
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json)
Hash identifier: KCFQFqDd3Kb6Rb9+vcngKNbAtxVb2lE+eKOcCBfDpRA=
Subject key identifier: 52:13:4D:20:6B:37:D1:59:FD:D9:D5:DE:0D:8E:6E:32:96:02:E8:C2
Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Certificate serial: 17DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
Manifest number: 17AD
Signing time: Fri 04 Sep 2026 16:33:24 +0000
Manifest this update: Fri 04 Sep 2026 16:33:23 +0000
Manifest next update: Fri 11 Sep 2026 16:33:23 +0000
Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: 9hWLIfmGX5ruLnwZQlr5wi/QVr2psDGmg6ywwhhiuCc=)
2: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: puJkWVITf2df7u3Qj+93ztEl+0qqlVGDPJp1OeHAKxQ=)
3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: hPIaiMSBFYLOvrueCE00fDgAwAADdWAf1f9rpZpgG+w=)
4: 211910241E9E11F1A28347ED0E3D8C67.roa (hash: ZSTWW9qrTYokmi90xJvxyauGPHUOECGBx3bhI8hlBGM=)
5: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: WA8xCRlxR3rKk8ClNGxGNEmsKJNt1HuKBEMk6slXSYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6111 (0x17df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8
Validity
Not Before: Sep 4 16:33:23 2026 GMT
Not After : Sep 11 16:33:23 2026 GMT
Subject: CN=6a9af2d4-19d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:ce:e2:83:ab:e2:57:54:a0:6c:74:8c:a3:
75:b3:db:bb:fb:18:89:bd:8a:c9:9c:80:a6:65:02:
69:42:df:59:01:ec:80:4b:a1:34:fd:93:f8:30:03:
c3:23:e8:c2:ea:56:a4:19:1d:76:33:7e:b3:88:c8:
2b:6b:9d:a0:35:d3:0b:c3:48:92:96:00:57:24:07:
04:89:86:4f:f1:2a:dc:25:42:94:5b:76:52:d0:79:
af:30:3e:d9:d1:dd:f9:53:7f:59:27:11:d3:fc:8c:
fd:d4:96:58:11:5e:c9:35:d1:de:57:82:ff:e6:86:
f3:95:a0:34:ac:37:79:60:ef:8e:14:80:e3:29:0a:
2f:b4:25:62:20:d6:36:64:38:7d:d1:37:69:fb:9c:
d1:d2:0c:ce:04:a7:51:43:f7:57:0b:36:26:9e:0f:
f6:0c:5c:0b:2b:27:ae:4f:b8:b1:b1:91:cc:d4:04:
a4:e4:06:f0:8d:71:e7:9c:8c:00:f1:a8:dd:a8:72:
85:7c:48:f5:dd:54:36:f3:07:b8:67:b3:1c:57:dc:
e3:6c:33:bf:2c:cc:ed:6c:6f:0d:10:66:f5:e3:c4:
2e:88:bb:7e:4d:52:10:89:6d:38:75:f2:4c:82:2b:
dd:cb:d2:08:f1:fc:82:87:40:76:41:32:bc:ff:a1:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:4D:20:6B:37:D1:59:FD:D9:D5:DE:0D:8E:6E:32:96:02:E8:C2
X509v3 Authority Key Identifier:
keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:b2:28:7b:a0:a8:db:d1:44:af:57:38:da:98:3e:70:b2:a1:
f0:4b:96:de:f0:d3:d6:af:57:e5:90:0a:58:84:97:72:05:8c:
c3:65:dd:e9:8d:33:dd:32:4e:b0:77:23:37:65:d1:49:ee:38:
32:1f:c9:21:44:c6:98:27:a9:16:9c:2f:e5:1a:4e:22:e8:3c:
2c:c9:0d:32:42:8f:89:42:f1:23:75:e5:71:ec:b6:e2:73:bb:
0d:fb:6a:ba:2f:fc:5c:61:1e:28:82:72:86:99:5d:c2:c4:d2:
94:eb:69:f9:9c:cf:9a:6e:89:63:92:55:28:b3:77:85:7a:44:
1f:2d:7a:b0:61:02:ee:ae:24:8b:22:7f:92:05:44:66:bf:e6:
6f:e8:39:18:e7:a4:4c:7d:e2:39:22:88:73:94:60:19:32:76:
e4:2e:07:b2:5a:2b:bc:93:fc:13:27:80:b5:2d:21:95:3a:87:
9a:08:cf:4b:16:2b:77:21:c3:9c:3c:86:74:55:3b:15:8e:01:
48:f4:0a:7b:a7:23:15:91:b1:fc:b0:d2:c8:87:b8:80:be:76:
a0:da:c2:c5:b4:79:84:96:79:5f:cf:14:e7:82:f6:6d:19:49:
4c:6a:cb:67:34:e8:f9:fc:48:68:9d:61:d3:7b:3b:28:e4:68:
be:d2:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:22:30 2026 by rpki-client