
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json)
Hash identifier: Fl8eUH7DLRYY9psnWtDHFcF39+HZvTZVAtUza87NfNA=
Subject key identifier: FF:4F:C3:12:7F:BB:E5:00:CA:85:8E:3A:C7:D9:75:75:FF:A3:BF:A3
Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Certificate serial: 0D66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
Manifest number: 0D38
Signing time: Thu 24 Sep 2026 18:18:57 +0000
Manifest this update: Thu 24 Sep 2026 18:18:57 +0000
Manifest next update: Thu 01 Oct 2026 18:18:57 +0000
Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: SMZ45OBao1xQFnK6c6tM35MEoyoJ295yJz0ALyQ2/Ys=)
2: CB737E28422611F1882323FB8F833773.roa (hash: Sas3K0pNeR22zRvDEW+/zPRH6R1LCgFXxVnXBhEToJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3430 (0xd66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1D5, serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Validity
Not Before: Sep 24 18:18:57 2026 GMT
Not After : Oct 1 18:18:57 2026 GMT
Subject: CN=6ab56991-38c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:60:93:80:8d:f1:e6:c3:bd:dc:dd:7c:be:
db:c4:a0:c7:03:d9:6c:32:27:03:56:cd:ac:b4:d8:
df:39:96:e4:b6:b7:f1:81:cd:13:a5:15:ed:c8:c9:
43:8e:0c:16:33:4e:9a:57:87:2e:7f:d0:69:de:69:
8e:98:38:fb:3a:e3:3d:16:4b:69:c9:1e:44:ea:a6:
90:b6:67:58:73:d8:9a:c2:d8:b6:56:0c:32:75:bf:
61:19:21:bc:93:a1:92:2c:c8:c9:33:1e:33:40:b8:
13:0c:bf:e5:9e:54:0f:a2:49:95:8f:34:1c:e1:f8:
63:d1:b4:fe:f9:74:5d:a5:ec:34:b4:aa:db:d5:43:
25:f9:b5:fb:c2:56:35:89:ad:c8:ae:6b:f6:2d:e4:
3f:9f:77:29:2d:a6:96:17:80:76:02:bf:46:e7:80:
da:41:e3:61:90:ed:fc:53:77:b2:11:7b:32:d4:d3:
63:38:3f:c0:16:5c:fb:e2:7f:96:70:14:bb:85:80:
b6:0b:6a:33:d6:d4:15:15:15:99:27:00:19:8d:7c:
cf:44:e4:e1:30:ca:b9:9f:88:fe:05:ee:4c:7e:db:
d1:d6:20:82:b5:ea:98:9b:43:74:a4:19:17:40:d3:
bb:fa:9d:4d:e5:3e:bd:a7:a9:0b:b3:23:5f:1b:83:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:C3:12:7F:BB:E5:00:CA:85:8E:3A:C7:D9:75:75:FF:A3:BF:A3
X509v3 Authority Key Identifier:
keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:10:8f:1b:a5:96:9c:10:d5:96:86:b9:57:ab:ed:46:e3:2b:
43:85:f4:04:f9:dd:91:05:05:11:a9:42:34:e4:43:a9:61:da:
c1:5e:b4:c3:e3:f2:7a:29:be:29:1b:fc:34:7c:cb:91:ab:7f:
bc:54:7d:31:dc:2b:91:7b:28:c1:13:25:9c:ec:0c:22:1b:98:
bc:ec:c9:4f:5d:ac:44:ae:0d:50:db:77:36:0e:03:18:a5:80:
ea:9b:c8:68:59:94:7e:7e:67:e5:48:50:9b:ef:ad:d3:bb:bb:
15:43:0b:d4:f0:3e:88:62:8a:dc:5b:b9:d1:0f:51:96:5e:6b:
f0:5a:34:d8:18:de:28:c2:b1:52:e8:9e:e2:6f:02:72:01:47:
1d:78:43:df:89:9b:1d:d2:21:30:fe:4c:90:66:bf:c5:26:4d:
84:dc:15:52:1b:58:ac:44:60:0d:26:2f:73:4f:0f:91:8b:3d:
f5:5a:53:92:f5:f5:18:33:e7:e3:6a:db:1a:75:8b:87:81:2c:
a9:86:2f:aa:3b:91:e9:ed:c7:7b:5a:ec:fe:c4:49:18:a7:e3:
60:bb:c7:57:88:3c:34:dd:af:6d:50:e5:7b:11:14:69:1d:bb:
d8:a5:f4:cb:15:cc:b1:f5:2e:c3:df:6b:bc:ab:4f:91:40:ff:
7e:8e:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:26:41 2026 by rpki-client