
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
File: 7ObXRymptklRLPzniy2vzsFGlzo.mft (raw, json)
Hash identifier: 7kwzUNmJVpi/CxD9HhjzBbV+9EshTAIDVh+aEmhmB1g=
Subject key identifier: AD:BE:EC:DB:F6:67:FC:5E:8A:38:B5:13:35:DD:76:81:6A:CF:C7:1A
Authority key identifier: EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
Certificate issuer: /CN=A916A171/serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Certificate serial: 0D4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
Manifest number: 0D40
Signing time: Sat 04 Apr 2026 17:52:54 +0000
Manifest this update: Sat 04 Apr 2026 17:52:54 +0000
Manifest next update: Sat 11 Apr 2026 17:52:54 +0000
Files and hashes: 1: 7ObXRymptklRLPzniy2vzsFGlzo.crl (hash: l8C1goMEDprcTF/my1dfziLiJCPVAYZtQDgcah+cwkk=)
2: F268590C1B9911ED9A50C30EC4F9AE02.roa (hash: WNQo1gJzwhXWEpc2UK9IPm/NBGxZHgROjQVKTAiSKXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:52:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3404 (0xd4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A171, serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Validity
Not Before: Apr 4 17:52:54 2026 GMT
Not After : Apr 11 17:52:54 2026 GMT
Subject: CN=69d14ff6-bd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:6b:cb:2a:54:e2:63:a8:d9:12:f4:7a:c5:
44:a3:df:f1:40:4b:83:47:3e:5b:b7:35:e3:67:b0:
b3:57:92:b9:b5:c5:0a:12:d6:97:ae:24:ba:0b:29:
75:63:7c:eb:86:9d:da:d5:b9:43:7e:27:03:1a:e3:
a0:d3:d1:cd:91:f1:89:22:c3:ba:d5:87:8d:ab:ac:
fd:99:41:8a:be:3a:65:a6:92:ef:56:ce:1f:b4:92:
10:dd:2a:fd:ba:77:a2:74:b6:57:aa:c4:b3:8f:7f:
75:8d:05:ae:55:fa:e9:90:da:e1:4c:2b:85:d2:ea:
da:8d:09:b9:d0:84:21:ab:58:1c:cd:0f:c6:0b:af:
10:a7:79:d6:c0:d9:f0:f1:45:86:07:6b:3e:6b:0d:
03:34:c8:2e:9c:23:fa:a7:be:46:d7:ab:93:48:b1:
50:8e:30:d3:f0:26:fc:44:df:4b:5a:31:0f:c8:18:
5c:25:4b:91:12:fa:f2:99:a7:f9:d1:8b:55:cc:22:
d6:7d:64:4a:3f:ab:00:96:66:5d:b4:75:c9:23:d1:
9c:2a:68:75:04:65:93:4e:ee:c2:83:a5:de:e5:5a:
b9:d0:28:03:35:0d:ce:ee:71:c8:1d:62:3d:9b:fa:
16:8f:1d:e9:5c:31:40:72:4d:3a:08:28:3a:72:6d:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BE:EC:DB:F6:67:FC:5E:8A:38:B5:13:35:DD:76:81:6A:CF:C7:1A
X509v3 Authority Key Identifier:
keyid:EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2d:82:2c:18:82:61:11:89:69:63:2f:0a:85:89:2b:e2:df:
f7:bc:a8:28:65:7e:5c:6a:57:23:7d:ab:f5:c0:1a:41:d1:98:
b3:79:e6:62:3e:cb:31:51:18:cc:61:ac:28:f6:28:6c:2e:ed:
e4:a6:6e:c3:7e:83:05:f7:74:f5:9f:6a:6a:d0:04:55:4d:34:
52:1f:08:1c:6d:5e:09:ca:ce:90:c1:c3:db:57:9e:5a:17:20:
4f:e7:49:2a:f1:13:ce:fe:21:8e:49:25:29:c1:38:f5:41:1f:
5e:85:ab:2c:0a:ed:73:2c:d4:28:10:35:2b:45:fc:28:77:98:
12:7a:e7:08:4a:05:f2:4f:d9:18:5e:d9:c9:cd:2d:ae:20:0b:
83:fe:cf:a0:0e:8f:56:74:d3:1e:73:25:fe:f0:54:ea:44:2d:
12:af:5a:84:78:06:f1:c3:54:c9:ca:c7:e8:05:ca:a8:83:d9:
3f:0d:74:1d:ff:40:e6:65:73:81:0c:af:97:f2:37:d8:a6:6e:
33:c7:1e:29:f1:dd:01:88:80:76:3b:58:82:0f:b8:f5:a5:25:
39:f3:b1:c7:1f:e0:dc:c6:a0:25:0a:02:99:a1:32:2c:32:cd:
97:ac:13:af:35:4b:70:bc:65:6b:20:22:04:39:cc:0a:a5:b0:
e7:48:c3:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkExNzExMTAvBgNVBAUTKEVDRTZENzQ3MjlBOUI2NDk1MTJDRkNFNzhCMkRBRkNF
QzE0Njk3M0EwHhcNMjYwNDA0MTc1MjU0WhcNMjYwNDExMTc1MjU0WjAYMRYwFAYD
VQQDEw02OWQxNGZmNi1iZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzetryypU4mOo2RL0esVEo9/xQEuDRz5btzXjZ7CzV5K5tcUKEtaXriS6Cyl1
Y3zrhp3a1blDficDGuOg09HNkfGJIsO61YeNq6z9mUGKvjplppLvVs4ftJIQ3Sr9
uneidLZXqsSzj391jQWuVfrpkNrhTCuF0urajQm50IQhq1gczQ/GC68Qp3nWwNnw
8UWGB2s+aw0DNMgunCP6p75G16uTSLFQjjDT8Cb8RN9LWjEPyBhcJUuREvrymaf5
0YtVzCLWfWRKP6sAlmZdtHXJI9GcKmh1BGWTTu7Cg6Xe5Vq50CgDNQ3O7nHIHWI9
m/oWjx3pXDFAck06CCg6cm2amwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2+7Nv2
Z/xeiji1EzXddoFqz8caMB8GA1UdIwQYMBaAFOzm10cpqbZJUSz854str87BRpc6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTE3MS80RjU3RTlCRUY0
OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRrbFJMUHpuaXkydnpzRkds
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdPYlhSeW1wdGtsUkxQem5peTJ2enNGR2x6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTE3MS80RjU3RTlCRUY0OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRr
bFJMUHpuaXkydnpzRkdsem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqC2CLBiCYRGJaWMvCoWJK+Lf97yoKGV+XGpXI32r9cAaQdGYs3nmYj7LMVEY
zGGsKPYobC7t5KZuw36DBfd09Z9qatAEVU00Uh8IHG1eCcrOkMHD21eeWhcgT+dJ
KvETzv4hjkklKcE49UEfXoWrLArtcyzUKBA1K0X8KHeYEnrnCEoF8k/ZGF7Zyc0t
riALg/7PoA6PVnTTHnMl/vBU6kQtEq9ahHgG8cNUycrH6AXKqIPZPw10Hf9A5mVz
gQyvl/I32KZuM8ceKfHdAYiAdjtYgg+49aUlOfOxxx/g3MagJQoCmaEyLDLNl6wT
rzVLcLxlayAiBDnMCqWw50jDdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:39 2026 by rpki-client