
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
File: 7ObXRymptklRLPzniy2vzsFGlzo.mft (raw, json)
Hash identifier: 7qgCDMySykt4siG98XpmYgxCxNNOU0PAKKyRIXDsP4g=
Subject key identifier: 72:86:C3:6A:14:4F:15:AB:6C:91:6C:93:CF:B5:0B:8F:63:E4:85:B6
Authority key identifier: EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
Certificate issuer: /CN=A916A171/serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Certificate serial: 0D94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
Manifest number: 0D87
Signing time: Tue 18 Aug 2026 18:11:28 +0000
Manifest this update: Tue 18 Aug 2026 18:11:28 +0000
Manifest next update: Tue 25 Aug 2026 18:11:28 +0000
Files and hashes: 1: 7ObXRymptklRLPzniy2vzsFGlzo.crl (hash: KuHu+2Ygp5gUk4gQZZK5TXiypx/B7UAVYyL9riOvB0o=)
2: F268590C1B9911ED9A50C30EC4F9AE02.roa (hash: Im0kZv5va3DbJ8z323rnmgA9B8R/OKM++S+e6kg2R8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3476 (0xd94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A171, serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A
Validity
Not Before: Aug 18 18:11:28 2026 GMT
Not After : Aug 25 18:11:28 2026 GMT
Subject: CN=6a84a050-db12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:79:d6:52:c2:f4:c3:e8:f8:cd:72:62:70:
76:a9:ed:99:85:3e:99:c3:46:b9:18:e9:3a:d6:cb:
90:e9:54:72:81:82:80:f6:d6:b2:9d:e1:75:ef:1e:
4c:4c:01:4b:23:47:a7:ad:7b:19:75:94:d2:a5:86:
9a:5c:37:9b:28:98:81:dc:22:09:e2:4d:54:9d:c7:
9b:47:c1:d6:b1:e2:da:0b:65:26:e6:43:11:9e:da:
10:ae:ce:08:e6:46:88:7c:0e:95:77:e0:49:a3:fe:
cd:81:78:94:a2:45:73:d5:b5:5e:c6:67:33:82:cc:
e1:b2:00:4b:d5:e6:d5:7a:15:06:4c:15:12:62:3d:
da:65:11:c0:25:64:75:07:f1:63:69:d5:4b:62:c0:
7a:1c:cc:12:fd:94:81:e1:1c:53:01:f4:96:4e:39:
5c:ce:2f:b2:12:f8:21:b4:f8:40:da:35:b7:89:8f:
1e:1f:dc:ae:e3:e3:9e:eb:41:cc:d2:1d:de:5b:0a:
e3:e0:00:73:fc:66:ec:69:fc:ec:12:19:c7:c5:e0:
07:39:2d:42:8a:b7:ee:09:6e:5a:a3:7c:cd:dd:bc:
79:e5:5b:1d:3b:05:ee:cd:b2:dd:92:6c:68:0c:0e:
01:c4:d4:32:65:71:42:e5:20:c1:dc:75:56:87:f8:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:C3:6A:14:4F:15:AB:6C:91:6C:93:CF:B5:0B:8F:63:E4:85:B6
X509v3 Authority Key Identifier:
keyid:EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:de:46:3f:8f:a4:84:9a:1c:89:96:48:ff:ce:bb:b9:b3:c1:
29:bb:05:6b:90:1d:e4:5b:20:fc:e1:a9:94:38:4b:32:d2:5e:
cf:18:0d:6a:c5:a3:49:08:91:ca:45:bb:ad:01:b6:a6:2c:c8:
e9:1a:c2:4b:91:e1:70:ad:57:43:d5:9c:2e:9c:56:70:cf:db:
41:7f:72:7d:89:b9:b4:82:dc:93:58:27:19:dc:93:d9:f4:54:
2b:c3:b8:2c:d1:29:2d:43:1d:12:27:53:cb:ca:a9:97:e5:3f:
f4:e8:4b:29:0b:16:cd:f9:45:39:b8:5b:ed:e9:85:47:33:bf:
be:42:f1:50:8e:e9:56:71:00:76:33:d6:7c:a7:d8:cb:6f:5d:
e8:00:c5:29:47:9a:c5:6c:83:e2:be:8a:12:d1:eb:e0:c7:05:
dc:91:a4:72:87:62:c1:ba:e7:1f:bd:44:12:aa:d2:88:b8:8f:
16:81:0e:1c:52:11:1c:cb:27:b3:ef:cb:ea:50:a9:c9:18:de:
04:85:59:e1:3d:0a:4c:9a:52:14:07:c4:c0:c8:74:23:19:09:
6d:35:1e:98:e4:62:e6:eb:da:f9:08:6c:62:00:e5:cb:e3:de:
15:20:92:2e:80:52:93:03:1e:ef:12:51:3b:1a:39:32:2d:4d:
aa:e7:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:55 2026 by rpki-client