
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier: HZIXsnFffUAa/XjlBMszpDuW1umr5qB60cmoBojqVdw=
Subject key identifier: 9F:8E:FE:7D:2F:FE:17:86:9C:53:EC:39:DE:88:DF:68:54:25:D2:0A
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer: /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial: 0D3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number: 1618
Signing time: Tue 18 Aug 2026 18:19:48 +0000
Manifest this update: Tue 18 Aug 2026 18:19:48 +0000
Manifest next update: Tue 25 Aug 2026 18:19:48 +0000
Files and hashes: 1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: kA5wDxSnMxT5jn9jN0R2nMP8iMyQy3wicAo4VDCeC/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3386 (0xd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Validity
Not Before: Aug 18 18:19:48 2026 GMT
Not After : Aug 25 18:19:48 2026 GMT
Subject: CN=6a84a244-d0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:0e:37:71:3f:cc:cf:62:0f:d1:11:c5:1f:
ec:8a:50:59:60:21:3c:8b:f6:36:2a:be:2c:7c:d3:
70:0f:9c:de:4e:50:08:51:cd:13:5e:e1:3b:fb:55:
3a:24:89:e4:2c:9a:c4:71:a7:05:99:5a:1d:a1:7d:
d9:a8:43:81:e3:22:0e:cb:e5:35:cb:9a:6c:77:a9:
0b:01:f1:be:1c:fe:cb:3f:9a:2b:8e:c8:14:87:f2:
67:12:b4:58:ae:fe:6a:b2:2e:c2:e4:b3:e7:ef:45:
c3:b4:2c:69:d5:4f:91:48:22:90:b1:40:d5:02:41:
89:75:f2:1f:6f:6d:59:19:39:ef:2e:9d:bf:47:4b:
d7:7b:80:98:20:4f:6f:fe:00:f0:f1:b6:3a:ed:06:
80:92:af:b4:2d:23:ba:49:da:9a:f5:82:2f:20:ba:
39:bd:78:95:b2:d7:3f:ae:ca:82:ab:e8:33:29:4c:
7d:b1:4c:1c:da:ab:6b:68:0d:a3:80:ca:ef:4e:cd:
82:38:31:d5:ee:bd:5a:6d:77:36:b3:ee:ff:bc:96:
5a:be:8e:04:61:d0:2c:85:6e:84:22:86:fd:ab:ce:
ae:c0:29:2d:1d:b0:40:93:b1:f4:61:59:74:4a:58:
9b:e1:ee:75:0a:51:ca:0e:e7:60:15:2f:e1:b8:5d:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8E:FE:7D:2F:FE:17:86:9C:53:EC:39:DE:88:DF:68:54:25:D2:0A
X509v3 Authority Key Identifier:
keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:85:a2:88:60:33:37:29:56:16:b7:4c:eb:98:39:39:40:bb:
78:67:5d:47:f5:a4:17:b4:04:2b:2f:6f:68:1c:58:7c:f6:59:
63:ba:64:0d:d2:e8:f7:18:f6:c8:11:c6:62:90:31:36:1f:1c:
16:8a:94:ed:3a:f3:e8:9e:a7:f4:aa:98:fc:50:48:9c:de:dd:
f0:52:48:a1:b0:f6:ac:55:0a:34:f0:b0:64:4c:ff:7f:75:88:
e9:ef:dc:32:3e:ca:68:de:d7:fd:7e:3b:ad:f1:94:8e:26:ae:
10:3f:5b:f1:65:95:9b:c5:c9:b7:72:48:25:9c:76:2c:fe:53:
71:a1:af:7f:db:bb:75:03:c7:33:9a:8f:cf:16:71:05:e9:fd:
c3:42:25:27:49:0e:77:7e:e6:37:b3:a2:e7:f0:7f:21:4f:b7:
ef:d2:16:7e:cb:4b:22:59:1d:7e:0a:79:74:f5:9f:43:4f:c1:
10:fc:a5:ff:19:d4:14:a8:bf:46:d2:30:58:09:3d:80:6d:08:
9f:a5:f4:7c:69:28:fb:74:b4:c1:24:8a:6b:42:ad:99:4c:92:
76:d8:39:52:82:15:80:58:96:a6:98:0b:3a:1f:82:0d:7d:2b:
f1:a8:10:fd:0a:6b:00:5e:a9:3d:5d:15:d0:ac:0a:53:1d:ad:
07:12:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:49 2026 by rpki-client