
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File: x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier: i3JSJqrsGZrRBtopxQL+K3iFnp13QecUWVvU9grYfD0=
Subject key identifier: 6F:22:82:39:E6:B4:43:9A:FB:C8:23:86:D0:7F:32:24:08:34:9F:97
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer: /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial: 02D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number: 02C5
Signing time: Thu 13 Aug 2026 00:57:10 +0000
Manifest this update: Thu 13 Aug 2026 00:57:09 +0000
Manifest next update: Thu 20 Aug 2026 00:57:09 +0000
Files and hashes: 1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: CDmZryxOh88CmLuTRDT5I3tUcrz8TmhnGn6PETHMxC4=)
2: 71E6B7F48BDB11F1A5F20D8F3311F970.roa (hash: Y5v3FjIPvdcusoX29pBxfg1nvFUkAyu6SvOVbkZcVQ4=)
3: GxgucsSUgosAU3XrEdg2VAHcZ1A.asa (hash: u7R/ikCvSd4wV0dZOX8iGJTL3SOAHexzFM4JmSKBwvw=)
4: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: Gb6Sv2PR2ZxyHabUMBcrUJFirPirEWwtzztzYQgXRmw=)
5: JeO3CtxkzPAcVMCreayejidrFVo.asa (hash: 51oWaKu0sYjZS07/IFjH1aIk6mMJDCGbung40phF1rs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 00:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 725 (0x2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Validity
Not Before: Aug 13 00:57:09 2026 GMT
Not After : Aug 20 00:57:09 2026 GMT
Subject: CN=6a7d1666-9657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:49:83:53:ea:00:a7:fd:ae:bb:ab:6f:9f:
9d:3f:1d:5e:df:7a:6f:85:74:9d:f7:c2:fd:7f:15:
fb:b0:0b:af:de:5b:28:8b:8c:04:14:50:b3:7e:7a:
9f:b6:28:0b:52:20:34:cc:c7:fa:42:d4:50:c1:86:
a2:a3:fa:cc:a4:73:0f:13:16:14:1b:eb:b0:3c:9c:
b1:71:74:34:fc:22:7a:16:d1:df:06:f7:df:51:df:
5e:cb:a5:7f:4d:ed:01:23:9b:93:2d:2c:04:df:90:
50:64:1c:7a:84:fe:88:69:73:25:20:d2:d8:75:ae:
17:07:e1:05:61:44:0a:b3:7c:b2:8f:45:95:04:4b:
72:f5:7e:ef:cc:3d:82:0f:05:3f:74:d5:1d:40:42:
54:fd:22:d2:b5:ac:14:10:b6:49:9b:a3:09:97:7b:
01:5c:98:e6:ef:fd:28:09:48:33:04:f4:d9:f1:4c:
bf:76:0f:1d:e6:f0:7a:6b:7d:f9:23:ec:95:de:94:
d8:73:92:83:40:41:59:6d:37:98:d8:cd:43:ec:ee:
e9:de:43:52:ea:35:07:fa:3b:f2:02:1b:6c:a0:de:
00:ff:d4:de:fb:53:8e:53:67:34:75:55:de:01:1e:
6a:9f:f1:f4:c0:39:5e:dc:55:67:53:0e:d1:da:23:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:22:82:39:E6:B4:43:9A:FB:C8:23:86:D0:7F:32:24:08:34:9F:97
X509v3 Authority Key Identifier:
keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:31:5f:16:76:9d:6a:7b:a0:c8:2f:5d:5c:6c:ac:ca:58:ee:
ba:07:2e:9d:1d:0e:39:d2:6a:b1:2c:cb:33:17:ab:38:84:d7:
06:2c:86:ed:15:15:c4:c7:03:61:ab:df:fd:78:63:3e:ea:c5:
2e:91:48:9b:05:2e:4f:68:14:f0:76:5e:60:49:a5:d5:0f:1b:
28:9d:8a:99:f5:fb:8c:73:72:5b:55:03:6b:77:61:fb:7e:38:
5b:ee:c7:af:a2:e6:aa:1e:8b:dd:80:2f:40:eb:11:6e:c4:e1:
53:f3:c5:b1:85:2a:58:70:b8:5d:97:9c:8e:6c:9b:55:90:68:
b6:90:a6:11:59:08:2b:f7:fe:7f:47:1b:f1:f8:80:67:8a:ee:
06:48:d8:b2:d5:8f:ad:d3:10:dc:24:1b:24:ec:f9:86:39:06:
a2:63:d9:74:c9:4b:f5:f8:b1:dc:5d:5c:43:53:c8:69:fa:4d:
57:4c:20:f8:7a:a5:10:9c:d0:08:06:a0:87:d9:cc:31:d5:f5:
b1:8d:fd:24:37:a5:de:e8:7e:18:fb:ea:4d:8d:3f:4c:7b:2f:
04:dc:00:6d:a7:a9:64:00:7a:a2:12:d2:f5:dd:58:4b:bb:cc:
f8:7e:0d:43:c2:a5:2c:a2:42:7f:18:6b:5f:5f:49:f8:26:3b:
11:41:d9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:10 2026 by rpki-client