
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json)
Hash identifier: Okdb8y/I5HZQeA4t7W4Qy1VvI1XWe7/yaNyAS1nqdg8=
Subject key identifier: 62:C5:D7:42:7D:3B:34:63:C0:86:97:5A:7E:36:3C:7B:6E:1F:93:D0
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial: 1AD8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
Manifest number: 1AA5
Signing time: Wed 04 Nov 2026 16:22:36 +0000
Manifest this update: Wed 04 Nov 2026 16:22:35 +0000
Manifest next update: Wed 11 Nov 2026 16:22:35 +0000
Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: 6YanmUEI7+KT07uBblfFOExZ8yq37DGp0sIv6RG6sNA=)
2: CBBF13566EA911F1979A4FB45FA30FBC.roa (hash: InjAFjFfD9Kqc+Wu+wt8coAIdhYTvUAL4QI7Q5j856I=)
3: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: +4dDlburVO2MmfNARrkvQtCk1fegQCkSHo+kZlpjT9U=)
4: oE5Js6fuq9GoJiD5YEoKTn7lWD8.asa (hash: XOfYdUr0l2VrVLv76J2LlNBLB7DRmoLstUjCzoxLsnY=)
5: 545743246D1911E7A4448D81C4F9AE02.roa (hash: aF9bVVw6Gwu2L83wIJh2aO8mDQcLr1IwMLw9hro7LqM=)
6: DCD75050315011F0BC916269C4F9AE02.roa (hash: it0EUJuF/f2xwJeSJJN9QRAuHCVD+ovbX5Fq/ZrMmKg=)
7: 361BDEB6315011F0A08FB267C4F9AE02.roa (hash: hQaqyHy+IglmfnIs2mH5KDdafmYlJZXnRBxvCuoPjT4=)
8: apb7pbLzTh2padrozWKikjQdy4Q.asa (hash: j3Yhkh9MeeMK19J3d4fQ/WfPoNUH53OkQJ4FYlVEwwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 16:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6872 (0x1ad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Validity
Not Before: Nov 4 16:22:35 2026 GMT
Not After : Nov 11 16:22:35 2026 GMT
Subject: CN=6aeb5bcc-e421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:6d:39:f0:dc:6c:aa:e4:97:1f:bf:a6:10:
75:b1:15:cc:a2:03:ed:75:8a:10:68:4e:d6:25:29:
3a:7a:4c:0d:e2:d2:ce:0d:bf:37:20:b0:dd:e8:78:
a6:69:41:96:31:e4:84:be:14:33:50:db:64:7b:d7:
05:b4:d5:9f:ec:db:3d:fd:54:6c:14:4f:04:88:a5:
ec:ff:e4:05:9a:f1:3d:59:1d:ad:d2:b0:3a:b2:ad:
6f:dc:86:be:30:af:97:fd:34:63:1b:a0:40:4a:80:
d7:ef:07:12:aa:b2:fb:94:a1:43:ea:e6:66:5b:48:
37:8f:12:f6:81:32:c2:49:26:e1:ba:78:13:34:45:
7f:3a:bc:7a:73:8b:99:fe:db:f5:2f:4d:59:8d:ea:
21:40:24:5d:52:d9:78:f7:e1:d7:72:25:08:9c:e1:
20:26:66:5b:8b:c0:a5:8a:e6:39:25:d2:c6:2c:44:
16:8a:f1:9a:c5:6d:60:03:8a:ae:f2:32:20:b1:b5:
2c:ed:91:c5:68:4e:e8:c5:ce:56:95:e0:9b:e7:12:
08:6c:48:3e:50:65:5c:a2:0c:06:93:16:8c:2d:43:
