a2:39:d1:48:35:
c7:1c:1e:5c:f4:fa:f4:e4:71:9e:6a:bc:5a:db:42:0a:64:65:
74:0b:02:b1:75:19:a9:fa:ca:9f:98:cc:60:95:9a:bf:dd:93:
27:2b:58:e4:6c:3c:90:7b:1e:d7:38:7f:1e:12:9f:7a:b3:13:
62:9b:65:0a:8d:e1:ca:e5:db:c3:fa:d6:ad:13:0e:56:8d:2d:
e0:5b:55:ed:ba:f1:b5:99:0b:40:63:cb:9b:66:30:56:de:e2:
58:3e:29:6b:8d:a5:e5:0b:58:37:22:1f:58:af:5e:62:34:71:
42:34:99:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NzUxMTAvBgNVBAUTKEM3QjEzMDlEMDA4NzJEMDY2NjM5NkI0QzIzRDhFRjVD
MzEyQzZCRUIwHhcNMjYwNDE3MDEzMzIwWhcNMjYwNDI0MDEzMzIwWjAYMRYwFAYD
VQQDEw02OWUxOGRlMS02NjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLMCH1+SHkVhKcrICznvfJgvKVhK/vjZmBuQ9XX4GBEHIl2npZQLvk3k9rta
ensrtZvSkb0unr4D6WscvEl0EPuIosJ6YNviiEh8aqr5N4LSKLF3vCaVZUe6FkJw
7GXnJlm5nEwcbKp+fm9kCSKmer0hRTKxgpgE4ZLNZJal0lfzyHqbcDet1oOMbBce
rNGiMmNIScaXHqhgrI7HvrCFjE52z6kzyPVtfnGZo2CklSkrmM7bYblxuxz54KP4
VVgmywtJOqxpbNHlEW5cWCRmtE0u4IG12hQOBE0ecFxxWrwFud/9J6crjIhWNrwI
vFWkFBennIXQRiiKJiYpVXOYnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNw3vx5E
BNdkg8tdyvAJk0Q6GOR6MB8GA1UdIwQYMBaAFMexMJ0Ahy0GZjlrTCPY71wxLGvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY3NS82RDExRjU3ODVF
NUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExRWm1PV3RNSTlqdlhERXNh
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g3RXduUUNITFFabU9XdE1JOWp2WERFc2Etcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTY3NS82RDExRjU3ODVFNUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExR
Wm1PV3RNSTlqdlhERXNhLXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUwlGwhGTHLjkANclEXQI+d25h3syyVVOMNmksy+GIgLHnrmDhCb3+O43G2qU
wwTVnMMu5oDfhiSUTHloXWVEXirq2dcjM0ao19VdlvSW/LXWUWGZuh5N1Tu/du4w
2DjMfep7KIveo5CXZS4Zyny7WOIvxJb3N+aGvs7mWuZ3Gc6xPL5nBInTwoOLYqI5
0Ug1xxweXPT69ORxnmq8WttCCmRldAsCsXUZqfrKn5jMYJWav92TJytY5Gw8kHse
1zh/HhKferMTYptlCo3hyuXbw/rWrRMOVo0t4FtV7brxtZkLQGPLm2YwVt7iWD4p
a42l5QtYNyIfWK9eYjRxQjSZlw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:52:16 2026 by rpki-client