
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
File: D7ep-f-5NrdU2MC2yClQpAHeosc.mft (raw, json)
Hash identifier: Wifkupwnm2Mk3TlNUtJuWwP3kOaThlfLxNRizn8nLGw=
Subject key identifier: D9:E1:FB:7D:BC:8E:5F:27:CC:93:66:19:FF:5A:46:13:3B:EB:D9:19
Authority key identifier: 0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7
Certificate issuer: /CN=A9168E98/serialNumber=0FB7A9F9FFB936B754D8C0B6C82950A401DEA2C7
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
Manifest number: 0D
Signing time: Wed 12 Aug 2026 20:11:44 +0000
Manifest this update: Wed 12 Aug 2026 20:11:44 +0000
Manifest next update: Wed 19 Aug 2026 20:11:44 +0000
Files and hashes: 1: D7ep-f-5NrdU2MC2yClQpAHeosc.crl (hash: T0DKBxAL9pCK1dFSsvBMT31P1S2SS0gvfKjkIPlWF/4=)
2: AA50EC82898C11F1B30FA3E93511F970.roa (hash: ASgVXSQlKnnYot70D1erTIBPWX/qbO4yBe47XAOtnRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.crl
rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Aug 2026 20:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168E98, serialNumber=0FB7A9F9FFB936B754D8C0B6C82950A401DEA2C7
Validity
Not Before: Aug 12 20:11:44 2026 GMT
Not After : Aug 19 20:11:44 2026 GMT
Subject: CN=6a7cd380-c0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:a2:54:c4:e7:3e:04:69:ad:44:01:71:c6:
58:7b:17:7e:8c:f2:ad:dc:19:1e:8d:62:88:dc:8f:
d6:b3:fe:22:d1:3d:bb:0c:22:f5:bb:33:a6:21:e7:
3d:d4:2e:91:ca:25:97:35:3c:15:98:37:ff:e0:0a:
41:ae:d8:c8:e4:1b:47:cf:b1:b9:92:45:76:7c:82:
10:1b:cc:db:75:2b:10:e9:e2:07:11:78:e2:43:96:
05:97:1d:8f:61:4a:91:46:e8:2a:7e:08:1f:d7:11:
cd:02:7e:3d:fd:63:6d:46:64:bc:cd:ab:2e:42:c2:
01:cb:82:4d:10:0f:61:15:36:da:4c:30:f2:36:c9:
59:cd:b1:c1:b7:86:cb:b3:42:8e:f0:5f:16:fd:b0:
f5:77:aa:e1:62:fe:2c:f4:44:2f:fe:22:97:50:bc:
db:3b:b5:bd:6c:5d:ad:86:9e:b6:38:73:82:f8:c3:
3f:a3:83:af:82:fb:15:6d:bf:8c:27:81:eb:58:48:
5d:c4:b7:ba:bc:68:51:e3:ac:cf:19:72:52:24:03:
31:d0:e9:f7:a2:89:e9:ad:ae:0c:1f:9a:ca:3e:88:
40:4f:09:0b:77:66:a4:a7:9c:c8:f2:19:a9:f7:21:
6a:9f:5e:0c:5a:9d:1e:9c:21:66:f1:e0:40:cc:ea:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E1:FB:7D:BC:8E:5F:27:CC:93:66:19:FF:5A:46:13:3B:EB:D9:19
X509v3 Authority Key Identifier:
keyid:0F:B7:A9:F9:FF:B9:36:B7:54:D8:C0:B6:C8:29:50:A4:01:DE:A2:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D7ep-f-5NrdU2MC2yClQpAHeosc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168E98/68B95DF0897C11F1B45623477011F970/D7ep-f-5NrdU2MC2yClQpAHeosc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d1:9a:b4:ac:96:35:87:d1:b3:ab:9f:21:9c:db:07:c4:40:
52:16:34:3b:af:03:f4:d8:dc:d0:f5:67:d4:d7:34:8f:74:ca:
1a:f8:5f:73:01:3f:83:68:68:ed:ec:81:a1:da:53:00:04:d8:
bf:4f:d6:04:46:38:ca:aa:5b:68:9f:b7:f9:a4:fb:d2:d0:30:
bc:b5:cc:6c:1a:d6:4a:8b:f9:14:c5:1a:03:c8:06:01:3b:a2:
b3:f7:2b:1e:d2:dd:f5:9a:89:76:e9:08:d7:af:20:67:77:c0:
89:96:82:5c:54:82:1f:11:13:89:fc:55:9b:bf:bd:da:f1:b1:
e6:53:3c:b4:f2:11:5c:1e:e0:64:ab:88:6a:40:f8:e4:f7:ac:
34:6c:87:7f:20:10:21:44:b4:62:72:56:99:61:35:20:f9:4b:
6c:1f:86:39:49:5b:02:aa:da:5d:75:79:37:3f:9f:42:01:1e:
2c:d0:d8:7f:3b:66:77:c4:5e:ef:35:6d:ac:e7:10:2f:ac:08:
73:fc:00:64:af:91:6c:19:1f:ce:b5:72:7f:47:d9:69:66:5a:
12:fe:3a:3e:df:16:7a:59:b3:68:5d:3c:f0:01:bc:0e:d4:7c:
81:43:06:23:cf:92:18:88:7d:45:b1:6d:1f:bf:c0:7c:b3:5f:
21:bc:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:40 2026 by rpki-client