
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
File: 7oeNdaIYCzpoQfv6lsOakOH6alo.mft (raw, json)
Hash identifier: 84+zC6r+TioDPExn/jnZkjYZqdLIZUAnZWkOKyrBL30=
Subject key identifier: 1B:6F:45:10:3A:89:DE:7F:85:3E:56:8D:09:9F:E7:46:A0:35:14:96
Authority key identifier: EE:87:8D:75:A2:18:0B:3A:68:41:FB:FA:96:C3:9A:90:E1:FA:6A:5A
Certificate issuer: /CN=A9156648/serialNumber=EE878D75A2180B3A6841FBFA96C39A90E1FA6A5A
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oeNdaIYCzpoQfv6lsOakOH6alo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
Manifest number: 17
Signing time: Mon 27 Jul 2026 11:23:41 +0000
Manifest this update: Mon 27 Jul 2026 11:23:40 +0000
Manifest next update: Mon 03 Aug 2026 11:23:40 +0000
Files and hashes: 1: 7oeNdaIYCzpoQfv6lsOakOH6alo.crl (hash: 1PCRKwiVqEWqfDi7bVdbSqVoVA+CHiMswOe8qjYUH88=)
2: 264CD086686711F1A235A935A047A888.roa (hash: hGg0i2AerJUIjIuwGtqIvGZCbqf4UclKCp9wjxIZIoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.crl
rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oeNdaIYCzpoQfv6lsOakOH6alo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156648, serialNumber=EE878D75A2180B3A6841FBFA96C39A90E1FA6A5A
Validity
Not Before: Jul 27 11:23:40 2026 GMT
Not After : Aug 3 11:23:40 2026 GMT
Subject: CN=6a673fbd-1c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:23:d3:53:3e:2e:d1:76:80:8d:ec:86:8e:49:
a3:c9:a5:47:f2:ba:7b:4c:a1:9b:60:f0:57:36:20:
9e:15:7a:19:b4:5e:2b:8c:8d:67:0f:5c:7f:b0:94:
27:ff:77:9d:95:47:d2:73:79:98:3b:9d:58:75:95:
c3:a2:c0:e5:64:42:44:36:04:4a:d9:8f:53:87:84:
d1:07:7b:1f:e3:5f:46:42:be:46:3b:ef:99:73:29:
8d:73:ee:53:ea:da:2d:a7:b5:41:4d:9c:e2:50:f7:
7b:e1:a6:57:2a:52:11:50:54:b1:19:02:de:45:f9:
60:b1:0b:8c:66:54:84:20:87:69:4b:e7:33:b6:01:
65:11:be:96:b6:6b:0b:70:e0:f0:f3:ce:7b:e6:e8:
d2:f1:19:12:20:25:dc:d7:da:b5:e4:eb:ca:00:f7:
e1:b4:7a:bd:95:04:ec:a0:6a:38:9e:76:59:32:6d:
84:7c:97:27:ae:c7:f3:ed:40:24:f8:b1:09:34:8b:
8c:44:fc:a5:19:65:39:e4:77:2b:e6:74:31:bb:7c:
18:a1:9b:f0:8e:b1:62:ea:1d:53:3d:79:81:1b:83:
1a:05:e9:2f:bb:86:5a:79:b6:ea:55:3f:62:bd:28:
71:54:79:88:ae:91:80:54:5a:8c:35:0e:72:49:66:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6F:45:10:3A:89:DE:7F:85:3E:56:8D:09:9F:E7:46:A0:35:14:96
X509v3 Authority Key Identifier:
keyid:EE:87:8D:75:A2:18:0B:3A:68:41:FB:FA:96:C3:9A:90:E1:FA:6A:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oeNdaIYCzpoQfv6lsOakOH6alo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:3e:a8:f5:ab:83:07:b0:b8:32:8d:6b:aa:cc:b7:f7:25:2b:
