
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json)
Hash identifier: WQWRuamhLQZWmbskHAk1QeEcbyOdAiiimJnonuhPx6Q=
Subject key identifier: 9E:6F:1A:A5:09:DD:3C:9F:2C:20:AD:EA:13:81:21:39:31:15:77:02
Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Certificate serial: 3555
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
Manifest number: 3555
Signing time: Mon 22 Jun 2026 15:10:37 +0000
Manifest this update: Mon 22 Jun 2026 15:10:36 +0000
Manifest next update: Mon 29 Jun 2026 15:10:36 +0000
Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: ECo3w1uQLWrtWAVOSxi99UqbdVOUjOVIVOjLy8zY1rM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 15:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13653 (0x3555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Validity
Not Before: Jun 22 15:10:36 2026 GMT
Not After : Jun 29 15:10:36 2026 GMT
Subject: CN=6a39506d-5e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:ed:b5:c1:d8:d7:e7:f3:65:78:d6:8e:e7:
56:4a:d0:c6:95:9b:b9:9c:00:54:6c:30:a7:0e:a0:
74:e5:b2:60:8a:06:53:9d:b4:63:9f:7f:4d:8e:9e:
c2:e0:9a:2e:82:0e:17:98:fa:08:de:9e:b8:00:5e:
ab:13:08:b9:ea:5b:ea:14:8f:b9:ed:b5:0b:ec:6b:
d9:63:4d:22:97:33:69:d6:eb:d1:99:1a:6d:e4:75:
79:2a:6a:5e:44:b7:a3:b0:fa:4c:51:a1:8d:33:2e:
ee:4e:f2:e5:07:e6:f0:0b:78:c0:db:03:74:67:f2:
54:70:c0:a9:c3:a5:b3:7a:e4:9e:02:d7:1c:02:dd:
1d:c5:5b:3d:4e:ab:9e:98:2e:00:81:07:57:0f:b1:
ed:b0:02:0d:43:f4:0a:94:3b:f7:db:7b:c9:e6:8f:
c9:8b:9a:f0:f3:3c:5d:fe:b4:a9:04:0f:d2:2d:f4:
19:f9:bd:ee:22:92:85:41:8a:c3:cc:60:f0:be:8d:
84:0f:ac:e0:37:77:62:db:5a:81:87:6e:2f:4e:a7:
6b:9e:f2:67:d2:85:04:ce:5e:2d:77:b2:05:cb:e0:
01:58:be:6b:1c:4a:03:ca:c2:c1:43:da:4a:83:b1:
75:4e:2b:13:9b:b7:0a:58:df:f5:24:08:cd:b3:26:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:1A:A5:09:DD:3C:9F:2C:20:AD:EA:13:81:21:39:31:15:77:02
X509v3 Authority Key Identifier:
keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ad:ca:6d:98:8c:da:9f:28:2d:bb:9a:9c:8f:98:61:07:16:
e6:8c:1a:44:e1:98:85:b2:89:15:91:37:b8:47:81:af:f8:a2:
e4:50:12:fa:03:25:77:4d:f1:70:da:16:9a:71:35:7c:d7:ab:
58:9e:cd:bd:fd:39:d7:4a:69:f9:f4:73:16:74:24:90:0c:08:
ce:26:22:ce:75:e0:e1:75:52:fb:0c:d0:0f:cd:fb:c0:54:cd:
81:1c:2c:5f:5b:8c:07:e0:be:ed:5b:dd:b8:d5:61:af:ac:f2:
f3:59:36:a0:cb:db:ed:53:9e:14:e4:09:8e:7e:34:ff:9c:fb:
6a:ab:57:45:e2:11:9d:45:09:a3:78:ff:84:2f:ef:e7:dd:d8:
ad:b8:2b:6c:f8:bd:b8:d5:4a:ed:75:a6:d4:0e:3a:46:6e:b7:
36:9e:c3:03:fb:44:49:ae:74:28:1b:5c:c3:0c:71:bb:a6:b5:
17:48:8d:21:23:f8:aa:e8:87:51:64:39:07:9f:79:10:8d:4b:
e4:42:f5:a3:cc:7c:8c:29:c5:51:1c:24:3f:c2:3d:c4:5a:6a:
e9:e7:2d:d4:13:55:29:ec:29:30:3e:74:e2:f0:ba:86:e0:92:
90:e3:ec:ed:5b:2a:73:0d:30:1c:57:06:6a:d6:29:e9:91:b7:
90:ec:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:50 2026 by rpki-client