
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json)
Hash identifier: jfMeLkW/qFQNHJAAXsRXndH68fLlAPjHK3F/lKkhxGM=
Subject key identifier: CC:A5:05:61:B4:80:D3:5B:CD:90:33:42:D4:28:94:B1:29:18:1C:70
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial: 0B44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
Manifest number: 0B29
Signing time: Sun 26 Jul 2026 19:45:05 +0000
Manifest this update: Sun 26 Jul 2026 19:45:04 +0000
Manifest next update: Sun 02 Aug 2026 19:45:04 +0000
Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: VmOrWuabFFxUUWNGL0olrEZUUC9rNxM2MFxZFPohsuE=)
2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 71Hm3TTvUXY6fbA6ubcd977cDED5QXch19XWZX6CKNY=)
3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2884 (0xb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Validity
Not Before: Jul 26 19:45:04 2026 GMT
Not After : Aug 2 19:45:04 2026 GMT
Subject: CN=6a6663c1-841d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:ed:de:46:bd:b0:2c:57:74:50:cb:e4:70:
ea:8f:60:9f:96:51:4e:87:85:fc:bc:15:71:14:0c:
47:40:b4:61:51:b2:3f:1c:db:ed:5b:d3:e9:44:33:
fb:04:1f:94:54:e1:d3:5e:98:98:03:16:32:84:ea:
7c:ee:e9:13:19:36:22:6e:c6:b2:d6:f9:be:81:ea:
ed:a1:b0:7c:d5:71:77:d8:82:f8:f7:3c:0d:11:f5:
3d:cd:7e:58:09:43:8c:50:6a:81:de:75:c7:4e:91:
95:31:42:14:91:ce:8f:5c:f9:0b:ce:ac:92:a5:6d:
e5:d0:42:88:58:9c:7e:10:73:22:e8:11:3c:cd:e1:
c6:27:8a:2a:93:2d:35:47:f9:b4:99:29:22:68:ac:
2d:28:ed:5a:6a:1a:ea:67:5e:b6:5a:08:a6:44:8a:
e3:cd:f3:cd:81:a0:1b:ac:af:95:b4:02:24:77:a4:
da:ca:95:c8:7f:aa:1a:d6:3b:e0:4f:09:7e:33:dc:
38:53:9e:17:a0:ce:88:87:50:c3:0e:58:76:33:10:
4a:15:0f:5d:dd:fa:37:d3:13:94:e2:5d:aa:da:6e:
4a:e9:36:56:c7:dd:ac:ef:f7:7f:f8:93:53:0a:2b:
a0:bf:c0:4b:b9:6a:c3:4b:75:e3:7c:fb:1d:21:36:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A5:05:61:B4:80:D3:5B:CD:90:33:42:D4:28:94:B1:29:18:1C:70
X509v3 Authority Key Identifier:
keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:34:8e:bf:a7:24:d5:6d:10:b0:02:fa:cd:bc:db:e4:0f:9b:
1e:e6:18:b4:a9:22:da:b0:1c:8f:b3:26:ea:cf:0a:8a:ad:4e:
3b:fd:e8:85:6f:86:d9:bc:02:13:1d:23:92:8a:ab:b6:2d:a2:
a7:45:23:b6:ce:41:8d:b1:cd:8b:37:ad:21:e3:96:9c:0f:3f:
2e:ce:e3:a8:8d:38:42:4b:7c:38:a2:27:44:59:a3:69:fa:fe:
1d:60:ac:80:f6:8f:11:4e:5f:a0:fe:a3:b3:c9:14:14:9d:ca:
63:b3:ce:ae:a9:3b:8b:35:e6:9f:ec:7c:34:20:f6:5d:ac:94:
55:50:85:a6:fb:ca:5e:1f:7b:0b:9c:b1:8a:bf:8e:4f:33:31:
c3:65:f7:e8:f3:20:df:30:42:23:59:28:7c:95:a0:6a:b4:25:
a3:81:fd:ad:b7:b3:f3:1a:7b:09:70:da:7e:5c:d9:68:53:5e:
c4:85:01:cf:6f:85:a6:33:3d:23:51:e4:61:8e:4f:37:d5:48:
f8:0f:e2:73:a5:f4:55:53:36:a4:15:4f:72:21:7f:06:40:f2:
4c:17:99:63:80:14:94:fb:82:8f:f2:70:8b:ee:58:3e:ca:a2:
f7:93:6d:57:18:8c:0a:71:38:1f:19:f9:6a:53:92:a3:73:b9:
c5:59:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 07:31:22 2026 by rpki-client