
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json)
Hash identifier: XtPRc3+bQzGmLWPAIwkqjJp09gMTmb5nIdjyVHKZqAw=
Subject key identifier: E3:ED:01:C1:3C:CB:EB:A1:50:EC:4F:44:F4:36:61:91:30:12:0E:35
Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81
Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
Certificate serial: 0287
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
Manifest number: 0287
Signing time: Sat 26 Sep 2026 22:39:41 +0000
Manifest this update: Sat 26 Sep 2026 22:39:40 +0000
Manifest next update: Sat 03 Oct 2026 22:39:40 +0000
Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: zOcNH0AFOYWjKaqIdOSoD37FD9sas6+ZxzUi/OKicIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl
rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781
Validity
Not Before: Sep 26 22:39:40 2026 GMT
Not After : Oct 3 22:39:40 2026 GMT
Subject: CN=6ab849ac-7f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:57:8e:73:af:5c:f6:94:80:62:cb:eb:cd:
9d:c7:60:da:20:cf:14:e0:4b:89:e6:2c:bc:88:6b:
59:01:7f:e0:bc:0b:e4:63:bd:47:9c:73:6f:f1:22:
5e:48:77:ae:90:9c:d5:ed:2d:de:ee:9e:d5:50:2c:
34:75:8d:a8:db:cf:82:76:e1:4d:72:4c:9f:55:d4:
54:e1:e7:42:e9:53:bc:bb:39:8c:21:66:e4:42:b1:
eb:1e:4e:16:01:d5:11:c6:8c:ed:b9:90:e2:8c:7c:
24:91:a1:e9:20:7b:65:b5:15:86:09:ae:c7:99:b2:
cd:30:65:87:c8:de:b8:81:c8:a4:6d:31:c9:10:48:
1c:40:c3:c7:23:e0:4c:69:bc:70:b6:06:52:f1:f6:
ec:52:2c:d5:17:05:cc:69:be:e5:7b:5e:35:1f:28:
15:c3:6b:2e:ed:4e:cc:e4:fe:2f:5b:cf:e0:fa:a8:
75:7d:9b:11:3e:ac:7a:05:80:92:b6:17:24:77:b8:
53:f4:ce:af:6d:98:bf:d5:1d:fd:20:22:03:ea:58:
f2:67:47:94:0f:a4:9a:e1:85:a3:6b:30:a3:3a:b6:
ac:c5:d5:6b:86:f5:2b:1a:d1:73:f3:76:eb:0b:5e:
30:c0:3c:cc:4a:1b:6b:46:e3:c8:7d:cc:30:a4:c8:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:ED:01:C1:3C:CB:EB:A1:50:EC:4F:44:F4:36:61:91:30:12:0E:35
X509v3 Authority Key Identifier:
keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:80:55:e9:ca:d1:b0:4d:b4:7c:2e:3e:18:61:eb:77:cd:
86:13:d1:4b:14:d3:4c:f4:3a:f5:29:43:64:d4:83:1e:d6:08:
5d:69:a3:eb:6d:3c:85:7c:56:4c:78:cf:c0:71:8a:05:d1:44:
da:3e:33:7c:fd:ae:0c:a0:e9:67:cc:99:42:4e:37:42:22:e9:
7b:81:73:29:22:c4:75:6c:4a:ba:a4:56:01:ee:14:8a:01:5c:
57:4b:ce:bd:0f:0a:b3:76:8c:5b:95:de:c2:3d:fc:4e:38:21:
e1:95:6f:d8:b2:24:a1:2a:04:97:a8:7f:96:bb:46:b9:d2:70:
58:27:e2:0e:17:e2:43:3d:d9:5d:4c:7f:dc:4d:01:1a:8d:9c:
cb:13:21:f8:d8:8c:64:16:bd:08:63:71:40:c2:a1:46:c8:ad:
82:f0:81:25:05:8b:73:aa:cd:cc:b6:e0:f5:24:0e:09:b5:47:
3f:6e:4d:2e:d4:d3:22:e1:d3:dd:3b:58:20:61:63:8b:52:d4:
6d:c6:68:9b:e3:40:72:5d:21:6c:ee:06:12:3f:2d:b1:62:9f:
c9:7b:8c:41:24:80:ff:73:a8:f9:ed:2c:9e:34:ef:d2:20:dc:
58:5f:ea:7a:c7:a2:5f:85:7d:f3:2f:3c:8a:93:bc:1e:61:f9:
1e:2e:19:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:44:58 2026 by rpki-client