
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
File: xh7aKdRphAjI5WdDhpTVNnJaEn0.mft (raw, json)
Hash identifier: qKTURC+kxHHKE7TFwz4f3wUMtwvoPg7og5E5VrG+yN8=
Subject key identifier: 86:CE:AB:9F:A1:0C:C7:3C:CE:A3:C0:58:71:C8:74:AA:9D:DA:E3:B1
Authority key identifier: C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D
Certificate issuer: /CN=A918966F/serialNumber=C61EDA29D4698408C8E567438694D536725A127D
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
Manifest number: 7C
Signing time: Sat 03 Oct 2026 08:29:49 +0000
Manifest this update: Sat 03 Oct 2026 08:29:48 +0000
Manifest next update: Sat 10 Oct 2026 08:29:48 +0000
Files and hashes: 1: xh7aKdRphAjI5WdDhpTVNnJaEn0.crl (hash: b/vv3ZnNk5aQtVTw0XCgOxxXLxpNHo2xfV9vfaOmjWw=)
2: 7FA6A66E072511F18DD83FDE2B3D8C67.roa (hash: eQqlL71/p1sNSKb5Ex9TeNmIs+RfO86ZYPmbwnWNKa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl
rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918966F, serialNumber=C61EDA29D4698408C8E567438694D536725A127D
Validity
Not Before: Oct 3 08:29:48 2026 GMT
Not After : Oct 10 08:29:48 2026 GMT
Subject: CN=6ac0bcfd-720d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:41:bb:cd:a8:79:4a:9e:b4:7e:79:24:5b:
33:49:fa:27:9a:e9:f9:aa:19:5f:fe:ab:f2:b9:30:
2a:3f:c8:6f:f1:61:ec:c5:91:2d:0d:22:9b:4a:11:
7f:c0:86:f4:62:ac:45:99:1d:51:e8:7b:b5:8e:1d:
fc:b1:da:76:18:af:98:05:ff:fb:da:c8:7f:ef:45:
0e:cd:e5:d8:3e:83:e9:ed:66:7c:b8:38:1f:cd:69:
ae:c5:28:10:73:4a:6d:97:cf:e1:a1:76:51:2d:1c:
4d:7f:56:b9:55:56:0d:47:a8:29:8d:5f:85:97:7e:
6e:03:e4:ba:91:54:68:25:6a:12:f3:26:52:c3:d3:
f3:32:d2:67:e8:55:7a:d5:4a:a8:ab:74:2f:6c:ea:
77:b4:bc:94:98:70:3b:3f:70:cc:9d:a0:68:02:46:
84:bf:0c:c4:5c:6e:ff:e3:d8:33:61:62:79:85:f9:
08:1a:b1:9f:56:9c:fb:44:4c:4a:f7:bd:f6:91:7e:
4c:ec:cf:da:2a:90:f2:de:38:6c:d3:c3:97:80:70:
77:bb:36:d3:5a:3c:5d:ad:68:56:5c:31:36:2d:bb:
23:61:4f:fb:9b:79:cd:49:ac:89:4a:2c:f6:6c:bd:
51:b8:62:2a:10:5e:1d:9c:89:23:d2:b6:ab:87:77:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CE:AB:9F:A1:0C:C7:3C:CE:A3:C0:58:71:C8:74:AA:9D:DA:E3:B1
X509v3 Authority Key Identifier:
keyid:C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1e:97:e3:c5:07:9e:9c:84:65:cf:5d:65:64:44:48:99:62:
db:94:2c:36:bf:e3:55:d1:f7:e4:cc:ce:37:fd:78:da:05:dc:
dc:17:31:ea:bd:93:50:f4:9d:61:a1:46:39:b2:77:ba:c2:f8:
1d:eb:c0:e8:1d:90:6a:01:00:62:dd:4b:80:76:c5:9e:73:4c:
45:a2:cb:0e:71:ff:93:a3:a4:44:1d:f2:03:22:c8:b5:f3:90:
30:ac:49:0a:dd:33:61:bb:2b:34:88:0b:34:e3:0e:9a:e9:ab:
ba:cd:24:ad:99:b3:7b:0b:e0:3c:2c:15:1f:cf:d4:fa:b8:dd:
c9:cd:25:77:0f:4a:13:2c:c5:34:43:e8:94:e3:6e:a7:cf:4a:
74:e9:f9:be:41:b5:f5:d5:98:e0:39:f7:3e:11:df:3b:62:ab:
70:20:70:b7:49:72:56:72:ce:18:62:e5:f4:60:17:58:25:06:
69:84:94:04:a3:03:63:e8:e1:76:67:e3:53:61:cb:a8:ef:81:
21:29:a6:fb:0e:09:15:02:44:ec:ac:92:58:16:4e:11:08:38:
b3:7a:8b:17:40:a6:41:33:55:9a:5b:58:9d:46:fd:a2:b7:0b:
c7:63:9c:22:ee:bf:b1:56:68:5b:0b:fe:84:88:a7:75:98:9d:
72:28:98:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:48:10 2026 by rpki-client