
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json)
Hash identifier: MZ7YEc/rPPXDgtUcK7oEtmoS+aiI97Dfp37nfRdT74c=
Subject key identifier: 17:C4:78:BF:71:5B:AC:7C:06:DD:1C:BB:D5:3E:FD:2E:3E:E3:13:02
Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
Manifest number: 0137
Signing time: Wed 19 Aug 2026 06:12:06 +0000
Manifest this update: Wed 19 Aug 2026 06:12:05 +0000
Manifest next update: Wed 26 Aug 2026 06:12:05 +0000
Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: kCKQUrmzVqfeOLGCq2S1REB6XTnnl+2AccA0Asi573M=)
2: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: qt3HSjdPuhwdbu7y+IBM5bXY+abtccfmEZI2ywYOKv4=)
3: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: aHk0t2Hy2gHuEUEuWNA047fzWOktHu8vocVNcFbAJjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66
Validity
Not Before: Aug 19 06:12:05 2026 GMT
Not After : Aug 26 06:12:05 2026 GMT
Subject: CN=6a854936-a1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:4d:47:2d:cf:da:be:cb:1f:bb:5b:b2:f7:
b8:0f:4c:59:42:f4:71:46:72:60:84:16:f2:2b:8a:
44:4f:61:f6:46:53:5f:73:ee:a4:80:d6:7c:05:92:
5a:3f:8a:e1:5c:4d:d1:26:d0:16:6a:25:1d:3e:ff:
9b:bb:e5:e1:71:b9:d0:b0:69:40:cb:31:3a:c9:10:
33:a9:1d:0e:85:47:ee:bf:35:b5:4b:fd:95:e0:cc:
9b:a6:e5:fb:bb:31:b8:c2:f9:e0:40:b7:f9:1f:83:
67:22:a7:90:f3:f3:7e:6b:c4:25:a1:79:0b:e0:9e:
11:f7:b0:78:bf:bc:c2:19:15:f0:9c:18:a1:8a:70:
fa:1d:99:69:5b:0a:b8:de:aa:9e:40:0d:26:52:2c:
3a:17:77:58:f1:d1:46:d6:67:4c:e9:1e:88:86:6d:
b1:e0:0f:51:65:57:3a:63:72:fc:1c:4d:e2:29:8d:
69:42:6e:39:42:91:4e:ec:d6:b7:5d:9c:02:26:8a:
75:6d:fd:ad:d5:d8:c2:5a:ee:d3:e9:df:18:c6:3e:
65:58:af:20:44:70:8d:de:74:bb:80:53:45:7f:96:
ff:11:a4:51:5f:cf:9c:2b:4c:03:33:a2:fe:c4:1a:
a8:e9:bb:a5:74:65:d0:92:ee:f0:03:3e:00:90:ca:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C4:78:BF:71:5B:AC:7C:06:DD:1C:BB:D5:3E:FD:2E:3E:E3:13:02
X509v3 Authority Key Identifier:
keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:05:80:6f:bb:e6:30:37:4b:f5:07:40:c5:27:7e:8f:45:05:
ab:99:8d:9b:a1:fc:81:62:05:16:d7:4e:5f:20:b2:99:6d:33:
7b:98:3b:e2:4c:fc:b5:ec:37:de:5f:4b:3b:82:c7:61:40:4a:
97:b1:87:03:a7:77:58:e2:b4:d6:db:d9:12:13:fe:28:f7:ee:
d7:ba:3f:16:4d:c2:41:83:65:dc:24:b2:9e:30:f6:93:5a:7a:
dd:99:51:96:22:45:1e:c4:78:ee:40:96:d6:8e:90:45:a5:60:
30:0a:d3:e0:47:a9:c0:fc:30:c1:64:d5:33:38:c6:5d:70:28:
ca:14:55:c0:ce:88:4b:7f:86:78:6b:db:7b:71:58:db:e5:7b:
fb:ff:15:3b:79:4f:96:9c:17:e9:29:80:24:26:bc:02:24:ce:
d5:1c:65:1d:f0:71:87:9b:70:ef:b0:ad:bb:7f:79:02:fd:64:
04:de:9f:cc:01:11:07:e8:1e:7d:e5:8e:a3:21:2f:ac:63:a8:
cc:a8:d7:84:8f:79:63:5e:5e:d0:51:24:8a:b7:b8:a5:6f:a9:
16:76:8b:20:7a:28:f2:c6:bc:3a:49:bf:ae:dc:43:49:ca:8b:
3c:e5:4f:d0:cb:61:fe:1d:8c:d1:c7:74:77:55:c9:b7:e9:73:
ba:9f:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:39 2026 by rpki-client