
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
File: l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json)
Hash identifier: 7l7w2+Bd9GdCn+cHs1+vtmx2GFUuFqAz4ZjwlXy/jb0=
Subject key identifier: B4:E1:71:82:81:4F:AF:2E:AB:71:B7:5A:8A:DC:C9:35:31:20:56:52
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Certificate issuer: /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
Manifest number: 71
Signing time: Wed 23 Sep 2026 07:41:59 +0000
Manifest this update: Wed 23 Sep 2026 07:41:58 +0000
Manifest next update: Wed 30 Sep 2026 07:41:58 +0000
Files and hashes: 1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: xuBlSMsilUuOSdxTKHrunLEIhg7l/b8j2BoucMqDyaA=)
2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Validity
Not Before: Sep 23 07:41:58 2026 GMT
Not After : Sep 30 07:41:58 2026 GMT
Subject: CN=6ab382c7-8ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:a0:1a:dc:73:23:b7:af:c8:08:46:e2:bd:
27:9f:68:fa:1c:2e:79:bb:0b:ae:ef:50:69:e6:08:
aa:0d:02:04:97:06:3d:4b:35:40:5e:f3:89:b2:ce:
cd:76:4e:3b:a6:2f:04:c5:3b:1b:97:bc:66:8e:ec:
f0:87:e7:fa:56:dd:dc:c3:87:4d:a7:57:a1:eb:d5:
12:f4:06:32:ab:ac:f5:23:5b:97:e1:6e:1d:32:8c:
32:7d:e2:fc:c5:68:cd:0f:94:28:e5:59:b2:27:d5:
f3:17:6c:ee:a3:37:58:fc:7c:ca:6e:3c:d5:7c:3e:
d4:64:0c:6c:8b:4d:b0:f9:cb:fb:c5:19:35:6d:b7:
7e:d3:bc:95:c0:e6:ad:b8:dc:24:d1:50:af:4e:7b:
43:54:90:07:89:e0:71:c6:b2:01:71:20:2d:8d:f2:
18:bc:af:86:f9:e5:78:bc:39:43:d6:ac:9b:80:1e:
10:2f:ee:99:0e:fb:de:c2:72:41:fe:69:19:42:7d:
95:31:9d:b8:94:df:e6:b6:e6:45:e8:bf:fe:bc:d5:
8b:aa:c7:0c:16:8b:e0:f8:b2:89:96:2f:18:3f:02:
7d:e6:8a:3d:7d:74:50:72:37:1b:50:65:b3:b4:79:
88:05:be:ba:04:5e:45:68:16:0e:db:db:1d:e5:85:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E1:71:82:81:4F:AF:2E:AB:71:B7:5A:8A:DC:C9:35:31:20:56:52
X509v3 Authority Key Identifier:
keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1c:34:04:12:5a:9b:ba:89:72:7f:26:6d:a0:4d:38:a0:3e:
3e:9d:b6:85:04:a5:ce:4c:e7:b3:68:de:63:d0:a8:31:64:18:
f8:aa:81:97:83:b8:e7:5d:fb:ad:00:88:1f:45:0b:91:7c:2b:
b7:e5:db:96:1b:9c:6a:5f:bf:a0:52:1b:11:69:ef:7b:54:40:
4d:24:80:c6:6c:5d:c1:42:0d:a1:ae:38:41:e2:ef:3d:6d:49:
5a:0c:74:31:6f:4f:df:fb:5c:ac:c0:d9:6c:2d:ed:0a:bd:da:
aa:95:a1:81:47:30:fd:3d:71:82:a6:9c:6f:1f:a7:d3:5d:6c:
87:b7:7c:34:6f:89:ce:22:48:e4:f8:d0:83:c9:0e:d0:92:ef:
46:9a:2d:57:8c:d8:c7:31:6d:13:6c:1f:2b:8c:06:63:11:62:
1e:c3:34:84:27:54:12:79:b5:af:e8:8f:b8:9b:ac:76:e2:3d:
b5:b2:c6:82:03:d1:3d:b4:36:e6:70:34:64:22:fb:98:82:68:
a5:ce:17:ee:73:7b:e1:b4:71:fa:02:8a:c5:2b:d4:d7:b0:44:
cb:4d:ac:3a:30:b9:b8:e1:92:1d:c1:26:05:ef:13:49:47:a2:
2e:24:34:cb:af:c4:1c:10:a8:8d:32:7c:88:5c:1b:66:38:2a:
ff:d4:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:34:46 2026 by rpki-client