
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
File: 7bQ_87hP5VlboMvE9ruHNxPkG7I.mft (raw, json)
Hash identifier: n/S9fWJXZsfc2cY2izd0VjNZpI4PihoXDbHL/q/lPAY=
Subject key identifier: 1F:6C:45:08:32:86:8B:E3:E4:28:71:9D:D4:0D:46:70:4E:45:D9:81
Authority key identifier: ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
Certificate issuer: /CN=A9167D85/serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
Certificate serial: 0751
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
Manifest number: 0745
Signing time: Thu 16 Apr 2026 21:39:53 +0000
Manifest this update: Thu 16 Apr 2026 21:39:52 +0000
Manifest next update: Thu 23 Apr 2026 21:39:52 +0000
Files and hashes: 1: 7bQ_87hP5VlboMvE9ruHNxPkG7I.crl (hash: bl1V7cy1NIrWOOPye9k42Z/qS16JPHlVgb15ArxPWCA=)
2: 44E9156C730811EC89C1CE31C4F9AE02.roa (hash: Y08aauLWlD/3KbKUWbhD8x6QFYVQbXZtknrvh7LrAZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl
rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873 (0x751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167D85, serialNumber=EDB43FF3B84FE5595BA0CBC4F6BB873713E41BB2
Validity
Not Before: Apr 16 21:39:52 2026 GMT
Not After : Apr 23 21:39:52 2026 GMT
Subject: CN=69e15729-1868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:30:85:fd:db:03:8f:be:a9:72:4e:27:11:
be:fa:6a:c5:d2:44:c7:80:0b:b9:11:34:41:bd:59:
0e:c7:7e:a5:ed:6b:ba:df:84:9f:75:ae:ee:48:21:
fd:71:89:c2:1f:1a:58:5c:c9:b1:c8:d0:b6:c0:3b:
8a:1e:1c:71:f1:eb:34:15:dc:b2:b5:41:c6:ba:d8:
c2:4f:9e:0c:93:9a:e9:b5:e9:d2:b3:c4:36:a7:85:
17:d4:94:60:9f:9f:07:9c:d4:4c:fc:f9:d4:bb:16:
d4:6f:07:92:ad:4d:17:81:a9:4d:4c:b0:e5:47:1c:
c3:77:a1:78:4b:1d:9d:82:8f:76:1e:b9:66:6d:f1:
1e:11:56:f0:e7:9d:a3:ad:39:96:f3:fd:56:be:53:
87:b6:51:2e:c0:39:a9:9b:44:97:ec:1a:f7:13:7b:
1c:1b:c8:8a:bc:53:73:e8:d6:93:5a:10:39:d8:0f:
c9:1b:43:af:a8:21:5e:d9:2d:61:01:32:3e:e1:ff:
e0:14:3c:31:06:17:60:db:a3:85:d6:98:ac:4c:1a:
29:09:57:7f:e8:e1:79:2d:18:b9:3a:44:4a:44:e1:
72:51:bb:f2:8a:47:55:af:02:0d:ec:82:63:d0:fa:
63:d1:b4:a5:a3:99:9e:c0:fa:3c:62:64:7c:63:77:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:45:08:32:86:8B:E3:E4:28:71:9D:D4:0D:46:70:4E:45:D9:81
X509v3 Authority Key Identifier:
keyid:ED:B4:3F:F3:B8:4F:E5:59:5B:A0:CB:C4:F6:BB:87:37:13:E4:1B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bQ_87hP5VlboMvE9ruHNxPkG7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D85/71A6F7D46C6C11EBB9C79D4CC4F9AE02/7bQ_87hP5VlboMvE9ruHNxPkG7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:cc:b3:be:c6:ab:dd:e4:aa:f0:7b:f2:60:61:78:44:27:
