
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json)
Hash identifier: 4Mr6zHY7b1sNyXJgKmwiWA+UVfuXGkgApILXUm0JNDM=
Subject key identifier: FE:BD:72:29:0F:E6:75:44:BA:10:25:F5:CA:43:86:D3:BA:AB:79:B8
Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0
Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
Certificate serial: 35AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
Manifest number: 3580
Signing time: Tue 28 Jul 2026 14:16:50 +0000
Manifest this update: Tue 28 Jul 2026 14:16:50 +0000
Manifest next update: Tue 04 Aug 2026 14:16:50 +0000
Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: 5hHuBO3Ammq/J/RFcxg7AEktJCG9uWubkynhlWCwyy0=)
2: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: cXxlTlh2e8x7rwEZccluqoXbQOcppLc/t/OKxLCL9Es=)
3: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: iodpqPzJXCkEMjXNizFOPmkITOS3ty8iD6q0/vbWTBk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl
rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13740 (0x35ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
Validity
Not Before: Jul 28 14:16:50 2026 GMT
Not After : Aug 4 14:16:50 2026 GMT
Subject: CN=6a68b9d2-2530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:ec:7d:5a:51:4a:ac:b7:24:b3:fe:cb:9f:
40:9f:6c:04:c3:5b:b3:06:77:e9:4d:4b:2c:0b:0e:
c8:63:4f:8a:e6:3c:d7:4a:50:85:d5:cf:32:5e:c1:
5b:00:73:88:6a:92:0d:d2:aa:0c:a0:11:24:33:f0:
73:cf:d6:a4:24:38:80:38:f0:8e:b2:37:84:99:25:
64:5b:0c:17:a2:0a:11:5a:60:ae:13:55:7c:00:da:
16:b5:88:7e:69:3a:6a:7a:d6:31:c8:d9:e0:0c:d4:
b4:9b:90:5d:1b:9a:21:9a:62:48:43:82:46:94:a1:
c1:18:15:cd:c2:f7:18:63:65:03:f4:81:4d:aa:2f:
8c:fe:ff:e4:80:e6:c9:9e:05:61:64:50:3c:8c:54:
bd:56:b4:8d:22:12:d0:03:98:9a:8e:84:9e:01:93:
bb:52:50:fd:2a:74:46:90:3a:5f:a7:11:3b:22:6b:
1b:95:c5:e2:ee:1c:0a:5f:ec:1e:f7:8d:52:50:78:
95:81:7e:00:89:ab:1b:b9:d4:8f:ec:b0:23:cd:c5:
2c:92:3d:8f:7f:a4:b7:52:a6:d8:fc:ca:8f:05:e0:
f7:1c:ee:52:01:2a:66:ef:a1:c5:5c:c0:53:5f:a6:
a6:aa:15:6b:89:2a:17:22:cb:96:ea:a3:3f:32:19:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BD:72:29:0F:E6:75:44:BA:10:25:F5:CA:43:86:D3:BA:AB:79:B8
X509v3 Authority Key Identifier:
keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:4c:6a:c7:47:53:cb:de:fd:c8:c0:9a:d5:f2:c1:3f:e5:79:
1c:d4:3a:2a:b3:97:b0:d3:6c:3f:95:da:00:35:c7:e5:a7:5f:
3b:c5:e8:15:c7:9b:7d:ca:26:f5:de:69:80:bb:f4:3e:69:01:
15:6a:a0:ad:28:05:4e:3d:0b:cc:a9:4d:73:35:90:19:b4:de:
c4:4c:c3:38:62:57:a8:88:29:0b:4c:92:c8:8e:d2:9b:d1:47:
ea:48:1b:8f:90:40:75:ac:bc:75:d1:55:ea:b2:1d:c8:ff:52:
ed:98:94:df:30:7d:6d:26:99:c6:91:35:b9:46:70:80:c6:ef:
ca:f6:3f:3c:96:12:0b:3f:22:63:c4:bf:94:8f:c1:3f:25:9f:
fa:b9:c1:0e:39:93:b9:1a:2a:d9:8a:2e:d0:fe:d8:19:2c:7a:
a8:01:78:4f:ac:c2:70:f5:7d:0f:71:13:65:66:a1:69:3a:1a:
e0:50:73:a0:55:0b:4e:ac:87:f5:f3:4b:ff:fc:9c:da:19:25:
0f:db:b1:d3:db:88:c9:64:d6:0a:47:20:5b:1a:2e:fa:61:1b:
6b:3b:ad:f4:f3:72:03:46:3a:c9:d2:dc:6d:de:a7:c0:8f:13:
45:47:f9:ca:a6:b3:66:66:17:56:40:a0:cf:31:ac:66:b3:94:
b8:e9:12:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:37:43 2026 by rpki-client