f1:c6:05:0c:57:f6:97:83:8f:bf:a8:34:1c:6a:b3:
b2:a6:49:81:50:cb:8f:b9:6c:35:4f:a8:0c:60:48:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C5:D7:42:7D:3B:34:63:C0:86:97:5A:7E:36:3C:7B:6E:1F:93:D0
X509v3 Authority Key Identifier:
keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:19:ff:95:14:5d:48:79:ee:a9:db:2a:1b:ae:a6:37:65:a6:
8b:b2:64:31:fe:25:6c:bd:f4:6b:3f:6a:f4:ab:2d:12:d0:c0:
94:f0:8a:36:89:3a:df:06:f0:cc:9a:36:aa:b4:7f:07:33:4b:
da:de:07:9c:0c:ae:63:36:24:eb:17:a0:5a:fa:36:98:3e:34:
8c:73:93:28:d1:1a:d1:e0:6e:72:16:f1:01:88:76:b7:c9:e2:
54:85:54:ee:d1:0f:6d:a0:a7:98:74:81:00:a1:99:74:ad:da:
2c:a1:2b:e3:3b:1f:2d:39:20:8c:2b:f4:fb:5e:87:89:3b:8e:
2f:c8:92:10:a5:ed:8e:f6:bd:e7:5f:37:a0:ce:6e:93:a7:a6:
7e:90:64:00:d6:d9:f3:86:16:99:60:1e:f8:60:35:22:bd:a1:
ca:25:d6:bd:89:41:8b:9e:07:d0:89:97:51:40:53:44:6c:40:
68:30:15:aa:fe:6f:4d:70:5f:5d:39:f2:0d:49:c7:3f:d2:5c:
90:55:8f:2f:b3:9e:3e:bc:c4:a3:79:a0:01:38:89:7b:28:35:
fd:6d:bb:d7:ba:72:a6:87:a3:28:34:1d:91:ef:04:b5:55:69:
7d:72:c5:59:e0:79:54:9e:6e:1f:46:48:7d:c0:3b:33:66:92:
a5:a1:73:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2
REI3RTZDRTUwHhcNMjYxMTA0MTYyMjM1WhcNMjYxMTExMTYyMjM1WjAYMRYwFAYD
VQQDEw02YWViNWJjYy1lNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwcdtOfDcbKrklx+/phB1sRXMogPtdYoQaE7WJSk6ekwN4tLODb83ILDd6Him
aUGWMeSEvhQzUNtke9cFtNWf7Ns9/VRsFE8EiKXs/+QFmvE9WR2t0rA6sq1v3Ia+
MK+X/TRjG6BASoDX7wcSqrL7lKFD6uZmW0g3jxL2gTLCSSbhungTNEV/Orx6c4uZ
/tv1L01ZjeohQCRdUtl49+HXciUInOEgJmZbi8CliuY5JdLGLEQWivGaxW1gA4qu
8jIgsbUs7ZHFaE7oxc5WleCb5xIIbEg+UGVcogwGkxaMLUPxxgUMV/aXg4+/qDQc
arOypkmBUMuPuWw1T6gMYEi9gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGLF10J9
OzRjwIaXWn42PHtuH5PQMB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE
MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhx
ODlHdlhHcThBeHB0dC1iT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaRn/lRRdSHnuqdsqG66mN2Wmi7JkMf4lbL30az9q9KstEtDAlPCKNok63wbw
zJo2qrR/BzNL2t4HnAyuYzYk6xegWvo2mD40jHOTKNEa0eBuchbxAYh2t8niVIVU
7tEPbaCnmHSBAKGZdK3aLKEr4zsfLTkgjCv0+16HiTuOL8iSEKXtjva95183oM5u
k6emfpBkANbZ84YWmWAe+GA1Ir2hyiXWvYlBi54H0ImXUUBTRGxAaDAVqv5vTXBf
XTnyDUnHP9JckFWPL7OePrzEo3mgATiJeyg1/W2717pypoejKDQdke8EtVVpfXLF
WeB5VJ5uH0ZIfcA7M2aSpaFz7g==
-----END CERTIFICATE-----
Generated at Thu Nov 5 10:52:04 2026 by rpki-client