
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier: a0wNR+Zdp9K9SVgS5/DqCMLHE4P4I4nc+bXntg188bM=
Subject key identifier: 78:A8:26:B7:69:F7:AE:A9:D6:C7:C7:71:32:26:A8:96:4B:AC:3C:A3
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 1A47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number: 1A2A
Signing time: Wed 02 Sep 2026 16:21:16 +0000
Manifest this update: Wed 02 Sep 2026 16:21:15 +0000
Manifest next update: Wed 09 Sep 2026 16:21:15 +0000
Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: 9uRIpE5rKxoGQWBKtVAotPrKWUhdNIxN9Be2njJzA38=)
2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: lNZvb1hOs/cWIz88gsfEJjScBqxN5z+Y27yw+tnMCds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 16:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6727 (0x1a47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Validity
Not Before: Sep 2 16:21:15 2026 GMT
Not After : Sep 9 16:21:15 2026 GMT
Subject: CN=6a984cfc-08c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:fc:86:89:2c:27:92:67:77:f1:fa:1c:67:
03:2c:3a:18:66:35:03:b2:eb:65:ae:3a:75:e9:c8:
a1:10:b6:2f:05:3b:f7:8a:e2:b0:a3:06:79:d9:73:
e0:1a:0d:df:5d:7a:c2:28:cf:47:d1:b2:40:c7:47:
64:fd:0d:b4:a0:0a:3d:b6:43:82:5b:43:50:37:8a:
40:32:0d:54:55:a1:f0:10:e2:b3:22:ed:90:71:63:
72:9e:16:e4:bc:e0:13:20:c0:59:71:35:43:2e:25:
4b:61:d7:64:78:9f:dd:10:4c:6a:f3:87:c3:27:bc:
ac:79:c1:07:e5:b6:0f:9d:49:db:52:7b:ce:94:f1:
6a:56:63:a8:42:21:79:13:9a:fb:7d:db:87:88:3c:
b9:a3:7c:e5:87:cd:84:d9:19:df:04:25:fa:b6:ad:
a5:dd:08:d8:ae:db:5c:ce:24:12:8e:0d:b1:82:78:
bd:4a:67:41:7a:39:04:b0:a7:d3:63:0c:6d:ee:c2:
04:73:22:89:f1:be:11:52:5a:c2:4b:85:20:83:46:
8b:89:df:6c:95:45:d2:cd:39:65:af:32:55:15:a4:
7e:bc:b1:c1:f9:07:a3:79:58:21:77:ae:17:b1:04:
0a:a5:da:79:ef:a7:eb:7f:b7:ce:4e:2f:33:48:fc:
7f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A8:26:B7:69:F7:AE:A9:D6:C7:C7:71:32:26:A8:96:4B:AC:3C:A3
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:4d:e1:ab:3c:a5:27:9f:e9:1d:af:3d:75:f2:06:d2:37:9b:
aa:a4:c7:fa:f6:d8:2e:3c:2e:86:aa:a0:c1:ea:40:09:0a:d0:
7f:d1:10:44:97:19:29:ea:0c:d4:a0:49:30:ed:cd:cf:02:cb:
1f:31:28:1d:3c:90:c7:a4:de:4f:71:fa:b3:6e:2c:6a:38:ce:
0d:7a:0d:6a:cf:8e:23:7e:90:1f:93:c0:c9:a7:bc:9a:5d:0f:
32:70:92:e2:31:b9:1d:d3:19:d4:59:81:e7:78:26:6d:c6:ea:
1c:ec:50:61:d6:b5:61:3c:2b:38:aa:5e:a4:99:72:77:40:5d:
ae:39:0e:ea:63:56:79:db:fd:ac:57:a5:f2:dc:b5:d5:c3:e9:
08:9e:f1:79:22:fd:9e:92:03:ba:8d:67:7f:0c:31:3c:86:41:
ea:06:87:ec:b7:f9:58:3f:9f:9d:ac:7e:6b:19:e8:2e:5d:74:
20:bb:2e:0d:d3:74:ac:e0:97:4c:e5:3a:e5:7a:0d:cc:a9:79:
a6:2e:e5:5a:72:b5:e4:17:07:b3:ca:41:81:a4:28:5b:60:7d:
16:e3:4e:1e:e9:37:ff:55:65:38:93:55:79:0c:04:ef:b6:5d:
2d:93:bf:cd:97:53:dd:1d:3b:6e:8e:f4:9f:82:1c:86:59:52:
25:86:80:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:54:19 2026 by rpki-client