
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json)
Hash identifier: LWtfJznitWEV/BEE7YJNe2Gj2v0AT5ht7z4TYVSPzaE=
Subject key identifier: E3:72:C8:B8:60:AA:E6:70:52:EB:49:CC:D2:F4:BB:DD:73:0C:9F:03
Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
Manifest number: 018F
Signing time: Mon 03 Aug 2026 05:37:04 +0000
Manifest this update: Mon 03 Aug 2026 05:37:04 +0000
Manifest next update: Mon 10 Aug 2026 05:37:04 +0000
Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: k86TW2UXwYe1fnUtTxMBGjlsIZG6VjGcNAoe36g7PXc=)
2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: d/JGaBLpmkO3WUCz9tKyP+O9vcCg+/yL5K82Ej4w80c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Aug 2026 05:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Validity
Not Before: Aug 3 05:37:04 2026 GMT
Not After : Aug 10 05:37:04 2026 GMT
Subject: CN=6a702900-578e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:a5:fe:2d:f9:94:ff:4b:97:c0:08:59:37:
33:ea:d7:c0:a1:1d:01:57:5f:8a:26:07:5a:2f:de:
ac:63:db:7a:d4:34:8f:c5:72:df:c5:94:2c:ed:63:
8d:32:41:af:9e:9e:8f:3f:2d:83:44:52:3d:3f:b9:
12:b4:2f:19:77:fa:31:19:c2:57:3e:fd:f2:15:66:
a3:22:5e:fc:a6:ab:db:34:55:59:1c:4e:e4:5e:c5:
ac:4f:73:14:9d:b9:e0:2e:42:90:d9:4c:b6:6f:1c:
84:0f:37:ec:37:fe:b8:b2:44:dd:4a:0b:b6:f7:84:
52:8d:bb:83:44:c7:c6:b5:e5:12:93:bf:01:44:54:
c0:3f:23:1b:0b:9b:56:9a:e3:09:ab:f4:fe:0e:df:
c4:3e:cd:e4:68:35:69:e5:67:37:ab:17:f9:41:60:
bf:b6:04:71:dc:bd:a9:5c:ef:93:29:df:e2:6a:2d:
2a:f1:38:1f:19:b0:b4:70:8f:e0:4c:b7:00:3a:ff:
c7:bb:0e:2d:cd:a2:b4:e4:62:ea:33:8e:a0:bd:98:
74:16:e2:05:91:ff:ed:46:f3:00:f2:e1:b5:e3:95:
bd:3b:70:39:30:36:b1:2e:bb:4c:82:d8:05:b7:7a:
b8:f7:3c:ca:15:45:5a:56:68:36:b3:42:23:e1:d5:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:72:C8:B8:60:AA:E6:70:52:EB:49:CC:D2:F4:BB:DD:73:0C:9F:03
X509v3 Authority Key Identifier:
keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2c:95:70:49:a1:88:17:2d:5a:4e:02:5e:2c:b9:b1:fc:20:
74:80:cf:72:19:19:83:86:81:1d:ae:1e:16:f6:6f:f0:bb:1c:
9f:95:c3:67:19:c8:60:32:d2:d3:f0:9b:31:1a:e2:12:01:40:
d8:ed:92:cc:60:a3:78:c7:14:0f:2a:c7:73:7f:3c:fe:89:4d:
66:a5:14:14:c6:2b:d1:eb:fc:77:e5:36:a9:9f:d8:3f:db:8e:
12:9a:dc:3f:bf:03:d2:44:dc:08:7d:c1:d6:66:a2:4a:e1:7d:
1a:f1:43:f4:4d:cb:fb:40:de:c4:68:c1:c4:ee:a4:85:63:13:
5e:64:89:5f:8d:b7:00:cf:f8:be:56:17:d3:03:27:ce:02:db:
5a:00:d8:a2:90:e0:5e:61:92:93:7d:eb:62:a1:69:87:62:96:
5a:b5:c4:b0:d2:e0:41:40:3a:0b:81:30:f5:bd:3c:6b:6b:ec:
d1:8a:80:cb:30:de:fb:be:db:d1:7d:03:96:f8:ad:7c:d9:7d:
15:f8:f1:0a:21:28:ca:49:73:6e:a3:ff:12:2f:83:b3:b8:89:
b3:e6:c4:83:96:75:68:4e:08:6a:4e:a7:f4:22:1f:60:36:65:
4a:82:10:ba:29:c8:8e:ae:a0:9b:4b:5f:af:b2:eb:25:4d:f5:
e4:a9:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 21:01:47 2026 by rpki-client