
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json)
Hash identifier: pb+dKe8DEpNk2Xj0wUWK3cV1MPUzDbnckyXEYYQGzNo=
Subject key identifier: 05:5C:5E:BC:68:B1:BA:99:DB:D3:CF:A0:E7:F1:D5:82:2E:EB:CA:4E
Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25
Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
Manifest number: 015E
Signing time: Sat 24 Oct 2026 14:27:59 +0000
Manifest this update: Sat 24 Oct 2026 14:27:59 +0000
Manifest next update: Sat 31 Oct 2026 14:27:59 +0000
Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: c3a6nj1s6STmS3texMk8jm/1z+nPlLF5BYV0vSeeQ2I=)
2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: qHE12pZJwFpe8wyPzOgoide5sDGoFWiN9Bd/hNLVIe4=)
3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: yVchdU3xVWj31ewZ5w80+tHH4ZJNPmu+JLTdmSt6IhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl
rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
Validity
Not Before: Oct 24 14:27:59 2026 GMT
Not After : Oct 31 14:27:59 2026 GMT
Subject: CN=6adcc06f-8c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:05:15:51:87:71:1b:40:3d:c7:d1:8d:b6:
55:f5:79:2e:f0:ad:e7:8b:71:d1:97:2f:af:51:cd:
58:ed:68:c3:69:a6:56:98:7a:85:15:5e:d3:2c:36:
60:45:a9:41:ee:89:0d:20:77:17:ea:fa:f3:10:13:
04:65:09:6d:fa:ca:68:15:13:a9:85:09:c4:6d:31:
36:18:8c:9d:62:58:af:45:89:85:76:07:80:ca:6b:
4e:1c:b8:c2:1a:75:7e:de:79:0d:96:9f:c5:b4:9a:
f3:c5:23:5b:80:c4:54:12:9e:dc:19:0a:7b:96:71:
b6:56:d8:ee:c4:93:f3:5d:93:db:04:03:42:5c:e9:
b8:79:98:73:98:31:30:dd:6e:b0:bf:4a:c6:19:bc:
06:cb:00:0b:33:d1:ad:c1:d0:42:ca:45:21:00:c3:
e8:5a:5e:66:d0:65:a6:79:b5:66:36:ce:a7:f4:a5:
be:c9:4a:b5:2a:05:51:8a:b4:b1:8d:ef:f4:79:0c:
1f:52:b9:b4:32:95:1a:f5:d2:c9:68:5a:35:07:4a:
7d:ef:fc:67:44:18:5a:e8:ad:f7:f6:b7:d3:9f:68:
f4:5e:10:2f:87:f5:24:27:06:cc:bd:f8:68:12:1b:
d4:eb:c7:d0:15:5f:bb:ef:69:a6:e9:7f:26:b0:8a:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:5E:BC:68:B1:BA:99:DB:D3:CF:A0:E7:F1:D5:82:2E:EB:CA:4E
X509v3 Authority Key Identifier:
keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:dd:f4:e6:08:50:d1:fc:b5:6c:cd:59:2c:50:be:9d:e8:d2:
7c:81:e3:ad:db:6e:d6:2d:74:38:49:ba:f7:9a:0c:d8:f6:3e:
cf:71:e7:91:9b:e2:dc:a2:5a:f8:1d:a2:d5:a6:28:50:c7:88:
d1:a9:48:a0:5f:97:ef:d4:f8:ae:97:31:ae:1c:e2:74:c8:45:
16:7a:f7:2e:e1:17:5f:c4:24:77:1e:7e:7c:a2:87:2c:75:b6:
4b:d9:7f:d5:d0:d7:54:cb:cf:91:a2:e0:b9:a8:a5:2c:5d:a8:
62:d0:ea:06:8a:7f:65:2e:ae:b3:10:eb:7f:1e:e9:cc:e5:86:
79:15:f0:bb:3c:10:43:1c:31:3a:26:a7:d8:c6:a7:31:e3:43:
c3:b2:8b:e9:d6:88:f3:22:76:de:bd:89:28:b5:f2:6d:0d:4e:
58:bb:69:fc:d2:8f:4d:57:08:ac:c6:ca:5b:af:4a:58:95:ed:
46:86:51:31:d7:40:88:d2:13:05:cf:46:9a:7c:45:7f:5f:af:
2b:68:1c:1e:d0:8e:68:b5:a8:d7:2e:b9:03:c1:f5:e1:fc:00:
24:5e:62:c5:b3:b3:d4:bc:f8:94:fb:e3:02:14:ec:71:84:68:
f4:25:2e:bc:75:70:37:15:66:4a:c7:8e:44:30:5e:05:de:60:
46:af:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:13:15 2026 by rpki-client