
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
File: 7DaNWC4Rd-CZFeM_RO253k7zLFI.mft (raw, json)
Hash identifier: VrFUaGGCMJaMtdqXuu5rc2qCvGHQ6D+Lq44WlGrOrA0=
Subject key identifier: 6B:DD:7F:FC:F7:40:CB:83:37:9B:BB:BB:BE:84:84:83:4D:E7:8A:96
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
Manifest number: 68
Signing time: Tue 07 Jul 2026 23:43:25 +0000
Manifest this update: Tue 07 Jul 2026 23:43:24 +0000
Manifest next update: Tue 14 Jul 2026 23:43:24 +0000
Files and hashes: 1: 7DaNWC4Rd-CZFeM_RO253k7zLFI.crl (hash: ssuQImCWl7ALjMgSyWXNPChd/qR5dYimUKE2OXx5+S4=)
2: 7D87C6D27A5D11F1BFFF0B408BA30FBC.roa (hash: WCcCmFJ6FbD4OVJip/MhRbsSKPAWesj5hg1l1QNqkJk=)
3: EB30BEDC6AD611F18604C9006D47A888.roa (hash: s0vWyt4y+sMskcjLO0YoqbccAPSUv+jsSFGPbEhNh34=)
4: EDDEC9126AD611F18604C9006D47A888.roa (hash: mBul9qpd2CYOy9BKWwISAskLqehY5JRGwesEaHqvaxI=)
5: B872988654D711F1992D5F9296833773.roa (hash: JmWCmjScL98jwceDIWgE8shLzdIK5PAxIEq2d4FVTwI=)
6: ECB1A1FE6AD611F18604C9006D47A888.roa (hash: F0MWXRwD7Kz/vbHgeno+BpH0Wa8YmbRWbL2tGb+tjtY=)
7: 34705B9E59E211F1AE176CAE90833773.roa (hash: Y4FSjq6NpDU11XP5lRGViEc77fMM4dZ5RI+rwrWvqxw=)
8: 8AB9CB6855B211F1AB301B6C9D833773.roa (hash: YobBdQ+6Ndd0CuqMMxU3GgClQjTWTtWJeLR02hmZiEE=)
9: E4B8817A55BE11F19755025CA4833773.roa (hash: uq6P1LBJefJ7lhndlJS9zMmJuBYYAwLLd1ShSL1M7tQ=)
10: 7E99A5727A5D11F1BFFF0B408BA30FBC.roa (hash: E3u5aiazaBu7mEozPmeD+0QkH0lYKvWzhFcCeF6uK0Q=)
11: 831A7614558A11F1A9CAF9D090833773.roa (hash: HrAXYL/EoM+1aGecaDVbhUOoMmx4irrkMOtZ/56kmDg=)
12: 87CCADF855B211F1AB301B6C9D833773.roa (hash: 9fniwhGcxZ1yDza7AuTbzsNU8NyxobvIoHRS4rO02o8=)
13: 638F236875B911F1A660E8B862A30FBC.roa (hash: xUafc8hEI9Q4I/ZYsBx9iGCwWmw+VUeCk9JbLGFv2RI=)
14: EF3ECA506AD611F18604C9006D47A888.roa (hash: so//akVTuloNjw0DdnqKuDj1WK/tdfuvQw0ikJkgWZs=)
15: 89C7E3A255B211F1AB301B6C9D833773.roa (hash: Ud57u/4onU2ULb6FSQyiz03UKna0ah+jPo8qNli4+h4=)
16: 2A8233E263E611F189F5BA418947A888.roa (hash: azSrx6uMgRU5WHByqSOBhufThnSRIw5W/2jqteEi26M=)
17: 2187C56A5A7A11F1B6CAB384BF833773.roa (hash: RtcmPOIwUNShteAiExJvARqZ30uCuYL9rxbvuOdk1Qc=)
18: 1C009EA655BF11F181F38166A4833773.roa (hash: MqU1YKb2jPBqR0B65pOpzOrEasR0isiVcS7DTuqByyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 23:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Jul 7 23:43:24 2026 GMT
Not After : Jul 14 23:43:24 2026 GMT
Subject: CN=6a4d8f1d-0356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:f3:0c:04:2a:91:05:f8:da:a7:b7:ec:c5:
c6:e9:fb:2b:46:40:8b:3a:e6:b3:21:c3:bf:d4:90:
c3:a9:1c:2b:47:68:17:67:37:7d:eb:b0:11:15:1d:
27:39:8e:bf:a3:3e:68:ec:2a:c0:e0:62:d2:f6:83:
89:e8:f9:d5:53:54:73:19:87:5b:67:59:8f:4b:41:
80:56:ab:d8:5b:88:d6:a3:d1:4d:bf:7d:92:84:d4:
7a:2a:91:98:c3:fe:11:06:de:93:0d:84:68:09:f3:
bf:56:1f:e1:73:cf:b2:73:b0:ff:11:75:d6:2f:a2:
2c:33:7d:2c:23:b6:24:32:23:8c:61:69:ef:ca:bd:
cc:cd:cb:78:02:2f:10:24:14:5d:1e:02:a4:ef:96:
f6:74:ef:68:c4:7f:c0:16:3b:92:d5:b5:7c:4a:c4:
31:77:5b:40:76:8e:3a:2d:b4:5d:5b:fd:95:65:ae:
86:40:1d:b0:8e:71:3a:15:9f:0b:e7:f3:5d:25:a5:
91:02:34:bb:f0:cb:b9:22:16:75:61:b2:88:95:e3:
b6:e8:2f:4e:01:9c:17:34:2b:40:76:b3:fe:3c:fa:
18:2e:65:8b:6b:e4:77:bd:d3:cb:ba:0c:22:2e:08:
c6:ce:a5:a7:b5:81:93:8c:96:41:ab:b3:1b:9b:81:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DD:7F:FC:F7:40:CB:83:37:9B:BB:BB:BE:84:84:83:4D:E7:8A:96
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:6f:f9:bf:e7:81:fd:74:2d:19:63:5c:61:a1:29:f5:7c:50:
4d:e8:6b:c3:c1:da:72:4e:7c:92:7b:8a:22:29:2c:ef:7d:d3:
44:68:03:6e:a5:d5:25:a3:70:ad:88:a9:0c:72:d3:38:9c:2e:
d4:e8:4d:27:dc:e1:8e:a0:36:3a:46:93:0b:ad:40:54:b4:e7:
db:7f:45:65:56:27:88:c3:19:aa:4f:15:7d:d6:73:1d:ec:e8:
87:7b:ca:4b:a1:c3:65:76:55:58:7f:01:22:fe:0a:92:73:9f:
2e:88:45:42:e0:c7:31:56:30:c0:a9:95:fc:ce:e2:5c:a7:14:
f1:b5:1d:3d:3e:21:17:6d:67:77:69:09:c0:4a:7d:26:af:11:
c7:51:ba:c5:df:a1:f0:b0:18:a1:63:24:bb:e0:e4:a0:6d:a4:
da:f7:e3:86:d5:9d:50:e2:ba:88:05:d6:58:99:ff:1b:f3:84:
9d:a3:5f:ce:b2:de:18:c9:3f:67:1d:c7:c0:57:26:0a:be:53:
7a:2a:07:ce:1b:90:f5:fb:c1:ae:ef:57:c8:86:e1:5c:65:61:
25:89:87:5a:0c:d5:d3:1c:bf:b9:00:0b:49:20:08:32:30:9d:
b9:43:ea:70:1f:ed:14:99:db:cb:41:5c:a5:29:19:02:27:2c:
63:45:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 23:57:57 2026 by rpki-client