af:2c:36:3e:d6:62:a7:49:10:de:f4:ff:8b:88:41:85:7e:ef:
74:04:b1:52:23:74:ae:e0:58:99:ba:8d:a1:45:4e:21:e8:b8:
c9:13:05:13:9f:cd:11:29:12:08:26:03:e5:18:25:7b:1c:be:
41:a6:60:27:f7:b3:fb:34:82:36:10:d0:3e:bd:a2:2f:d7:54:
04:55:91:4e:f7:ca:08:40:fd:1e:c6:b5:9e:76:25:b9:5e:73:
8d:23:51:ae:35:85:62:17:22:62:7f:6d:3d:07:aa:7b:7d:92:
71:bb:d3:77:55:4c:4a:23:15:f0:b8:bf:a8:89:b7:5b:05:35:
11:69:37:ee:9f:97:1c:ac:1c:ea:7e:51:58:ea:9e:76:2e:20:
90:70:7b:b5:ae:ef:12:a6:10:1e:32:38:a7:fe:72:77:81:54:
01:3a:6c:3f:cc:92:3f:b8:73:65:a0:49:99:c5:cd:a3:60:82:
5e:62:50:f2:d2:0e:e3:2c:d2:5d:b1:69:4a:88:4b:c1:da:61:
e1:df:d0:e6:ed:1f:6d:33:bb:1d:3e:ac:30:5e:11:29:97:5f:
8b:9b:77:28:80:36:7a:2d:03:fe:8e:6c:13:4d:68:9c:7a:53:
05:9c:cf:a0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NjY0ODExMC8GA1UEBRMoRUU4NzhENzVBMjE4MEIzQTY4NDFGQkZBOTZDMzlBOTBF
MUZBNkE1QTAeFw0yNjA3MjcxMTIzNDBaFw0yNjA4MDMxMTIzNDBaMBgxFjAUBgNV
BAMTDTZhNjczZmJkLTFjODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD1I9NTPi7RdoCN7IaOSaPJpUfyuntMoZtg8Fc2IJ4Vehm0XiuMjWcPXH+wlCf/
d52VR9JzeZg7nVh1lcOiwOVkQkQ2BErZj1OHhNEHex/jX0ZCvkY775lzKY1z7lPq
2i2ntUFNnOJQ93vhplcqUhFQVLEZAt5F+WCxC4xmVIQgh2lL5zO2AWURvpa2awtw
4PDzznvm6NLxGRIgJdzX2rXk68oA9+G0er2VBOygajiedlkybYR8lyeux/PtQCT4
sQk0i4xE/KUZZTnkdyvmdDG7fBihm/COsWLqHVM9eYEbgxoF6S+7hlp5tupVP2K9
KHFUeYiukYBUWow1DnJJZg5BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG29FEDqJ
3n+FPlaNCZ/nRqA1FJYwHwYDVR0jBBgwFoAU7oeNdaIYCzpoQfv6lsOakOH6alow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NjQ4LzYwRjIyMTAyNjg2
MDExRjFCQzU3RUIxNzlFNDdBODg4LzdvZU5kYUlZQ3pwb1FmdjZsc09ha09INmFs
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN29lTmRhSVlDenBvUWZ2NmxzT2FrT0g2YWxvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2
NjQ4LzYwRjIyMTAyNjg2MDExRjFCQzU3RUIxNzlFNDdBODg4LzdvZU5kYUlZQ3pw
b1FmdjZsc09ha09INmFsby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBWPqj1q4MHsLgyjWuqzLf3JSuvLDY+1mKnSRDe9P+LiEGFfu90BLFSI3Su4FiZ
uo2hRU4h6LjJEwUTn80RKRIIJgPlGCV7HL5BpmAn97P7NII2ENA+vaIv11QEVZFO
98oIQP0exrWediW5XnONI1GuNYViFyJif209B6p7fZJxu9N3VUxKIxXwuL+oibdb
BTURaTfun5ccrBzqflFY6p52LiCQcHu1ru8SphAeMjin/nJ3gVQBOmw/zJI/uHNl
oEmZxc2jYIJeYlDy0g7jLNJdsWlKiEvB2mHh39Dm7R9tM7sdPqwwXhEpl1+Lm3co
gDZ6LQP+jmwTTWicelMFnM+g
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:38:21 2026 by rpki-client