
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
File: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json)
Hash identifier: BJJ/tpmj7TYjCNayn6U6sXveEHTqF9GJrlj867+00pk=
Subject key identifier: AD:84:D8:C0:D4:C4:72:5E:64:07:B7:68:13:C2:D2:BC:BF:50:23:7A
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Certificate issuer: /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
Manifest number: 5D
Signing time: Mon 27 Jul 2026 10:28:59 +0000
Manifest this update: Mon 27 Jul 2026 10:28:58 +0000
Manifest next update: Mon 03 Aug 2026 10:28:58 +0000
Files and hashes: 1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: 1TVM50ab+Q2B4kahhXvNbSHcJqKKH23Q532+s0qg6kQ=)
2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Validity
Not Before: Jul 27 10:28:58 2026 GMT
Not After : Aug 3 10:28:58 2026 GMT
Subject: CN=6a6732ea-1efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:6e:fc:51:fd:9e:2f:16:ac:cb:b4:89:e8:
50:b5:6a:c9:75:54:06:5f:1c:13:43:8a:b0:88:e4:
cb:9f:74:01:4b:3e:fc:4c:59:26:f7:06:76:79:42:
5a:21:c9:0e:29:82:42:65:bf:12:72:5b:38:c8:f7:
71:b9:9d:62:9c:ef:8c:1d:11:5d:cb:87:cb:bf:e7:
72:2b:af:4f:a6:0a:13:41:50:00:f2:d4:8d:b6:ff:
39:c8:55:97:ed:9b:d9:7a:e0:3a:06:63:70:59:12:
99:2a:ea:c8:3d:8a:f0:c8:c2:88:44:7b:90:13:5c:
47:62:41:c1:3c:8e:27:27:ad:43:0a:b7:a0:77:1a:
16:5d:44:07:c4:9e:8c:7b:1f:8a:88:34:85:76:5a:
9a:7c:d1:9e:45:85:cc:cb:eb:05:9e:0b:02:49:3b:
c9:37:16:f0:e8:b1:05:81:36:08:b0:69:03:78:e4:
08:5a:91:35:04:46:74:45:67:15:77:27:78:c2:10:
22:d3:a3:8d:7c:9d:be:0d:b4:0e:59:bc:5c:a2:a7:
2c:03:d2:ab:be:94:1b:f0:7f:41:23:e0:80:82:61:
c8:79:67:8b:e2:8b:55:fd:5e:02:d0:4d:b8:c9:2f:
9b:fd:14:83:c1:cf:b1:22:19:78:21:04:be:9a:56:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:84:D8:C0:D4:C4:72:5E:64:07:B7:68:13:C2:D2:BC:BF:50:23:7A
X509v3 Authority Key Identifier:
keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c8:c4:f5:12:47:53:be:1d:d0:ad:87:14:20:b9:b7:5f:19:
ec:ce:77:39:03:36:3f:5c:23:4b:20:67:59:cc:d2:e1:e1:98:
f6:19:49:ee:bb:c0:00:d3:4e:b2:86:52:31:2d:6a:b0:26:5c:
8b:40:01:32:1f:cb:3e:b9:8c:c6:a4:8c:f3:82:6b:89:f5:d7:
ce:28:a8:b5:bc:c5:54:3f:30:06:c8:fd:3d:d3:3d:f6:3e:68:
8c:53:01:47:13:1c:42:5b:43:e4:d8:b5:ad:62:07:42:8e:34:
85:42:98:3f:fc:af:5b:c9:dc:a7:53:7a:71:53:1c:61:54:1e:
11:f4:88:6a:c4:3d:52:ea:77:d5:29:fc:b5:3e:8a:c2:8a:2f:
83:0b:59:38:c3:4f:04:7a:d3:07:0e:b1:a2:5d:f1:a5:83:b8:
c3:12:68:7e:ca:9a:10:58:0d:39:4c:b4:ff:55:69:bc:fb:9a:
8e:84:b4:4f:0e:18:c1:ab:8e:07:1e:ec:6e:78:b0:ef:a5:78:
49:71:e2:fc:36:d0:61:67:28:c7:2d:5d:bd:39:4b:a0:b3:61:
1b:19:54:af:2f:61:bc:70:11:b9:49:23:68:3f:3c:c4:4f:a8:
a3:db:7f:82:20:d8:cb:03:9c:99:97:50:c1:23:6b:14:5e:85:
8f:2f:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:49 2026 by rpki-client