
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json)
Hash identifier: NrVBlH0U+shebG8LwBc6EmCOLSQdx9MFrftkVXsLshA=
Subject key identifier: 90:14:71:FD:D5:A3:C4:DC:6A:14:D9:39:08:82:62:57:D2:3C:25:63
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial: 0B5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
Manifest number: 0B41
Signing time: Thu 10 Sep 2026 19:13:15 +0000
Manifest this update: Thu 10 Sep 2026 19:13:14 +0000
Manifest next update: Thu 17 Sep 2026 19:13:14 +0000
Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: HK3vW6b2OptXjdb1A24PQtQ0cPZF80XZhR9lgVuZL8Y=)
2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 71Hm3TTvUXY6fbA6ubcd977cDED5QXch19XWZX6CKNY=)
3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:13:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Validity
Not Before: Sep 10 19:13:14 2026 GMT
Not After : Sep 17 19:13:14 2026 GMT
Subject: CN=6aa3014b-f62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:2e:75:b2:af:38:2d:12:e2:4d:9f:c9:73:
17:82:29:e7:aa:19:8e:0b:96:71:b7:54:d1:f4:36:
bb:26:df:86:ae:68:1f:45:15:e1:8e:68:00:84:55:
0a:d0:ec:2e:03:0c:ec:2d:da:92:9a:ae:f1:c1:ea:
7c:22:fc:a1:4b:3d:3a:90:6d:1d:3e:88:a6:24:7f:
31:e2:cb:33:08:67:e0:ac:68:65:a9:c2:0f:30:71:
4b:e5:b5:ca:dc:a5:0a:df:24:eb:80:5d:1e:d3:eb:
5e:6c:a1:02:80:6f:8c:65:cd:93:63:a2:f1:d3:a2:
05:e3:d5:4a:65:98:5c:f4:45:37:e3:64:1a:6e:27:
40:d6:5e:a1:1b:33:61:b1:f8:56:b1:39:d7:36:cf:
0d:f9:a4:fa:16:f9:a6:9d:69:7f:12:2e:e1:32:79:
b9:30:de:1c:a5:de:a1:07:0b:2d:52:36:4f:ae:84:
32:78:ea:84:27:bc:4d:fb:89:03:e4:df:59:53:d0:
1c:24:f7:af:6c:b7:d8:97:49:55:a8:4b:a6:6d:73:
e0:d4:e4:96:03:50:88:3f:30:ec:c4:a5:b1:7e:80:
7a:28:ec:d3:93:22:71:8b:2f:1c:10:0b:11:f6:b2:
d7:22:a7:72:29:0f:32:56:b0:83:9a:a3:75:1a:aa:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:14:71:FD:D5:A3:C4:DC:6A:14:D9:39:08:82:62:57:D2:3C:25:63
X509v3 Authority Key Identifier:
keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:01:8d:d4:9b:37:b0:96:ff:0c:e5:76:59:e1:13:2c:ca:
e8:f2:5d:8e:1b:2e:6e:dc:d8:a6:0a:b2:84:43:43:c3:bd:7b:
47:9f:37:ed:f2:da:91:52:90:55:3b:79:04:89:59:45:5b:31:
99:f4:3e:50:4c:3f:98:3a:43:e0:20:28:14:26:27:7b:6f:23:
39:37:6f:25:4a:9a:cb:d1:d5:af:b9:4f:7c:bf:56:22:eb:26:
6e:3d:1b:0a:c9:8a:51:ef:3d:c6:eb:b5:7a:ea:9c:a3:7d:7f:
9c:40:e7:19:24:1f:df:26:a7:d9:a1:fc:eb:de:06:28:d2:dd:
59:ac:35:ab:00:1f:71:7a:c2:04:6d:57:31:fb:fa:72:b5:ed:
02:2d:c7:21:d5:50:31:4e:06:cc:38:f3:1b:08:08:38:86:6a:
43:c0:cb:9b:3b:8a:77:73:33:c5:fe:a6:fd:2f:a9:fb:98:86:
c1:c0:25:76:a2:55:b6:f7:97:fa:32:78:9d:51:f8:13:6f:99:
83:ae:97:ab:63:27:62:fa:ca:9b:24:d6:3f:02:62:22:2e:c5:
15:ec:20:f3:4e:7f:11:62:12:5a:a0:ec:ea:d7:ee:d7:75:3c:
8d:a3:2e:d1:8b:5b:8c:64:53:c1:c6:ff:43:b8:99:95:cc:31:
5d:19:fa:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2
RDUzNzhGMzMwHhcNMjYwOTEwMTkxMzE0WhcNMjYwOTE3MTkxMzE0WjAYMRYwFAYD
VQQDEw02YWEzMDE0Yi1mNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbYudbKvOC0S4k2fyXMXginnqhmOC5Zxt1TR9Da7Jt+GrmgfRRXhjmgAhFUK
0OwuAwzsLdqSmq7xwep8IvyhSz06kG0dPoimJH8x4sszCGfgrGhlqcIPMHFL5bXK
3KUK3yTrgF0e0+tebKECgG+MZc2TY6Lx06IF49VKZZhc9EU342QabidA1l6hGzNh
sfhWsTnXNs8N+aT6FvmmnWl/Ei7hMnm5MN4cpd6hBwstUjZProQyeOqEJ7xN+4kD
5N9ZU9AcJPevbLfYl0lVqEumbXPg1OSWA1CIPzDsxKWxfoB6KOzTkyJxiy8cEAsR
9rLXIqdyKQ8yVrCDmqN1GqrVGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAUcf3V
o8TcahTZOQiCYlfSPCVjMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5
QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs
YkpzUDNkYTNGSlp0VTNqek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXMgBjdSbN7CW/wzldlnhEyzK6PJdjhsubtzYpgqyhENDw717R5837fLakVKQ
VTt5BIlZRVsxmfQ+UEw/mDpD4CAoFCYne28jOTdvJUqay9HVr7lPfL9WIusmbj0b
CsmKUe89xuu1euqco31/nEDnGSQf3yan2aH8694GKNLdWaw1qwAfcXrCBG1XMfv6
crXtAi3HIdVQMU4GzDjzGwgIOIZqQ8DLmzuKd3Mzxf6m/S+p+5iGwcAldqJVtveX
+jJ4nVH4E2+Zg66Xq2MnYvrKmyTWPwJiIi7FFewg805/EWISWqDs6tfu13U8jaMu
0YtbjGRTwcb/Q7iZlcwxXRn6Ew==
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:25:14 2026 by rpki-client