
$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
File: kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json)
Hash identifier: QXB/wyR2cwU19OABfSSkLKP3/fJStzozMPhCeVa4Urs=
Subject key identifier: 3B:76:71:E4:05:CF:54:94:10:B4:A3:83:5A:DC:A4:EE:81:98:8F:86
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial: 02A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
Manifest number: 0292
Signing time: Mon 27 Jul 2026 03:10:53 +0000
Manifest this update: Mon 27 Jul 2026 03:10:52 +0000
Manifest next update: Mon 03 Aug 2026 03:10:52 +0000
Files and hashes: 1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: UZrT+Iy/UzKjeQ/mcZYVXIgsIOmRBndqRwN8hrdhWtc=)
2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: 03+5kekzQmObuWmAw5F11iQvy5EJ47wIOoFNPa68NzM=)
3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: tHSDJxi9sVsTRoz1reKONBiKsyiwl7G8bqwueLtrVHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Validity
Not Before: Jul 27 03:10:52 2026 GMT
Not After : Aug 3 03:10:52 2026 GMT
Subject: CN=6a66cc3d-e849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:49:4f:a6:06:36:4e:29:f3:cf:98:e6:44:
13:63:4d:83:8d:e2:17:a2:08:d3:37:b6:4b:91:07:
26:dc:ff:2c:b8:91:96:40:00:60:9c:09:4e:5c:35:
7d:d6:0c:26:a3:06:8b:1c:42:f7:8a:75:a3:37:8c:
a6:42:30:aa:bf:65:d3:6d:fd:7d:dc:6f:92:e4:a6:
ab:a4:4c:7c:92:2d:5f:17:22:6a:f5:99:e5:4e:95:
5d:28:7a:da:ac:97:d0:36:b4:18:02:47:1d:18:b0:
36:c8:f9:22:8d:6d:a8:b8:ce:b2:67:28:15:a5:9e:
31:a0:31:73:5f:e8:c3:ba:10:82:82:48:33:ff:34:
05:7d:cf:2d:d6:8a:04:18:48:06:31:f4:3f:05:c7:
cf:a9:28:ad:85:37:99:54:bd:57:3a:dc:91:86:65:
b7:3b:a6:ea:bd:51:ce:c1:68:1b:cd:5f:ec:24:b5:
e6:29:f9:c6:ae:21:fa:dd:66:c7:44:a7:49:e5:e7:
2a:7b:ce:8f:3a:19:3c:4a:a5:70:eb:6d:fa:1c:3d:
48:80:3b:1f:e3:9a:d8:e9:8b:39:92:e8:d4:80:1d:
d4:aa:7a:50:db:27:e7:11:d2:6c:5f:d3:c8:99:c2:
de:37:b4:24:78:4d:eb:7e:f6:ea:66:35:c1:1f:b5:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:71:E4:05:CF:54:94:10:B4:A3:83:5A:DC:A4:EE:81:98:8F:86
X509v3 Authority Key Identifier:
keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:de:8e:42:d7:94:cb:90:95:ae:ec:cd:aa:77:23:ef:3a:97:
d1:ed:41:d6:9e:46:28:1b:13:62:a8:68:29:9f:f3:16:0f:10:
4c:5b:14:b9:4d:3d:43:17:f9:7b:91:35:9b:8e:57:cd:97:f6:
86:63:c4:e3:87:7d:e4:96:94:23:e0:3b:ca:56:a4:5c:48:19:
97:c5:84:5d:51:4f:04:0f:75:19:79:db:00:87:87:4e:a1:99:
f3:bc:97:2c:69:a4:10:ba:c8:9c:a4:81:a3:6d:32:6b:a9:a2:
0d:db:3c:23:a4:43:f6:ab:72:73:9c:aa:71:25:2b:77:30:20:
36:d7:b6:c2:84:68:ca:0f:dc:d4:19:9d:f0:ad:04:e1:7d:c1:
fc:f9:12:47:3d:23:62:ef:6b:5b:e5:e1:e7:d1:d6:5a:29:e3:
27:94:b7:6b:97:98:e4:8c:bf:1b:8c:c1:b7:b3:3d:50:91:09:
fe:8c:79:74:a4:82:23:6f:23:f8:a0:b9:a6:34:e7:d3:ea:18:
cd:fd:1c:e3:61:b9:f6:9a:77:20:f5:29:a7:b0:61:fe:1c:c9:
3e:71:14:a7:ca:9d:0e:6c:31:a8:83:45:5a:00:51:da:a0:5b:
39:16:57:58:f6:e5:71:62:8e:10:c5:bf:8d:e9:05:c5:b5:bf:
e2:0d:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:48:38 2026 by rpki-client