
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json)
Hash identifier: uiem7ohBisCctSS4B2rZ/8VI9zsu7iQz7D3fStYPMvA=
Subject key identifier: 60:1C:85:92:B0:65:22:3A:39:01:7A:6B:46:03:1F:0C:78:D2:9C:F1
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial: 04A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
Manifest number: 0460
Signing time: Sat 08 Aug 2026 23:51:10 +0000
Manifest this update: Sat 08 Aug 2026 23:51:10 +0000
Manifest next update: Sat 15 Aug 2026 23:51:09 +0000
Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: W+s5MCn/iC2qmo/qX5l7NVigADKYC5hUXEvEpCHcdzI=)
2: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: XU66OcU3fnYJls4O62nuYW+aPPgFO6XUlfyCsJCffUE=)
3: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: klFS2EwojWiZ7PvsY5ywexl5W5eODCB0mjNce2fBPs8=)
4: BDD52DF26AF311F1A3F54E617547A888.roa (hash: YDvGDAvEOaQ3i1B7cemmqUz4csMi56McTSjidKVS5sQ=)
5: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: gWfYJLFQiUGGCySMAATeYDsxEOK4XTc6fxDY8vUTdP4=)
6: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: 6txwDANkb+stD+30rgYCUnBhArG1SXPn7l/lsuR8IgY=)
7: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: PmWlH9hI8UDfrum8ljKdCPWBn/RfhOuKClthQ5ZzQA0=)
8: 4DD5897E501911F1B9231017C2833773.roa (hash: 74iwg4T3jS20u81MSENAOAD9vyDefXzwbL5rlNQ4X/0=)
9: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: 1cM14NhAHexpysqpl1gCbKReRuyBQxaQgkUwJjz7qxw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 23:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1187 (0x4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Validity
Not Before: Aug 8 23:51:10 2026 GMT
Not After : Aug 15 23:51:09 2026 GMT
Subject: CN=6a77c0ee-0d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:9d:11:d2:34:f3:d7:56:51:4e:0a:90:19:
a7:eb:7d:98:a3:71:c5:c8:b2:7c:14:2e:b6:2a:72:
cb:71:f1:73:df:fa:19:43:f8:57:2e:e3:7e:e0:bd:
66:07:fc:82:4b:14:6c:8b:d6:44:e5:81:c1:a8:01:
54:3a:2c:7f:4a:ab:06:b4:13:17:fc:2c:78:d6:c7:
41:0d:f5:78:6c:ae:30:90:5a:fb:73:83:db:28:82:
0d:11:27:e9:ed:20:e6:9e:54:6e:06:e7:58:66:70:
ac:21:12:35:cf:e8:9e:90:55:84:f9:92:e8:42:d5:
a8:af:61:b9:05:41:96:a5:8b:cc:19:78:0d:20:9d:
e7:83:85:de:ff:52:88:37:43:8c:cb:e3:97:9d:c4:
f3:6d:a0:a5:2f:ef:72:9d:8e:20:d3:11:b4:79:e0:
34:cd:22:bf:ba:bf:0a:56:ea:d6:b4:6c:3f:bb:e2:
5e:07:eb:b2:ce:27:dd:7b:5f:cf:77:24:23:7e:a3:
b5:18:58:cf:3e:8b:2c:a7:b5:ae:50:f2:c7:9d:35:
29:2c:46:4c:eb:46:cb:c3:66:ba:6b:61:bf:6f:0d:
98:0c:3d:20:45:0d:1c:5e:fb:3e:e5:95:bf:4a:2b:
b8:8c:0f:b5:52:d8:c4:08:cf:0d:35:fb:3f:c4:55:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1C:85:92:B0:65:22:3A:39:01:7A:6B:46:03:1F:0C:78:D2:9C:F1
X509v3 Authority Key Identifier:
keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4d:ed:2b:1b:9c:18:3c:20:2d:bc:01:0a:b9:9c:22:89:fb:
bf:03:87:74:68:2d:d5:d6:7b:fe:74:f6:ee:3f:72:1e:34:c9:
9f:e1:71:6b:38:63:94:52:65:54:33:03:cd:68:52:03:1c:95:
9a:1b:25:62:bc:92:e4:9d:e1:cf:1d:96:3b:c2:e5:ce:f0:1e:
97:04:43:c3:aa:51:24:f9:09:5a:ab:f6:99:da:7b:7a:f9:cd:
0c:36:51:1e:f2:fa:68:11:7b:29:cc:e7:68:f8:bc:93:a6:ca:
74:b7:66:d2:a3:c5:0b:71:01:99:0c:cc:d0:9c:ba:49:7a:9c:
91:b5:1e:82:1a:80:bc:a9:99:76:59:d6:94:cd:fb:7d:30:c6:
b3:77:b0:e6:e6:2a:1c:2f:a2:46:49:f0:62:81:2f:20:f6:0e:
52:a6:ae:b7:55:b9:57:1a:3c:ca:e0:41:b6:2a:24:5c:78:28:
63:43:12:5f:d0:ae:e6:e1:ce:f1:19:e7:d8:ae:ee:1f:db:cc:
38:3c:1f:28:1f:32:5e:4f:7f:b7:12:51:97:57:f1:f0:fc:74:
8a:04:7a:51:5c:eb:72:73:82:cd:2a:82:4c:09:a8:43:33:91:
cf:ca:68:55:a9:16:49:bc:e0:05:f5:c0:e3:a1:0f:55:e2:59:
f5:c7:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 19:20:49 2026 by rpki-client