e6:04:ff:25:19:27:33:e2:c2:74:92:78:1e:1b:7f:0f:31:a8:
a6:92:82:17:94:02:d5:b3:49:17:d5:a6:93:5c:62:52:c6:dc:
8d:90:e1:07:73:31:1a:bb:2d:2f:b3:bb:5a:e0:8b:e0:29:4e:
56:76:41:5a:0a:44:bb:3a:3b:ff:90:68:a9:66:ce:ea:d4:fc:
b0:2b:42:96:18:88:26:35:6b:73:c0:84:62:6d:c6:44:ec:73:
de:3b:c2:e8:db:f4:1e:18:91:f8:d4:cd:c4:33:e7:29:df:ae:
c5:15:1d:99:e2:1b:d3:00:d1:e6:82:34:65:83:6f:e2:66:62:
ec:1c:cd:4b:d9:3d:9b:1c:af:b1:5c:b2:07:75:29:38:f2:fc:
f6:fa:a3:7f:fb:ca:54:65:1f:76:7d:92:e9:89:0c:49:e6:03:
77:e6:cb:96:3d:0c:51:44:d0:09:2c:05:ab:ca:07:e5:2b:88:
d1:91:1d:95:a0:7e:44:d9:26:1a:b6:72:3a:02:15:8f:f9:6a:
39:0e:00:93:60:6d:14:b4:41:67:28:5a:31:7f:2e:e9:40:f8:
f4:1c:52:16:f3:61:13:5c:39:f2:d4:83:00:c2:30:50:1f:e9:
22:0b:6d:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdEODUxMTAvBgNVBAUTKEVEQjQzRkYzQjg0RkU1NTk1QkEwQ0JDNEY2QkI4NzM3
MTNFNDFCQjIwHhcNMjYwNDE2MjEzOTUyWhcNMjYwNDIzMjEzOTUyWjAYMRYwFAYD
VQQDEw02OWUxNTcyOS0xODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoqMwhf3bA4++qXJOJxG++mrF0kTHgAu5ETRBvVkOx36l7Wu634Sfda7uSCH9
cYnCHxpYXMmxyNC2wDuKHhxx8es0FdyytUHGutjCT54Mk5rptenSs8Q2p4UX1JRg
n58HnNRM/PnUuxbUbweSrU0XgalNTLDlRxzDd6F4Sx2dgo92HrlmbfEeEVbw552j
rTmW8/1WvlOHtlEuwDmpm0SX7Br3E3scG8iKvFNz6NaTWhA52A/JG0OvqCFe2S1h
ATI+4f/gFDwxBhdg26OF1pisTBopCVd/6OF5LRi5OkRKROFyUbvyikdVrwIN7IJj
0Ppj0bSlo5mewPo8YmR8Y3cEoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9sRQgy
hovj5ChxndQNRnBORdmBMB8GA1UdIwQYMBaAFO20P/O4T+VZW6DLxPa7hzcT5Buy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Q4NS83MUE2RjdENDZD
NkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVWbGJvTXZFOXJ1SE54UGtH
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdiUV84N2hQNVZsYm9NdkU5cnVITnhQa0c3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0Q4NS83MUE2RjdENDZDNkMxMUVCQjlDNzlENENDNEY5QUUwMi83YlFfODdoUDVW
bGJvTXZFOXJ1SE54UGtHN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAJnMs77Gq93kqvB78mBheEQn5gT/JRknM+LCdJJ4Hht/DzGoppKCF5QC1bNJ
F9Wmk1xiUsbcjZDhB3MxGrstL7O7WuCL4ClOVnZBWgpEuzo7/5BoqWbO6tT8sCtC
lhiIJjVrc8CEYm3GROxz3jvC6Nv0HhiR+NTNxDPnKd+uxRUdmeIb0wDR5oI0ZYNv
4mZi7BzNS9k9mxyvsVyyB3UpOPL89vqjf/vKVGUfdn2S6YkMSeYDd+bLlj0MUUTQ
CSwFq8oH5SuI0ZEdlaB+RNkmGrZyOgIVj/lqOQ4Ak2BtFLRBZyhaMX8u6UD49BxS
FvNhE1w58tSDAMIwUB/pIgtteA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:27 2026 by rpki-client