
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier: Mv2gXPI5y35kMwZo5MjbWNaUfiZusUi9w0mMEnVMJak=
Subject key identifier: 15:D1:7E:87:A9:AE:69:0F:B9:03:8D:17:C1:57:48:2A:26:C4:67:36
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number: 0137
Signing time: Wed 19 Aug 2026 06:12:09 +0000
Manifest this update: Wed 19 Aug 2026 06:12:08 +0000
Manifest next update: Wed 26 Aug 2026 06:12:08 +0000
Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: wciAvI7TDSHQueH6ggYz8glfHz1S0aYQ6SFTeGIAr1A=)
2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: kNVufBYLOSPc0ZVte3f5MHgcSk/XAypE8dg+TpFb4fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Validity
Not Before: Aug 19 06:12:08 2026 GMT
Not After : Aug 26 06:12:08 2026 GMT
Subject: CN=6a854939-e22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:bf:21:5c:5e:ff:2e:21:d0:0c:74:d7:c4:
97:b6:fd:57:8f:ac:64:d8:10:98:da:ea:64:cb:b1:
98:56:ec:a5:30:c6:dd:0c:81:a7:e9:d7:06:cc:5e:
43:71:eb:9a:3c:c5:73:c3:ff:55:b2:98:d9:8a:2f:
60:13:3b:48:57:fa:9e:06:78:9d:1a:2d:fb:bd:ad:
fc:b1:06:08:92:bd:3d:08:dc:3d:50:e1:bc:a1:fd:
af:2f:a3:43:47:d6:df:06:fd:bf:eb:ae:9a:ec:e0:
e5:bd:c0:73:c3:60:c7:ff:b8:5a:89:3e:ef:27:ac:
30:cd:d6:b9:86:a6:be:0a:83:ac:6c:9c:b2:ad:b7:
ff:28:4d:0a:26:b3:83:e8:ba:9a:23:66:33:8c:f6:
b4:49:44:ce:15:a2:1b:21:27:31:cf:3d:ca:a3:21:
ee:37:d0:ec:bf:51:58:bb:91:3b:a5:0f:0f:9f:f9:
5f:35:27:2a:06:66:10:fd:ba:69:0a:42:28:04:c9:
c5:b6:30:ab:e3:61:14:69:e9:53:e8:f7:e3:fb:eb:
54:d9:a7:13:17:9e:ba:59:48:91:5d:05:92:4c:9a:
b7:c7:02:bb:c8:db:37:70:80:82:19:6e:e7:b5:30:
0e:85:e8:9c:f8:fd:e4:8f:18:bd:83:84:a4:25:34:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D1:7E:87:A9:AE:69:0F:B9:03:8D:17:C1:57:48:2A:26:C4:67:36
X509v3 Authority Key Identifier:
keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:17:b8:d4:c7:39:8f:18:cd:29:dc:3e:c5:85:17:49:4c:35:
bc:de:8e:58:3a:62:1f:5b:2e:d1:38:c3:aa:5d:bd:64:51:88:
46:ef:da:d8:b5:c8:2a:a6:2b:13:bc:ef:16:61:f3:73:b1:97:
c5:c1:47:df:56:2b:10:ff:a8:64:32:e4:46:40:c5:e1:b2:0f:
7f:f8:40:c1:9d:66:0f:78:45:1e:5b:fa:6d:ce:7b:97:fa:6c:
53:f0:c9:c4:02:ed:6d:8d:44:27:7a:48:4a:b8:d1:a4:92:25:
5a:92:b9:2a:a2:24:d3:f7:77:43:96:f1:0c:dc:47:9a:c8:f8:
58:0e:7a:9f:d8:9f:59:ce:25:10:b8:55:fd:bd:d2:7e:fe:a9:
f8:7c:84:e8:19:ad:5b:02:d3:11:9f:ce:e2:cd:a7:08:66:75:
e6:e5:72:a8:33:f7:9b:11:1d:fe:34:92:8c:0e:ad:9c:46:1e:
02:05:be:f8:bd:35:e3:ac:40:ce:da:9a:6b:c1:e7:ad:05:eb:
5e:f2:5e:b9:e7:63:2c:d7:6f:41:1f:c5:84:87:de:af:9c:4f:
a1:ae:a9:17:98:7b:b6:db:8f:e9:b7:50:97:0a:ec:27:d6:3b:
4d:28:1f:27:df:20:cf:df:33:f4:bb:33:e2:ae:e6:56:cc:77:
94:e2:b0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:33:52 2026 by rpki-client