
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
File: D7ep-f-5NrdU2MC2yClQpAHeosc.mft (raw, json)
Hash identifier: 3xFjAmYUDb17D2Fcify3mFbkD6vljq8lmHeK5MKTkHU=
Subject key identifier: 42:4A:DC:7B:F0:BD:56:0A:60:A4:47:DF:3D:F2:B5:ED:63:B0:C1:0A
Authority key identifier: 0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7
Certificate issuer: /CN=A9168E98/serialNumber=0FB7A9F9FFB936B754D8C0B6C82950A401DEA2C7
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
Manifest number: 03
Signing time: Mon 27 Jul 2026 07:27:55 +0000
Manifest this update: Mon 27 Jul 2026 07:27:54 +0000
Manifest next update: Mon 03 Aug 2026 07:27:54 +0000
Files and hashes: 1: D7ep-f-5NrdU2MC2yClQpAHeosc.crl (hash: +QoR8VxmKHyqox3YoIK303CcmYU52OqZh4Z65F9vTIY=)
2: AA50EC82898C11F1B30FA3E93511F970.roa (hash: ASgVXSQlKnnYot70D1erTIBPWX/qbO4yBe47XAOtnRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.crl
rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168E98, serialNumber=0FB7A9F9FFB936B754D8C0B6C82950A401DEA2C7
Validity
Not Before: Jul 27 07:27:54 2026 GMT
Not After : Aug 3 07:27:54 2026 GMT
Subject: CN=6a67087b-4374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:c7:ab:b8:01:8a:76:68:31:1e:0a:0e:35:
f0:26:7a:cb:8f:4d:c4:91:21:c2:1c:0e:a2:ad:de:
dc:91:a6:be:77:cc:e5:0e:76:48:0e:d9:3b:9e:70:
92:9c:a8:92:60:a7:10:a3:b9:c1:9f:d3:84:4e:03:
62:86:24:b0:c1:50:a1:44:11:cc:1b:3e:3a:72:8b:
a5:22:af:95:f4:89:75:6b:11:4a:f6:34:36:ab:56:
25:5b:4e:04:87:7d:90:97:3a:51:32:06:2a:c8:bf:
c8:34:b8:49:86:6d:b0:38:97:a7:fe:b7:aa:3a:a7:
02:7c:2c:57:33:c0:1f:d4:9c:9c:ef:5c:9c:68:12:
96:65:fd:54:60:77:9e:03:17:a3:85:47:da:13:02:
d2:e1:36:0e:15:30:01:c9:bf:bc:cb:e9:88:c2:22:
86:bd:e1:d7:a9:02:59:bc:57:5d:c7:19:5a:35:1c:
08:46:87:72:86:37:04:21:c3:e0:67:33:5a:b1:2f:
51:14:ae:f2:2a:54:84:2c:e8:3f:93:f1:4a:3e:72:
c7:9d:e2:1c:c1:eb:08:af:2e:ef:cc:38:17:5d:42:
0c:c6:4c:a0:4f:c9:a8:6e:66:0d:1a:13:f9:0c:c4:
12:dd:f8:8e:d3:65:13:de:ea:50:33:0f:8b:85:eb:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:DC:7B:F0:BD:56:0A:60:A4:47:DF:3D:F2:B5:ED:63:B0:C1:0A
X509v3 Authority Key Identifier:
keyid:0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:cc:6b:51:bc:ef:47:d7:32:ca:f2:a1:15:ca:73:d9:c8:ea:
02:98:30:45:5f:64:73:d1:dc:86:55:e5:65:5f:a2:79:7b:81:
05:69:25:85:90:55:89:be:26:b9:51:d5:76:7d:8d:a4:ea:40:
97:91:d1:6e:09:66:0e:6a:ff:fd:e5:4e:a0:4d:3e:4a:1f:d2:
93:45:3f:f6:b1:71:f6:72:4f:93:f6:fb:a8:5f:6a:ee:4b:c2:
cd:99:c0:0f:69:b0:42:28:78:1d:66:a6:1e:8a:a3:39:0a:15:
5d:28:57:f4:40:49:9c:bf:3d:72:09:20:fa:82:99:61:90:fb:
e7:df:18:b8:46:d6:3d:ce:04:ad:58:fa:81:4a:96:40:9c:26:
e2:4b:be:68:cc:3e:91:57:ab:3b:cf:23:37:fa:ae:58:bb:7c:
87:26:64:ec:d8:d5:d3:16:0c:e9:be:e0:34:ef:29:6c:4c:ac:
c5:58:85:88:db:be:3f:66:bb:e6:ac:5a:b3:ba:18:54:17:68:
f9:72:f2:82:86:d2:1d:a5:2b:6d:ce:45:b1:3f:b0:3e:44:81:
79:e8:e2:de:1b:30:04:9c:e5:25:40:a1:c7:76:b4:0f:a3:44:
68:fe:71:c6:7f:9a:a5:9a:86:bf:e1:48:1f:0c:08:1d:85:75:
3f:84:6e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:41:15 2026 by rpki-client