
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
File: 7DaNWC4Rd-CZFeM_RO253k7zLFI.mft (raw, json)
Hash identifier: g4nsvSNe2QHeHnEBt5Y1xcErhLICUYr147wasO9ZsvY=
Subject key identifier: D5:37:44:C4:41:C5:19:6B:E1:45:22:18:B7:39:CF:98:CC:C5:49:B1
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
Manifest number: BD
Signing time: Sun 11 Oct 2026 02:57:30 +0000
Manifest this update: Sun 11 Oct 2026 02:57:30 +0000
Manifest next update: Sun 18 Oct 2026 02:57:30 +0000
Files and hashes: 1: 7DaNWC4Rd-CZFeM_RO253k7zLFI.crl (hash: UX3y740zhKpNKTuta9sJleU0zkqSublxzPoDfXDSxYw=)
2: EF3ECA506AD611F18604C9006D47A888.roa (hash: so//akVTuloNjw0DdnqKuDj1WK/tdfuvQw0ikJkgWZs=)
3: E4B8817A55BE11F19755025CA4833773.roa (hash: lYZjp9y0uXPEjcsK1iwiSC48vETuScT4C1ciPdaoKFM=)
4: 02CB9F9C829E11F185008F026AA30FBC.roa (hash: yha/Pvgltg13jTcaFGt6OfhkmQpW0p7X2QJweaAkVzI=)
5: 7BBEA23A81E211F18448C63773A30FBC.roa (hash: /S3reswQRe6QG2XFQIdmnPWz87DvWwN0Mt9l8y+jje4=)
6: 34705B9E59E211F1AE176CAE90833773.roa (hash: Y4FSjq6NpDU11XP5lRGViEc77fMM4dZ5RI+rwrWvqxw=)
7: 638F236875B911F1A660E8B862A30FBC.roa (hash: xUafc8hEI9Q4I/ZYsBx9iGCwWmw+VUeCk9JbLGFv2RI=)
8: 89C7E3A255B211F1AB301B6C9D833773.roa (hash: Ud57u/4onU2ULb6FSQyiz03UKna0ah+jPo8qNli4+h4=)
9: EDDEC9126AD611F18604C9006D47A888.roa (hash: mBul9qpd2CYOy9BKWwISAskLqehY5JRGwesEaHqvaxI=)
10: 2A8233E263E611F189F5BA418947A888.roa (hash: azSrx6uMgRU5WHByqSOBhufThnSRIw5W/2jqteEi26M=)
11: 80564398B1B211F1B4449AB83511F970.roa (hash: x/24CC0yQGbvq8aHndmNJthTWBGKcSvL3FZJJTDE4fo=)
12: 60D65D4E85A911F18503AAE15BA30FBC.roa (hash: knaW+lZw0fbnWRCsePO7EIeENsLvn4xCIFMtjXiYkn0=)
13: 7ABEE1BA81E211F18448C63773A30FBC.roa (hash: vfHOYbedB2VpffqaIE+vsrAkKNRDh3wfSNls3RNvcdc=)
14: B872988654D711F1992D5F9296833773.roa (hash: JmWCmjScL98jwceDIWgE8shLzdIK5PAxIEq2d4FVTwI=)
15: ECB1A1FE6AD611F18604C9006D47A888.roa (hash: F0MWXRwD7Kz/vbHgeno+BpH0Wa8YmbRWbL2tGb+tjtY=)
16: EB30BEDC6AD611F18604C9006D47A888.roa (hash: s0vWyt4y+sMskcjLO0YoqbccAPSUv+jsSFGPbEhNh34=)
17: 3BA04952917211F1BE52DB413211F970.roa (hash: +gb3EDnRD3BYMDVwvi+JKbfHlJxgaqgckTYklt3ICqc=)
18: 0CDEC76081E111F185BF86D772A30FBC.roa (hash: x39GQ3gTAp/T/smhd+Smfk3463f1DYz+REEZ4/JfSXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Oct 11 02:57:30 2026 GMT
Not After : Oct 18 02:57:30 2026 GMT
Subject: CN=6acafb1a-e1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:cc:3b:57:de:65:3c:37:73:74:ce:63:f9:
ce:b9:c5:8f:ea:a8:23:d0:8f:51:fa:26:7e:56:02:
3d:e3:44:a0:09:08:1c:9b:a8:97:d2:ae:26:82:de:
96:d2:f7:af:2b:48:ad:a6:3a:47:17:06:14:fb:5e:
c1:86:e0:05:0e:25:e2:f5:84:bc:d4:44:e0:2c:88:
21:11:64:24:ef:14:89:b4:1d:59:e9:94:02:bf:12:
52:f9:e0:ba:21:95:8b:82:62:c7:ce:6f:bb:35:e8:
af:8b:e4:9a:5a:f6:47:82:4d:c6:c2:9a:0a:86:bc:
7c:c8:5a:7a:2d:c8:03:59:58:84:6f:0d:44:c9:6d:
c2:0b:06:4b:c2:34:bf:dd:81:79:24:4a:55:b7:99:
30:f6:98:1d:c0:e6:ab:13:20:86:81:b7:f6:a1:dd:
0d:85:f1:35:be:8b:39:8d:34:ea:df:a0:ba:fb:ce:
af:08:78:be:d5:7f:7d:bd:87:c5:9d:ac:bc:bf:2c:
0c:d0:49:bb:a0:6a:1a:2a:db:fd:3d:64:6b:8b:ab:
dc:97:6e:7b:df:b4:2d:c0:81:39:ee:27:e6:84:93:
7c:e0:4e:ad:d2:83:93:79:75:e9:28:bc:7d:98:aa:
a1:af:75:e3:4a:c7:86:32:8e:62:84:1a:4e:73:de:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:37:44:C4:41:C5:19:6B:E1:45:22:18:B7:39:CF:98:CC:C5:49:B1
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:03:b2:af:bc:b6:57:ab:98:8c:56:bc:36:7c:7e:0c:2f:46:
fd:4b:db:24:be:06:26:ec:c3:c4:40:49:42:d8:97:33:04:7b:
b4:13:61:32:66:6a:5f:b8:a3:f7:31:37:20:fe:db:c3:9c:d1:
dc:4b:10:c5:86:79:8c:b3:53:bf:c5:24:7e:65:c8:da:88:00:
3f:0a:ad:48:57:6a:e7:0a:8c:39:70:12:73:83:d0:bd:0d:61:
4f:f4:7d:3f:82:0b:b6:04:2b:d5:eb:44:50:62:97:41:5d:51:
21:77:a2:5a:08:a6:43:73:52:7c:91:6d:c2:bb:de:4d:83:c0:
85:c2:42:fd:f0:f6:f1:ed:84:c5:d7:a3:0c:f8:22:67:a6:7d:
71:74:26:e8:2f:48:67:eb:d1:42:c6:59:87:de:b2:3f:94:db:
c1:0d:52:b1:24:36:03:84:61:13:ed:58:de:36:e8:a9:e2:73:
19:d0:04:20:4e:ec:c7:08:dc:60:ce:93:69:1f:32:12:58:57:
f7:55:6b:0d:ce:c6:f7:3c:30:61:6a:4f:ff:df:47:ed:16:90:
2f:2f:56:f9:f2:a9:75:57:ae:e9:d4:da:6b:a5:28:20:0e:0c:
62:18:03:cb:b6:62:5e:c3:dc:7e:a1:2a:2d:d8:05:a0:0d:dd:
e0:08:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:21:20 2026 by rpki-client