
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json)
Hash identifier: MXyWd4Z/VVnTcOzCOuOe95cd3m2Qi7uG4uEy4Idm98U=
Subject key identifier: AE:03:32:27:69:E7:65:45:BF:93:43:14:36:EA:04:D1:0C:3B:1B:49
Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Certificate serial: 06F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
Manifest number: 06EB
Signing time: Tue 22 Sep 2026 21:55:48 +0000
Manifest this update: Tue 22 Sep 2026 21:55:47 +0000
Manifest next update: Tue 29 Sep 2026 21:55:47 +0000
Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: Qv1sM3GmnP7QfhiFcBQgaaaMmS+SpEVh/ExvHyTFF7A=)
2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 3xq5p3AVGt409aSIRk2oci21u6gbUU5aFa+YoaSFvTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780 (0x6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Validity
Not Before: Sep 22 21:55:47 2026 GMT
Not After : Sep 29 21:55:47 2026 GMT
Subject: CN=6ab2f964-02b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bf:60:d1:83:cf:72:d0:cc:4b:a2:2f:a0:c2:
54:4a:4d:49:e5:83:db:e1:9f:b2:66:25:3d:48:eb:
ce:7b:28:82:71:9e:de:e0:ec:7e:07:9d:9c:5a:ad:
53:de:ec:ba:cc:e1:21:cc:34:1e:a3:0a:e5:c6:5a:
46:41:fb:db:d4:62:1f:df:6f:60:5f:12:c4:29:fc:
ea:8b:b7:60:cf:c4:c3:01:ac:c3:51:3e:79:d8:cc:
2e:91:d2:0d:3b:67:da:de:7e:1b:ba:40:6a:90:59:
8e:ec:0e:10:2b:db:46:7d:85:7b:a4:6b:eb:ff:4b:
81:ec:cf:36:c4:5c:f5:09:09:a8:b6:29:fd:13:3d:
61:a2:ff:62:28:02:ba:d5:2e:1e:9f:a3:f9:ae:5f:
3b:52:f6:39:d0:9a:61:92:7f:70:62:ea:98:4e:f0:
8e:a0:12:07:cc:c5:f5:84:d4:81:a3:f6:ae:09:c6:
a5:72:c5:e2:68:24:7d:d5:e9:1b:a1:bb:c7:a5:1a:
47:23:30:86:de:dd:a3:7c:d3:24:90:2b:8d:18:4b:
75:4c:60:a7:88:f5:bc:29:ba:05:8b:ff:70:9a:59:
27:02:0e:2c:d7:1f:08:a8:9e:d7:5e:af:ce:48:78:
4b:b0:b2:8b:39:77:cf:c5:45:aa:93:26:b0:25:f6:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:32:27:69:E7:65:45:BF:93:43:14:36:EA:04:D1:0C:3B:1B:49
X509v3 Authority Key Identifier:
keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:10:31:00:cd:9b:84:bf:9c:a0:ee:7a:f0:21:16:1e:d9:33:
bf:50:c8:93:56:c4:ea:b4:83:b8:e5:43:ef:34:74:2b:b1:88:
d6:8c:a8:6d:94:b6:ed:15:f3:8b:a4:5d:f1:05:0d:41:d8:c8:
7a:48:d0:f9:78:9c:9d:e3:35:d3:98:b0:16:e0:06:57:3b:0e:
e0:ab:fc:90:a3:fa:54:df:5d:b4:f8:81:3a:88:9c:06:d8:f1:
4c:51:59:10:7a:9a:19:ed:a3:67:ac:f9:e1:48:58:26:22:a2:
ac:6c:9f:21:a4:4d:38:3b:2f:70:82:24:fa:c7:b4:72:df:72:
f1:e1:a7:b9:ef:86:8e:a4:6c:2d:b8:b5:38:a7:2f:20:c9:92:
cb:74:45:d3:d5:3e:09:f7:9b:78:2f:b1:66:fe:5d:ef:30:de:
10:14:72:d9:45:58:3d:f8:f4:0e:7a:2c:8c:23:47:a3:ec:3f:
e6:74:81:ea:f0:33:8c:70:e4:43:bd:6a:db:c8:19:45:20:0b:
31:21:88:fb:84:40:b9:03:db:18:06:ee:17:37:08:e8:fc:f1:
dc:25:ed:26:61:96:ba:e6:1f:94:f6:76:3a:b8:c8:dd:b2:e4:
23:8f:8d:41:9c:76:cd:ec:9f:7a:a6:6f:b5:69:9c:e1:f4:a2:
4b:93:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:49:49 2026 by rpki-client