
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
File: P7ClbiDxlMd0mHnU0iWz-X6evs8.mft (raw, json)
Hash identifier: LdBx//C/4pTeDtvRU7Eos7gujfIm/dC4ajjdWa0jzso=
Subject key identifier: 4C:9D:D7:6D:58:C6:D1:2D:A0:D5:18:DF:5B:37:63:6B:1F:66:BB:6E
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 08B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
Manifest number: 0879
Signing time: Thu 24 Sep 2026 21:02:58 +0000
Manifest this update: Thu 24 Sep 2026 21:02:58 +0000
Manifest next update: Thu 01 Oct 2026 21:02:58 +0000
Files and hashes: 1: P7ClbiDxlMd0mHnU0iWz-X6evs8.crl (hash: cMej97b6k2NHl9Da+Qbo10mWQ8fJ6kL7Ghdb8wkv1SI=)
2: 4792C69CCB5011F08BC97C80C4F9AE02.roa (hash: koyQjeZeanH/WxX+hG3btxn3WoeYvMUcBqScjdbVX8I=)
3: 5EB91EB40F9611F0A2F2830DC4F9AE02.roa (hash: 25mvdBpj4pJFKjXOi2bdm4yDVDHjU0H6OiwjGR6qDsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231 (0x8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Sep 24 21:02:58 2026 GMT
Not After : Oct 1 21:02:58 2026 GMT
Subject: CN=6ab59002-70e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:3f:b8:9b:7e:99:59:e4:1f:77:93:7d:04:
71:84:01:34:78:be:2f:f5:32:e8:8d:a6:0b:ec:4f:
7b:61:8c:58:20:e4:95:43:4f:40:10:64:ec:1c:87:
72:a5:08:e2:32:b6:4a:99:e6:54:b2:bd:77:88:7e:
da:62:d0:34:18:0d:d8:f8:a7:99:24:30:91:12:d3:
3b:14:05:77:98:cd:4d:77:0e:99:17:a3:c2:c5:fb:
2e:f2:41:45:8c:05:ba:65:c9:fb:a6:40:8f:f3:0e:
68:c5:96:56:cb:c9:1d:40:e7:d7:8b:61:f1:a3:c2:
18:11:ba:0f:1c:f9:fd:22:b9:3e:09:7b:0b:80:99:
8d:e3:5c:a4:89:c9:60:df:8f:9f:b5:f0:fc:54:f9:
40:86:13:0e:c4:37:85:26:fe:3a:1f:1b:60:c3:87:
b8:bc:79:a5:e7:51:ef:fb:55:85:ec:93:dd:de:c1:
e3:19:a8:86:f1:46:4c:73:5b:26:63:f6:ec:43:ee:
61:99:34:f5:3a:84:a2:3b:18:e9:7e:be:9b:2c:b5:
87:97:71:92:10:25:b2:9d:ba:f9:58:25:2f:f5:03:
d5:6f:80:4d:54:f8:b0:cb:35:78:63:ee:e1:03:15:
bd:be:79:ee:94:3e:9c:b8:4f:69:e0:8b:c8:00:aa:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9D:D7:6D:58:C6:D1:2D:A0:D5:18:DF:5B:37:63:6B:1F:66:BB:6E
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ec:f4:de:ff:d1:99:49:99:cf:98:f9:ea:d4:73:fa:1e:dd:
58:14:6c:f3:40:62:be:a8:b0:d6:46:30:eb:0b:a4:80:04:c5:
c3:0e:63:ce:bb:38:3a:33:9e:8f:b6:d5:b1:95:94:fc:43:13:
70:92:b8:71:e7:52:f3:70:da:ae:f8:7f:59:51:f3:27:a5:53:
6f:bd:78:30:2c:57:58:3f:d8:23:82:25:7f:c7:b4:f1:f0:7d:
da:50:82:bb:93:b2:14:40:03:22:82:f5:a3:64:5e:ce:9c:44:
72:d5:ed:d4:f9:0a:6b:ef:33:0c:46:03:3a:b3:ef:f4:df:f1:
1d:d1:48:2c:6d:d9:ed:13:3f:9b:3b:43:70:4d:60:07:6c:f0:
d1:2d:1b:ee:67:d0:d4:35:88:c6:49:76:42:66:68:f3:35:4d:
71:05:06:38:bc:39:79:9d:8c:8b:2a:e5:b2:a4:be:a8:90:9c:
0c:65:b8:f8:be:e5:b0:41:9b:be:2d:04:dc:74:6c:d5:d2:da:
cc:1f:4a:8d:94:41:84:a8:37:77:22:55:f3:66:19:68:0e:08:
f8:8c:d2:c9:12:da:cc:d1:c0:b8:bd:b7:9a:16:6a:b4:59:c7:
39:8c:85:6a:21:5e:ed:1a:23:d5:c5:89:c6:6f:39:a1:f7:cb:
00:ee:7c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:49:07 2026 by rpki-client