
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json)
Hash identifier: 6CGXUwi0OPKU7/WCiXWRe8y+oXkAV8aO8R24Tcs/XBw=
Subject key identifier: 3E:D6:4A:94:B0:E5:CB:48:04:40:04:D3:DD:03:89:6C:44:26:72:E8
Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Certificate serial: 0A7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
Manifest number: 0A73
Signing time: Sat 31 Oct 2026 19:55:53 +0000
Manifest this update: Sat 31 Oct 2026 19:55:53 +0000
Manifest next update: Sat 07 Nov 2026 19:55:53 +0000
Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: Kvyp1lOIVmE0EJ2aROqXDRR+OxaT3/5PcoU4soJrgck=)
2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: C5fV75a8UUAFlsfjrW7ofnI1EJVxNwJDDKqV7jbbm0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 19:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2685 (0xa7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F
Validity
Not Before: Oct 31 19:55:53 2026 GMT
Not After : Nov 7 19:55:53 2026 GMT
Subject: CN=6ae647c9-a0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:33:46:8c:2a:0d:08:28:3c:b5:dc:4a:fd:
f1:44:61:21:c4:a0:f2:c2:87:f6:fa:33:d5:1f:e5:
8a:db:65:48:91:6f:cb:6e:74:68:30:c9:d0:62:f3:
8f:86:8c:ac:c1:f4:33:5c:96:30:16:8e:25:bd:57:
a0:a5:e9:a1:d4:55:ac:0f:ae:49:07:19:5f:4a:c3:
a5:96:16:fd:0f:72:64:6f:36:9d:4f:32:6b:23:71:
8b:95:cd:05:97:fb:52:e2:86:07:47:a5:54:a1:a9:
98:36:ca:c3:2f:6b:d2:2f:56:ba:29:39:8a:06:93:
94:1a:f8:98:ac:a5:4d:de:91:ba:9b:5d:b5:61:e5:
11:fa:b2:d8:49:ba:fa:51:35:20:ca:6c:75:86:76:
81:e5:72:78:08:4a:e9:7d:fe:7c:ee:16:06:9b:ee:
65:41:36:95:3d:47:b8:19:bc:06:e4:6f:eb:b4:8d:
26:40:f8:30:80:8c:de:4a:ae:31:d4:92:1f:56:59:
df:0c:f6:c7:f0:c5:77:17:26:04:cb:ac:a1:90:5d:
9a:04:48:b9:98:8d:36:61:83:c2:9b:83:b2:0e:af:
9b:54:5c:dd:e1:8d:4f:3c:78:e6:f3:79:14:8f:60:
cb:33:4a:3b:50:39:a4:5d:90:f9:af:a9:4b:d7:40:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D6:4A:94:B0:E5:CB:48:04:40:04:D3:DD:03:89:6C:44:26:72:E8
X509v3 Authority Key Identifier:
keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ca:29:26:d4:e5:bc:cd:40:c4:1f:58:6d:cf:c7:0e:e8:c6:
81:41:36:3d:4a:e6:08:54:18:7f:76:08:3e:ac:11:c9:ed:22:
13:9b:7b:49:ca:13:06:90:61:c8:f0:96:22:18:22:6a:29:bd:
7e:13:83:8e:6b:f6:b5:5a:cc:d4:5a:a2:2f:57:81:87:20:6b:
83:46:bf:a6:56:52:7a:03:5c:fb:09:7b:69:c9:99:65:20:c2:
db:e8:7f:c2:8c:36:63:ec:1c:14:9e:09:d9:5f:a0:c7:da:0b:
57:a0:67:c4:0d:1b:f7:0d:30:6e:73:16:a9:14:44:22:bb:00:
d8:85:05:6b:72:0d:e4:db:72:b8:12:f5:8f:3c:a6:e2:31:75:
ce:a9:a5:96:6a:16:5b:2d:26:ed:f6:92:9d:6a:73:83:58:2c:
57:05:4d:b7:bb:17:4d:d9:94:9c:fa:0a:d3:53:79:a7:46:99:
cd:6a:44:d9:62:84:7a:a8:75:bc:e2:b7:7d:62:d8:07:73:18:
e7:07:35:d0:9a:db:63:1d:a7:db:8f:75:1e:5c:2e:13:bc:dc:
33:4a:5a:08:47:37:60:4b:8b:05:6a:b2:ae:7d:d7:64:0c:84:
c6:e3:72:66:5e:57:56:89:00:fb:1d:ed:7b:96:3f:18:95:60:
41:79:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:34:36 2026 by rpki-client