
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft
File: 1K7zROHhNEdHmOy_XSnecaiG3sE.mft (raw, json)
Hash identifier: rXui89OLd/Hfe1NvQop80xqJKEc14EyRNvea/v8lAD4=
Subject key identifier: 34:B9:6B:19:A6:97:B7:46:E9:2B:5D:88:2D:8B:84:14:D8:81:05:A4
Authority key identifier: D4:AE:F3:44:E1:E1:34:47:47:98:EC:BF:5D:29:DE:71:A8:86:DE:C1
Certificate issuer: /CN=A91629AA/serialNumber=D4AEF344E1E134474798ECBF5D29DE71A886DEC1
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1K7zROHhNEdHmOy_XSnecaiG3sE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft
Manifest number: 20
Signing time: Sun 11 Oct 2026 04:05:27 +0000
Manifest this update: Sun 11 Oct 2026 04:05:26 +0000
Manifest next update: Sun 18 Oct 2026 04:05:26 +0000
Files and hashes: 1: 1K7zROHhNEdHmOy_XSnecaiG3sE.crl (hash: gwPYokcYn+N8rQGzbhL9rZBlit9OOcNF/G60sxqQqdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.crl
rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1K7zROHhNEdHmOy_XSnecaiG3sE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 04:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91629AA, serialNumber=D4AEF344E1E134474798ECBF5D29DE71A886DEC1
Validity
Not Before: Oct 11 04:05:26 2026 GMT
Not After : Oct 18 04:05:26 2026 GMT
Subject: CN=6acb0b07-fd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:c6:c9:4c:9b:3e:54:fe:ef:55:fc:f5:38:
ae:a5:8b:c8:b9:75:15:b6:25:af:5a:95:39:aa:46:
03:2d:75:dd:d2:d9:11:ed:ad:12:bd:69:b6:45:1f:
52:78:c4:6a:75:2b:9f:b3:ca:c5:e6:a9:40:f3:66:
3b:8a:07:a1:aa:f7:e7:07:a2:58:dd:dc:29:37:44:
d9:8f:b2:ce:21:13:fb:a9:54:ee:82:b1:5f:dc:2f:
05:25:86:ba:76:c3:51:a2:af:63:e3:88:29:90:99:
f9:9b:b6:4c:d5:f2:e3:5a:da:ba:aa:c2:64:1a:d7:
eb:26:c2:8f:b1:59:a7:cc:0c:6b:09:21:a8:86:18:
71:00:15:ec:92:05:b2:23:33:9e:d0:b1:dd:72:31:
0c:49:23:41:3f:15:58:fe:6c:a2:25:8d:f6:04:6b:
e4:6f:8a:10:51:5e:ff:ef:ba:24:29:be:28:fb:0e:
cd:77:d9:50:d4:3f:47:e1:ea:ff:77:2a:0e:10:a9:
a0:31:e0:2f:ec:2a:02:9a:84:9e:11:ba:b2:0a:55:
b2:06:c7:95:14:0f:a9:ef:ca:b4:21:02:cc:a5:57:
3d:aa:3c:30:3c:c1:56:67:b2:0a:a6:f9:35:fe:70:
59:76:a0:8b:7e:cf:8b:4f:50:a4:b3:f7:6a:1f:04:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B9:6B:19:A6:97:B7:46:E9:2B:5D:88:2D:8B:84:14:D8:81:05:A4
X509v3 Authority Key Identifier:
keyid:D4:AE:F3:44:E1:E1:34:47:47:98:EC:BF:5D:29:DE:71:A8:86:DE:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1K7zROHhNEdHmOy_XSnecaiG3sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a2:fe:08:50:51:ad:54:57:71:7d:25:e8:d1:1a:16:6e:f2:
3b:1b:51:92:25:3f:2f:7c:07:e9:87:ce:7a:b9:c1:c5:ff:db:
c6:3d:a0:21:58:ae:a9:4e:60:1e:70:42:f6:5e:88:eb:4a:40:
42:3f:35:a6:55:87:e8:eb:46:11:59:61:6a:87:32:c0:23:91:
06:37:4f:fe:c1:0c:6a:0d:a5:64:e1:ef:b4:ca:56:f9:af:ec:
3f:cd:0e:e7:7c:ad:80:99:f3:69:b9:e3:9b:fc:61:cf:8c:85:
74:ee:00:99:4c:30:a3:57:2e:a0:7d:13:65:80:76:75:a5:05:
3a:43:64:9b:96:48:ff:86:e2:da:8a:f3:55:f3:82:17:08:ce:
e2:b9:7b:81:6c:e5:5d:25:40:48:1b:d8:e6:0a:26:6b:74:b8:
49:9b:d4:6d:08:76:77:a3:f4:d8:92:b7:8a:47:62:87:4e:4a:
f9:a7:7f:5c:e7:23:4c:90:ef:28:3d:ac:e1:e1:a8:31:ce:5c:
a3:2a:cc:43:3f:27:73:6c:09:c9:00:21:51:2c:48:6c:07:f6:
d4:6b:67:5a:f1:7f:82:00:9d:a9:60:55:f2:68:08:44:74:a5:
bd:d0:71:c4:75:c1:b2:17:bb:69:29:70:5c:f2:86:2c:39:3d:
c0:33:c1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:11:42 2026 by rpki-client