
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json)
Hash identifier: Hcmp/W8G/eFrHZsu1ffq0kusWTcvwHFdBxDa7ZxSgzY=
Subject key identifier: AC:41:3F:FD:50:00:ED:53:80:CB:EC:78:83:F5:77:AC:59:53:21:5F
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial: 1ACE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
Manifest number: 1A9B
Signing time: Fri 16 Oct 2026 16:22:36 +0000
Manifest this update: Fri 16 Oct 2026 16:22:36 +0000
Manifest next update: Fri 23 Oct 2026 16:22:36 +0000
Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: r9reCK045NCTH77uXBgJYgkI+5+0AOfvo7tmxvCJMNY=)
2: DCD75050315011F0BC916269C4F9AE02.roa (hash: it0EUJuF/f2xwJeSJJN9QRAuHCVD+ovbX5Fq/ZrMmKg=)
3: apb7pbLzTh2padrozWKikjQdy4Q.asa (hash: j3Yhkh9MeeMK19J3d4fQ/WfPoNUH53OkQJ4FYlVEwwU=)
4: 361BDEB6315011F0A08FB267C4F9AE02.roa (hash: hQaqyHy+IglmfnIs2mH5KDdafmYlJZXnRBxvCuoPjT4=)
5: 545743246D1911E7A4448D81C4F9AE02.roa (hash: aF9bVVw6Gwu2L83wIJh2aO8mDQcLr1IwMLw9hro7LqM=)
6: oE5Js6fuq9GoJiD5YEoKTn7lWD8.asa (hash: XOfYdUr0l2VrVLv76J2LlNBLB7DRmoLstUjCzoxLsnY=)
7: CBBF13566EA911F1979A4FB45FA30FBC.roa (hash: InjAFjFfD9Kqc+Wu+wt8coAIdhYTvUAL4QI7Q5j856I=)
8: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: +4dDlburVO2MmfNARrkvQtCk1fegQCkSHo+kZlpjT9U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 16:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6862 (0x1ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Validity
Not Before: Oct 16 16:22:36 2026 GMT
Not After : Oct 23 16:22:36 2026 GMT
Subject: CN=6ad24f4c-c1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:be:7d:ff:51:fa:2e:1d:74:6f:7b:e7:30:
97:91:94:7d:39:08:ab:c4:49:2f:a1:b7:bf:80:dc:
ef:d2:e3:24:bf:d4:71:8b:b7:74:71:56:1f:26:05:
d6:2a:9c:40:24:50:bd:20:ef:89:b6:3e:b2:9e:a9:
ca:1a:38:69:06:ab:a3:f9:ba:09:62:4f:9e:ab:d9:
7b:26:c7:8a:67:8f:b4:81:f1:bf:af:19:b5:39:7d:
1d:ab:24:1b:74:62:b1:40:94:70:8b:ad:9e:20:03:
2e:73:49:d4:2b:0a:e2:96:21:82:38:cd:94:fb:54:
b4:71:d7:0a:01:3d:5e:28:6a:31:04:29:0e:8a:9a:
f3:0a:3d:9f:53:a5:c1:aa:b3:1b:1e:ed:73:38:af:
24:11:f7:b2:f6:c0:b6:83:a9:6d:12:cf:2e:2a:8a:
78:06:6e:da:a7:02:53:73:4d:56:e7:9e:40:21:0a:
4b:e0:a9:06:12:28:e8:c9:a7:ac:c3:91:f4:23:18:
89:d4:a1:bd:35:b0:7a:71:a0:b3:2a:0e:7b:d3:61:
26:b5:b4:00:85:de:47:82:3a:e7:a8:7c:cf:33:00:
df:f2:c6:95:06:9b:14:50:ac:0d:89:51:ec:bc:0c:
f0:d9:b2:ee:da:d9:0e:eb:54:85:f6:a8:f7:61:db:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:3F:FD:50:00:ED:53:80:CB:EC:78:83:F5:77:AC:59:53:21:5F
X509v3 Authority Key Identifier:
keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ac:08:25:47:6f:06:16:55:ce:61:0e:df:02:8d:a3:cd:bc:
09:cb:e6:56:63:1d:7f:82:0b:51:60:e3:a4:e2:e6:80:9b:2b:
18:18:c9:25:20:e0:eb:34:92:04:7f:1f:93:de:ad:85:63:98:
5a:ee:f3:a7:24:bb:30:3b:57:db:d8:6a:f2:43:d1:b3:15:fe:
c3:0a:95:1c:81:56:1f:f3:55:48:9d:55:8b:72:22:64:fe:c6:
d9:d9:11:0b:93:5f:57:c3:45:93:1c:2b:c2:ab:d5:df:eb:a7:
dd:24:19:80:cd:43:1f:98:07:64:d4:b7:81:a7:5d:1a:c5:99:
35:d8:86:7c:f7:05:e3:c6:af:7b:d0:14:ba:06:f9:a1:81:6e:
57:44:1a:9f:8e:fe:15:2b:72:1a:3a:b7:a9:6d:24:00:0a:82:
11:5f:3f:13:87:a4:5a:d5:b5:d7:11:94:55:d2:52:6b:3c:a5:
ff:33:0d:fb:3f:c8:ef:4b:aa:05:91:3e:83:f2:e4:ea:68:88:
03:71:7d:44:f8:3f:b3:3e:a4:3d:ad:6b:04:1d:c6:5d:73:b6:
21:60:af:ea:86:c6:96:fb:d2:28:29:18:ac:76:76:03:53:5c:
a7:e5:7e:ae:74:98:98:97:a0:bf:a5:e9:0a:28:40:d1:3f:a0:
71:4e:0c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:26:46 2026 by rpki-client