
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json)
Hash identifier: bAl4+leCND369QPUql47ahASQDnvR/Ga/HnTjo19BPI=
Subject key identifier: 3D:14:A2:F1:62:10:54:FC:0D:83:CD:DE:A2:5A:2E:7E:8F:18:A0:F6
Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Certificate serial: 0A15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
Manifest number: 0A0C
Signing time: Thu 16 Apr 2026 19:43:23 +0000
Manifest this update: Thu 16 Apr 2026 19:43:23 +0000
Manifest next update: Thu 23 Apr 2026 19:43:23 +0000
Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: ZBL6VbC9SSzHVZZPXrILTzLmLu0FNtw/ZluPp8Sz+Gk=)
2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: luj1jghbJUSAlg+pJVieNyEPVcwUND8/JqGx36FNESg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2581 (0xa15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Validity
Not Before: Apr 16 19:43:23 2026 GMT
Not After : Apr 23 19:43:23 2026 GMT
Subject: CN=69e13bdb-aaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:35:70:22:d3:70:89:24:fb:84:de:4c:1d:96:
35:18:7d:b8:4e:4c:f4:e9:f2:3f:6e:a5:a6:7f:08:
ec:cb:10:72:83:39:c9:91:1b:ab:4f:cd:ce:10:de:
81:02:09:32:3e:2d:f3:e6:5b:ed:c7:c1:b2:ff:fe:
7d:88:6b:60:e1:1a:34:5f:b8:ea:e5:e6:22:07:3e:
2e:81:a2:32:89:09:96:6c:5d:c6:4a:ae:67:aa:37:
8d:db:02:71:62:90:87:3d:81:67:56:ff:87:2a:34:
72:4b:48:50:c0:ce:e7:7b:f3:ca:59:85:b6:af:5c:
9b:a2:7b:41:35:1e:4f:96:53:ee:97:c2:f5:6d:dc:
22:16:b6:35:46:79:68:1e:15:65:5f:51:c9:1b:c1:
5a:c2:3f:fd:39:20:f9:41:27:4a:1d:1f:7f:0c:94:
f2:f9:af:d1:17:66:4f:80:f4:e1:e6:80:64:c7:ee:
1d:e6:d0:53:0e:0d:eb:48:b8:a6:08:80:1a:3b:13:
30:8c:2f:fa:f2:ac:92:b9:7a:28:28:e0:ef:4e:2f:
e9:f6:dd:44:22:25:7d:c9:84:94:cd:08:ef:21:ea:
1a:6c:ec:77:4b:fe:c0:31:9a:66:18:58:48:fb:30:
c6:34:ce:3e:4c:b8:a4:45:61:06:de:12:b7:2d:e5:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:14:A2:F1:62:10:54:FC:0D:83:CD:DE:A2:5A:2E:7E:8F:18:A0:F6
X509v3 Authority Key Identifier:
keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ae:36:6c:e1:17:1f:65:4d:4f:f8:05:46:73:e0:e3:06:cd:
7f:ee:82:74:81:34:89:6a:6f:72:16:aa:52:bc:ee:2b:25:f8:
25:63:6f:34:38:38:4e:55:09:21:64:89:06:0f:f4:48:2c:59:
e5:af:1a:0a:d5:ce:2f:f1:36:39:92:42:1c:fc:ac:03:a9:b7:
32:c7:ab:bb:6b:f9:e6:df:a5:df:89:39:bd:96:c7:c2:bd:16:
4d:1d:d5:bd:91:d7:43:76:cf:d1:ff:92:b1:56:c1:de:b9:d7:
c9:4e:8f:9d:b4:43:cb:ee:df:8d:0b:dd:f9:42:d1:04:25:4b:
c2:f0:02:ea:0c:b2:21:f3:84:14:20:79:00:c4:4b:ea:e3:5c:
f2:95:ff:08:cc:16:b7:7b:27:02:58:d3:06:f3:18:48:5a:8d:
e1:e6:20:c1:61:0c:bd:fa:72:c3:b8:3f:65:24:00:34:1d:91:
cb:7b:21:ff:f9:a1:49:ee:84:d8:ad:f3:9f:b3:05:11:12:10:
28:5e:7b:e7:9d:8a:3b:1d:6c:10:17:ae:e1:3c:17:76:36:fb:
8b:c2:c1:90:0a:0d:5f:f5:1e:ca:9a:fc:49:38:ca:5b:15:d8:
51:10:1a:88:fa:83:d9:43:9e:88:7c:f8:7d:7b:5e:7f:92:6b:
68:85:c7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:33 2026 by rpki-client