
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json)
Hash identifier: yH2WfSo0WeIsm+dQYQKfL0HKk0i/xaTViP4TZxKF1lw=
Subject key identifier: CE:FE:15:D4:43:88:84:66:7C:3C:DD:8F:74:5D:14:E0:BE:E0:4D:59
Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F
Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
Certificate serial: 2222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
Manifest number: 2222
Signing time: Tue 22 Sep 2026 15:49:21 +0000
Manifest this update: Tue 22 Sep 2026 15:49:20 +0000
Manifest next update: Tue 29 Sep 2026 15:49:20 +0000
Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: PME9b5xt+pdvm3LGZR7fBLv5Fn7T6kw8KaSekmymvV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl
rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8738 (0x2222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F
Validity
Not Before: Sep 22 15:49:20 2026 GMT
Not After : Sep 29 15:49:20 2026 GMT
Subject: CN=6ab2a381-2648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:22:f6:89:4a:4b:3f:5a:ad:79:56:35:68:
54:74:6c:57:18:54:fb:51:e4:72:1e:e1:9a:5a:11:
49:fd:2e:13:74:7a:0e:73:b5:f8:97:a9:02:7e:93:
9f:ca:57:22:77:08:c2:d8:cd:f4:23:fb:a5:ce:9f:
27:18:85:b9:d6:ff:59:c4:f3:49:3a:b8:cc:0b:97:
8f:1e:4e:f3:ee:22:94:13:aa:55:9a:62:21:59:91:
09:0c:66:75:db:33:6a:a3:5b:79:f8:ed:d7:0c:57:
55:21:c3:7d:b5:15:02:22:f1:bd:68:ae:ac:31:d1:
8a:8d:1b:3c:0f:e9:0f:dd:3f:74:01:b9:fa:3d:40:
47:ca:cd:9d:73:52:74:bc:56:c5:58:41:9d:5a:1c:
10:95:ad:ac:f7:38:a2:d4:28:a4:7d:fd:10:4c:f1:
07:f4:f3:89:af:29:9f:2d:0f:93:f1:af:35:04:ba:
83:e2:f0:a8:d5:03:70:c5:61:01:85:e6:25:d2:1c:
16:5e:67:f6:16:5e:17:a5:12:18:98:77:f6:89:eb:
12:aa:60:c3:1b:7b:ef:44:b3:13:b6:21:af:37:28:
48:ed:f2:4b:56:17:e2:24:43:59:a6:86:d2:85:5a:
76:61:bd:03:c8:1b:94:c7:72:87:ec:26:9b:ca:50:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FE:15:D4:43:88:84:66:7C:3C:DD:8F:74:5D:14:E0:BE:E0:4D:59
X509v3 Authority Key Identifier:
keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:af:0f:a4:54:d7:20:41:44:60:03:c5:fe:36:81:55:fd:74:
87:64:85:ad:37:0c:58:84:aa:bd:59:30:96:8a:3f:0a:f2:95:
06:cf:07:b4:b1:a8:b5:25:e8:06:1f:fa:fb:e3:74:f2:87:f6:
4c:f1:77:dd:91:c0:34:6c:6e:d8:00:18:f1:b2:41:1d:e5:e3:
33:c4:ff:0a:d1:05:2f:4d:92:d8:7b:16:1d:d0:81:ed:11:bd:
28:cb:a5:2b:0d:f8:69:5b:20:6b:a1:25:a1:eb:9f:21:2b:20:
e6:55:1b:4e:04:14:7b:9b:8a:96:8a:a1:f8:95:ba:19:2f:7e:
e7:28:3e:09:d2:8a:54:8e:7b:d4:24:5f:59:03:38:04:95:23:
f2:6c:17:27:a3:8f:dc:39:a7:97:a6:5e:9d:17:7e:14:4f:47:
b8:81:f7:5f:6b:ca:55:ef:9e:83:13:0f:90:3b:ab:cc:0c:42:
3b:c7:26:9f:22:28:da:51:7c:14:e8:51:2b:bb:e6:6c:99:0d:
e3:ed:bd:47:4d:45:17:47:6f:44:73:00:ec:8f:04:3a:72:b6:
8e:98:99:03:04:c3:a9:bd:cf:e3:eb:65:d5:6d:67:51:fe:b2:
f4:3f:b2:87:0b:cd:61:c5:51:d0:d3:54:8c:02:bb:6b:af:d9:
21:ce:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:01:17 2026 by rpki-client