
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
File: 78F7DRESbH-pQb1NDsp6o56TRqA.mft (raw, json)
Hash identifier: BoQBmxuyJ5X8u6JRE4Sg12Do2VqoztBthZ9vvic5l8s=
Subject key identifier: D0:B4:1C:55:AC:E9:7B:B7:95:8F:1B:7B:C7:38:07:E2:91:53:8A:EB
Authority key identifier: EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
Certificate issuer: /CN=A914B0CF/serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Certificate serial: 01A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
Manifest number: 01A1
Signing time: Wed 19 Aug 2026 04:48:21 +0000
Manifest this update: Wed 19 Aug 2026 04:48:20 +0000
Manifest next update: Wed 26 Aug 2026 04:48:20 +0000
Files and hashes: 1: 78F7DRESbH-pQb1NDsp6o56TRqA.crl (hash: KV/YO3oREGqPXbkSUkLD8HHwWEuwnyYUfMXy/lntGYQ=)
2: 20BCACE21F1A11EFB1CD4814C4F9AE02.roa (hash: MdOZTC8gpcPZCiwvzVVuxWOX/YON9CbP3KqKS9V1nVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B0CF, serialNumber=EFC17B0D11126C7FA941BD4D0ECA7AA39E9346A0
Validity
Not Before: Aug 19 04:48:20 2026 GMT
Not After : Aug 26 04:48:20 2026 GMT
Subject: CN=6a853594-37fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:fc:f9:39:4d:a4:87:0a:e9:68:cc:71:20:
60:35:b8:5c:ca:d5:01:65:57:f7:96:df:d4:3a:98:
b6:5c:7c:cc:f1:9e:ca:99:aa:2e:a0:7d:09:d6:f1:
f8:1b:17:52:c8:83:39:93:49:41:49:57:78:73:41:
57:cf:70:89:07:1e:e3:c9:04:2f:97:26:d4:29:71:
11:be:43:4a:08:6d:f6:a1:74:90:85:89:2b:cb:6d:
49:66:80:69:90:76:ee:ea:a4:a7:30:fb:9b:e4:cd:
8a:01:ad:b2:31:92:11:e4:29:da:4b:d4:4b:42:37:
4f:0d:a6:ba:d9:68:7c:df:8f:2b:f8:07:bd:3f:de:
c0:b6:31:3d:3c:c2:a2:ce:a7:2b:11:51:cd:ea:a3:
14:69:fa:79:9e:50:98:5e:15:55:b1:21:8f:f6:ab:
9d:a6:f6:db:c8:7a:ed:77:50:37:1b:d2:ab:22:ea:
9e:6b:7f:19:1e:52:73:e6:60:ed:02:f9:5d:97:cc:
83:26:17:ba:55:82:f4:de:7c:c4:b6:45:0a:f7:04:
01:ac:48:f5:4f:c7:2f:1a:35:0e:c2:ac:88:4a:1c:
3b:71:fd:00:f7:12:71:7b:f8:5d:f7:fb:e4:31:ec:
2f:c8:df:a5:70:1f:aa:1f:9f:b6:8f:24:df:d9:dd:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B4:1C:55:AC:E9:7B:B7:95:8F:1B:7B:C7:38:07:E2:91:53:8A:EB
X509v3 Authority Key Identifier:
keyid:EF:C1:7B:0D:11:12:6C:7F:A9:41:BD:4D:0E:CA:7A:A3:9E:93:46:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78F7DRESbH-pQb1NDsp6o56TRqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0CF/7E013CDA1F1811EF97333E10C4F9AE02/78F7DRESbH-pQb1NDsp6o56TRqA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:b3:e2:50:f3:41:f7:b5:e7:5a:83:d4:5c:6b:24:16:30:d9:
98:06:d5:98:94:87:20:29:18:c5:ca:ec:e3:6f:b9:4f:68:a3:
97:8a:df:72:7a:eb:a7:79:9f:3c:1b:7e:bd:7e:c0:6e:34:04:
d9:87:b5:7c:aa:6e:f5:73:e8:9b:20:79:db:7a:ac:6e:69:b4:
c5:da:9a:d0:52:56:7f:34:6f:0b:27:4d:ce:a0:9b:73:a2:fc:
51:c2:01:96:26:aa:ed:b6:3f:d7:68:87:4e:b4:da:b6:d6:c0:
f9:2d:f4:fe:01:45:c1:ce:ad:2e:bb:c7:b6:87:60:42:8a:e4:
7f:bf:79:f8:ba:79:35:49:09:c3:b4:f2:82:ea:46:15:a8:60:
d5:e3:3c:cf:a3:37:60:74:0c:a4:88:c4:7f:df:03:03:a0:f8:
50:a7:65:fd:8e:56:60:50:91:dc:ef:d8:84:46:5a:a4:45:5e:
21:b7:22:aa:e0:2a:eb:24:83:48:6e:e7:4c:ce:d5:ea:d2:b1:
e4:36:e1:3c:25:d1:5f:1b:6c:a2:ff:48:e6:72:23:7d:5c:c5:
83:19:96:29:50:34:b0:2b:21:15:19:37:a1:a7:2c:95:9b:57:
c0:80:1e:1c:ae:e6:5c:9b:4b:ce:9b:8b:48:1d:ab:24:0d:76:
80:d4:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:19 2026 by rpki-client