
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
File: 7oeNdaIYCzpoQfv6lsOakOH6alo.mft (raw, json)
Hash identifier: sNABdynNIYqdfkp173av/fc/YyUfOJzFG+8WIwXd6t4=
Subject key identifier: DA:A1:28:BE:65:F5:A8:C5:BA:61:41:0E:61:C2:FA:AE:FA:1F:00:F4
Authority key identifier: EE:87:8D:75:A2:18:0B:3A:68:41:FB:FA:96:C3:9A:90:E1:FA:6A:5A
Certificate issuer: /CN=A9156648/serialNumber=EE878D75A2180B3A6841FBFA96C39A90E1FA6A5A
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oeNdaIYCzpoQfv6lsOakOH6alo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
Manifest number: 07
Signing time: Tue 23 Jun 2026 09:27:56 +0000
Manifest this update: Tue 23 Jun 2026 09:27:55 +0000
Manifest next update: Tue 30 Jun 2026 09:27:55 +0000
Files and hashes: 1: 7oeNdaIYCzpoQfv6lsOakOH6alo.crl (hash: ECBdpFsIqFj0ITane/d9FQOztb/xY6all02cSi0Ju3w=)
2: 264CD086686711F1A235A935A047A888.roa (hash: hGg0i2AerJUIjIuwGtqIvGZCbqf4UclKCp9wjxIZIoU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.crl
rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oeNdaIYCzpoQfv6lsOakOH6alo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 09:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156648, serialNumber=EE878D75A2180B3A6841FBFA96C39A90E1FA6A5A
Validity
Not Before: Jun 23 09:27:55 2026 GMT
Not After : Jun 30 09:27:55 2026 GMT
Subject: CN=6a3a519b-4dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:c7:f7:e8:26:0c:ae:4d:11:8d:07:6e:c7:
d4:7a:b7:02:78:bc:9d:3f:34:2f:e7:e9:c5:83:88:
c4:e7:fc:7e:bd:9e:5c:af:94:04:6d:7d:3c:25:24:
5c:06:6e:06:77:8c:97:aa:80:91:7f:5a:96:18:bc:
40:2e:6d:bb:e9:b8:ee:23:a2:c5:53:11:25:65:6f:
34:5b:85:ba:24:98:d6:e5:ca:88:39:b5:f7:3e:cd:
0d:d9:8f:82:94:86:03:c3:91:64:15:55:17:40:79:
bd:a0:b3:f0:43:6b:30:4c:85:33:b9:d5:9a:49:4b:
60:cb:21:db:79:a3:1c:a0:a2:85:35:b7:fd:5d:c1:
5d:dd:51:65:27:65:b5:65:04:11:2d:64:ab:56:7d:
19:ee:13:3a:c0:ec:33:8e:de:f0:5f:47:84:4b:90:
bb:c1:50:9f:36:49:3e:ce:9f:47:8d:6a:58:0b:04:
b7:fc:30:fd:57:9e:b6:02:93:f5:ba:9d:4f:79:1b:
18:1b:81:59:d7:cc:33:e9:fa:31:36:f9:f7:c2:01:
40:f7:c6:30:18:4b:cf:1c:8f:18:e3:3f:5e:9e:4b:
c9:c2:90:bf:60:06:e6:f0:5a:cd:63:04:c5:68:7d:
23:f7:b2:ec:66:22:6d:4f:d1:ba:c0:de:db:e5:f5:
b7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A1:28:BE:65:F5:A8:C5:BA:61:41:0E:61:C2:FA:AE:FA:1F:00:F4
X509v3 Authority Key Identifier:
keyid:EE:87:8D:75:A2:18:0B:3A:68:41:FB:FA:96:C3:9A:90:E1:FA:6A:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oeNdaIYCzpoQfv6lsOakOH6alo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:8c:d0:bf:78:10:89:82:7c:a6:ed:61:b3:02:02:d5:ba:24:
af:07:da:05:b8:3b:8f:a3:00:15:94:03:ab:9d:b1:02:95:48:
7c:36:11:d2:ef:9d:43:b8:76:73:fd:ff:64:10:86:29:1e:c4:
2e:03:6b:ef:c2:a4:a8:4c:4f:de:1f:4e:2d:4a:52:76:ae:f1:
ee:17:23:7d:93:05:30:55:8c:98:db:28:59:c3:93:3f:04:4d:
39:62:7c:84:14:27:56:cc:fc:f9:f9:c6:04:f3:3e:29:77:a6:
48:1a:c0:ca:18:9f:1b:6b:36:bf:96:f1:9d:96:e6:4e:6e:1f:
98:0f:95:ac:4c:4d:63:fa:fe:3b:98:57:f3:a5:0c:49:8f:92:
ff:d8:89:ce:28:86:46:e2:54:58:fd:02:a3:9f:da:55:b3:6c:
79:75:d8:9d:67:73:91:01:e5:5c:15:0e:8c:f6:86:78:fd:54:
57:8c:be:ad:cc:3a:60:f1:1a:db:da:34:0b:82:56:39:dc:bd:
3c:aa:86:2e:00:6c:18:3b:f8:ab:ae:5e:2d:a9:61:2b:83:d2:
20:09:61:98:c9:18:16:fc:74:ea:39:62:fa:35:e6:a8:38:85:
5a:e8:d6:f9:f6:3e:20:41:da:1b:03:46:9f:a1:db:a4:fb:61:
0e:a4:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:51 2026 by rpki-client