
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json)
Hash identifier: oddliYumhoQmNW3v0zqeWpLErOBW2xPUmP2JjLUJt38=
Subject key identifier: B8:A0:A0:2B:5A:AB:C4:05:47:0F:6E:BE:97:80:78:E1:E6:5E:8B:83
Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21
Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
Certificate serial: 0C27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
Manifest number: 0BFB
Signing time: Tue 22 Sep 2026 18:49:44 +0000
Manifest this update: Tue 22 Sep 2026 18:49:44 +0000
Manifest next update: Tue 29 Sep 2026 18:49:44 +0000
Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: PpPHOWEbWvPuJaOcywBQ44prkyrUYnNjSr4y2Fw47so=)
2: B7F0310EBCB911F08FEDBF33C4F9AE02.roa (hash: Fl7tFHmb+UXvAchBIbrzx84hZk2rW8b9qKeETUDakKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl
rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
Validity
Not Before: Sep 22 18:49:44 2026 GMT
Not After : Sep 29 18:49:44 2026 GMT
Subject: CN=6ab2cdc8-43c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:ac:74:bb:06:03:6b:86:4e:a7:e3:16:69:
7a:c3:24:d1:f5:43:f0:42:2c:61:a5:a8:0a:15:71:
d7:35:95:9a:e5:d6:0e:68:71:cf:b7:85:ef:93:0f:
2d:92:53:c2:ac:98:68:d7:b6:e2:e1:30:7d:98:07:
c3:c9:af:d4:40:8f:5c:0a:b1:b4:f8:c6:83:28:04:
ca:29:bf:49:cc:c5:90:a3:4b:ad:28:58:16:d4:60:
9f:33:72:c5:82:c7:11:89:23:44:bf:35:77:ae:da:
14:d5:aa:4d:02:ea:b1:f7:d2:d3:f3:7b:22:f7:00:
a5:6c:69:b9:dc:6c:20:b9:2b:c4:ff:e7:ba:43:a9:
36:42:79:4a:0a:12:7f:13:26:2b:5b:f4:b9:ba:9a:
e1:1a:09:cc:aa:e9:bf:e5:13:d3:9a:e2:2a:2c:88:
65:06:23:6f:65:f3:68:0a:1f:e4:f1:68:99:82:53:
09:45:7d:0c:cf:a1:07:ad:9b:16:54:52:0a:a0:38:
9d:0a:d7:31:cf:78:12:39:24:04:9a:66:fd:03:be:
76:15:6f:52:8b:13:21:c0:4b:62:9e:bc:2f:0a:a7:
24:92:f4:d7:c1:42:2d:d4:73:f8:32:1b:e2:88:90:
2b:33:6e:02:9b:f8:86:89:66:c5:a2:e8:a0:40:01:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A0:A0:2B:5A:AB:C4:05:47:0F:6E:BE:97:80:78:E1:E6:5E:8B:83
X509v3 Authority Key Identifier:
keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8a:8b:ff:2e:6a:dd:c9:8d:61:81:81:ae:97:b8:cb:1b:b4:
57:32:5d:82:84:1c:c0:5f:2e:1c:28:49:43:70:fd:67:d2:66:
d9:9e:c8:e5:33:95:e7:38:99:48:ea:b7:94:93:bf:70:a2:fe:
5e:21:2d:23:0d:8f:fd:5c:05:e0:b1:26:3d:ef:b8:37:03:12:
f1:ff:88:1a:96:b0:eb:ac:b0:ef:b2:6c:5c:78:11:06:84:e4:
c5:8e:9b:84:1f:d4:c0:79:8d:3e:28:b0:97:c9:06:4c:54:60:
87:0c:1b:57:5f:2d:39:a8:56:41:62:6c:40:83:fc:cf:1f:0f:
d5:1f:1c:fe:9c:44:94:7d:bb:a8:46:08:33:46:59:59:3d:7f:
8a:d6:cf:6b:40:5f:97:52:27:76:a2:f4:05:b3:2b:b6:3c:1c:
4a:6d:aa:d8:23:c6:d7:93:31:c0:1b:e3:81:24:c1:11:54:a8:
05:6a:31:b5:83:c2:f9:83:38:4c:86:2e:c6:ae:39:ea:8e:0f:
40:2b:10:f2:bd:d2:64:55:a2:6e:da:86:02:12:24:61:ff:a3:
b7:a7:64:ec:42:7a:b4:51:49:d6:51:d4:ae:53:ab:1d:ce:d5:
22:fb:9c:53:9e:ef:f9:cb:ed:1a:ba:fe:a3:0a:e3:77:80:6e:
88:7f:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:23:21 2026 by rpki-client