
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.mft
File: 7PupMcCC4HxZLjgIJiZPyxAadJQ.mft (raw, json)
Hash identifier: 2SR/Y0WMAVxoFbqZ1T1Z3FEZhGLBCwbiUzcPSqz45Mg=
Subject key identifier: 2B:77:F1:53:06:95:2B:58:32:DD:9E:D1:35:99:C6:E0:F4:78:0F:F8
Authority key identifier: EC:FB:A9:31:C0:82:E0:7C:59:2E:38:08:26:26:4F:CB:10:1A:74:94
Certificate issuer: /CN=A912E3B6/serialNumber=ECFBA931C082E07C592E380826264FCB101A7494
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7PupMcCC4HxZLjgIJiZPyxAadJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.mft
Manifest number: 65
Signing time: Fri 25 Sep 2026 08:09:00 +0000
Manifest this update: Fri 25 Sep 2026 08:08:59 +0000
Manifest next update: Fri 02 Oct 2026 08:08:59 +0000
Files and hashes: 1: 7PupMcCC4HxZLjgIJiZPyxAadJQ.crl (hash: cu3DhR89RSoTalhVovMXKDA1Tm3ova5X8lj78rlfjNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.crl
rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7PupMcCC4HxZLjgIJiZPyxAadJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E3B6, serialNumber=ECFBA931C082E07C592E380826264FCB101A7494
Validity
Not Before: Sep 25 08:08:59 2026 GMT
Not After : Oct 2 08:08:59 2026 GMT
Subject: CN=6ab62c1c-fcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:8a:3f:f3:b1:71:e6:ea:26:6f:dd:b9:cf:
80:5b:99:b9:aa:e4:a1:28:d2:96:2b:ee:9d:c2:63:
28:cf:5a:a9:1e:cc:85:c0:78:86:96:ed:4d:15:f9:
64:c0:93:4b:0b:08:6d:f9:4f:38:7c:c9:29:9c:60:
7f:4d:e4:6b:5a:e2:3b:cd:a8:40:8c:f4:f0:43:90:
f7:6b:0d:f0:fb:03:76:3c:ba:b8:4c:05:2a:57:44:
60:6d:d8:de:66:df:85:9d:ef:b7:a7:ad:a0:3a:c0:
69:68:66:ff:ca:e2:77:67:95:77:b8:73:e5:bc:57:
c5:99:f8:47:96:2e:a1:70:79:07:31:bb:25:15:33:
7e:5f:b7:ae:7e:6f:20:51:96:44:50:c2:34:48:aa:
5c:76:6e:b7:3d:c9:96:9f:ba:b8:d3:86:63:95:54:
01:d7:47:22:61:da:bb:55:c7:ef:7e:93:bd:9a:31:
e4:77:c6:04:ec:79:3a:d6:ed:6f:9c:ef:dd:3e:0e:
a2:5d:4a:98:a3:60:08:ff:ab:f1:d5:e3:68:82:35:
b5:05:d3:4a:dd:3b:9c:d8:db:2f:e4:cb:ed:f0:58:
5e:88:2e:33:20:48:74:eb:41:1c:54:ad:5b:76:dd:
95:5b:b1:1c:1b:0e:ce:29:af:1c:f4:85:bf:9c:16:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:F1:53:06:95:2B:58:32:DD:9E:D1:35:99:C6:E0:F4:78:0F:F8
X509v3 Authority Key Identifier:
keyid:EC:FB:A9:31:C0:82:E0:7C:59:2E:38:08:26:26:4F:CB:10:1A:74:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7PupMcCC4HxZLjgIJiZPyxAadJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/A6BAB10A1EC211F1AF56D7B8243D8C67/7PupMcCC4HxZLjgIJiZPyxAadJQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:6d:0b:88:bf:e3:46:f4:c3:7e:be:e6:6a:c1:9f:d1:c4:54:
b6:a0:29:95:dd:bc:17:90:78:54:91:13:e4:06:bd:69:64:bf:
be:ed:d5:9c:76:05:97:ba:cf:e4:0e:ca:0f:d0:90:c3:93:13:
ac:b1:eb:d0:6b:0f:36:40:a7:d1:1f:50:5c:00:f3:0d:0b:be:
21:82:6b:5f:e9:46:11:72:70:dd:c6:29:bc:bf:b9:a7:dd:67:
76:b7:6f:8a:a5:05:45:88:00:c9:55:a5:d5:e4:ad:c8:00:70:
50:65:01:3b:22:3c:bc:fb:88:34:f2:15:1e:d6:8c:a0:64:33:
cb:66:eb:5f:31:39:76:4d:9b:93:7c:1c:57:34:ff:40:da:f3:
ac:22:43:da:10:64:2a:6e:5c:ac:12:ce:0d:f8:e2:a6:13:e7:
5a:a1:b9:8e:a3:75:25:2b:6f:99:25:e7:19:3c:81:a0:cf:92:
2f:a1:82:62:a2:8d:56:b0:0d:ba:15:cc:04:74:62:a1:07:79:
c2:fb:69:43:d6:b6:05:d2:23:2b:4d:31:39:71:ca:57:4b:39:
4c:3e:f7:b1:d9:96:7d:c2:22:64:bb:47:64:2e:17:80:0c:a2:
15:38:42:c4:50:a2:64:73:08:1a:ca:84:2e:aa:2f:74:a3:46:
ad:e8:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:48:19 2026 by rpki-client