
$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json)
Hash identifier: hGbGyAI0Dvkn5cNFfbTxAptXIaGgSWSQDaiEOCfn430=
Subject key identifier: 2A:AC:82:DA:60:B7:E7:77:95:D2:48:74:13:1E:69:C9:69:8A:43:1B
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
Manifest number: 01A0
Signing time: Mon 27 Jul 2026 05:49:37 +0000
Manifest this update: Mon 27 Jul 2026 05:49:36 +0000
Manifest next update: Mon 03 Aug 2026 05:49:36 +0000
Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: Q/b6C15e3fCUh2+J4JnckyPhSQ9/eWOtx1N6+cclUbE=)
2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: rTmYP4vftuu9LnK2M6aljj2neyfU2VajOjI+M4V6OzA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Validity
Not Before: Jul 27 05:49:36 2026 GMT
Not After : Aug 3 05:49:36 2026 GMT
Subject: CN=6a66f171-fdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:77:a5:d7:45:f8:50:5a:84:13:80:29:53:
12:f3:50:0c:0e:a6:0d:59:ff:93:68:b1:fb:29:78:
84:55:92:6a:10:60:7f:42:4d:4a:1d:88:0e:f5:12:
78:63:97:a4:39:0f:3b:e5:5c:92:47:45:4e:1d:8e:
4b:57:98:f0:33:22:c7:13:32:46:b2:46:15:bb:8a:
45:1b:9f:64:21:8d:16:5d:ff:8a:8d:95:9e:5a:56:
a9:dc:2c:41:d5:89:6e:ca:9e:74:0e:4d:0f:00:41:
c1:63:7c:3d:c8:c1:51:6c:e7:12:a1:f1:82:5b:90:
6c:19:01:e7:a5:8e:54:50:67:76:a1:e8:7f:24:18:
75:19:e6:c2:be:83:de:cc:6d:50:53:b0:a3:4b:cf:
16:2f:dc:99:45:67:67:e2:ca:df:36:6c:25:82:06:
74:13:ed:3d:71:d8:fa:e4:8c:cb:68:8b:4e:77:b7:
53:f7:27:40:12:0c:e5:62:a8:eb:79:bf:e8:84:27:
55:18:df:86:eb:0a:58:ea:9e:ed:bf:3d:a9:15:27:
60:92:35:7a:46:dc:9a:98:9e:a7:2a:31:66:8a:fa:
4b:38:00:02:48:d2:2b:b9:e5:7b:9d:5c:02:a1:13:
0e:f1:f8:ab:c6:5d:e2:2c:aa:9f:af:ee:b1:1b:a7:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AC:82:DA:60:B7:E7:77:95:D2:48:74:13:1E:69:C9:69:8A:43:1B
X509v3 Authority Key Identifier:
keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f4:b6:93:2c:f5:2c:2b:1a:b2:92:03:9d:c2:fa:ef:43:70:
99:1d:65:7c:e5:3e:f3:c3:75:9b:f5:e9:dc:00:7e:71:85:21:
e0:ce:37:8a:32:76:2b:ad:94:84:1e:9d:5b:18:a9:78:e5:e4:
53:e8:b8:49:52:07:cb:ae:e2:c8:fa:c1:a0:6f:a6:5f:b8:34:
b1:a0:86:59:d1:0f:55:6c:51:c0:d3:ec:d8:55:b0:c5:25:e1:
40:8e:1c:d0:03:1e:21:e0:58:b6:78:ba:4a:f3:94:3a:b7:fb:
e8:c0:d4:65:8d:c7:3c:e8:34:3a:e3:4c:bc:f4:f5:19:e4:52:
8c:6c:f6:37:04:64:ef:69:86:05:b9:05:49:56:27:74:a3:a4:
7d:ee:70:e5:84:23:cc:d9:99:ec:5c:b2:c0:3e:8c:c3:c2:d9:
21:7a:e5:3a:15:52:cc:c0:47:36:da:6d:e1:79:c7:eb:43:d0:
60:97:bf:b1:28:f2:0c:52:6e:a9:30:7c:60:7e:1d:7b:17:7f:
c4:b0:96:9d:c1:f0:19:88:8d:e5:0f:b5:60:38:91:72:df:e4:
bc:11:5b:36:92:0f:c8:39:ba:08:09:6b:f0:16:74:3e:cd:a4:
11:c0:84:72:af:4d:47:7d:2d:83:5f:87:26:14:c5:d7:fd:78:
75:1e:fb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:10 2026 by rpki-client