
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json)
Hash identifier: Wdy+88ggL6/72P1WcMXJC9W+4y2iOzC65rrkYmXB7yI=
Subject key identifier: B0:F8:0C:76:31:78:FF:49:26:E2:1E:22:E6:2A:AF:6B:20:B6:F9:FF
Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78
Certificate serial: 0EA6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
Manifest number: 0EA0
Signing time: Thu 24 Sep 2026 17:40:20 +0000
Manifest this update: Thu 24 Sep 2026 17:40:19 +0000
Manifest next update: Thu 01 Oct 2026 17:40:19 +0000
Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: PCTs40d+hKN4iGigup6uaT4YFvFq4Xayy1FxCBKilTY=)
2: E64999C258D611ED86C99945C4F9AE02.roa (hash: cElPbY7K42ZgHRo0Rm4vFkLcjVWBwNFQ8So0RPXc2fY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3750 (0xea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78
Validity
Not Before: Sep 24 17:40:19 2026 GMT
Not After : Oct 1 17:40:19 2026 GMT
Subject: CN=6ab56084-f146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:4a:f0:9d:31:f0:e2:b1:8a:98:04:bf:5f:
b1:20:ee:30:fc:7b:6d:9f:03:27:2b:60:d2:70:cd:
b0:33:6c:16:27:4a:20:1a:bc:91:58:13:7e:00:7e:
7d:a6:66:30:d2:4e:79:5a:ed:71:96:72:3b:e6:e8:
5a:7d:b4:25:50:37:65:95:09:df:f6:87:af:0d:22:
9e:1b:65:78:12:7e:02:cc:16:8e:df:08:50:60:66:
f1:42:f7:bf:70:ee:e5:0f:99:71:31:04:35:e4:8d:
00:72:9c:8b:86:58:f7:62:95:62:fb:86:46:57:7b:
7a:f5:2f:05:bf:bc:24:c1:21:b6:66:52:ca:a2:b1:
2a:ce:66:e4:23:fa:a4:e1:d7:b7:45:c9:91:39:3b:
2c:d6:27:92:44:d7:76:99:42:21:43:b3:d6:23:c9:
5a:59:45:10:be:56:90:65:1c:12:72:79:c0:5f:8e:
fd:73:96:56:14:4d:9b:00:bf:1c:12:93:da:da:d0:
08:eb:d8:54:01:2b:4a:b6:84:67:94:a1:4c:a2:21:
18:88:7f:12:f5:de:a7:42:fb:99:07:9b:67:81:13:
c0:f0:72:83:34:41:82:51:35:28:69:8a:37:dc:ed:
72:70:d0:27:40:bf:ca:6d:1a:4c:97:e9:76:bc:75:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F8:0C:76:31:78:FF:49:26:E2:1E:22:E6:2A:AF:6B:20:B6:F9:FF
X509v3 Authority Key Identifier:
keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:23:bb:2e:06:38:1a:5e:fe:df:d9:a4:c4:5f:25:90:a8:69:
e8:6d:92:8b:57:44:97:38:1f:a5:d9:93:92:cd:28:14:20:e3:
d2:57:83:f7:53:d0:63:14:bd:9d:3a:18:f2:7a:e2:04:86:77:
da:25:e5:dd:95:e3:10:b9:95:62:59:8e:ab:a1:18:a2:bc:69:
a4:55:1c:93:c8:64:40:d8:71:9c:a4:4c:08:19:8a:d6:66:2c:
17:dc:24:28:3a:0c:68:a9:86:e6:94:74:bd:8b:5b:c6:de:58:
2c:36:6f:23:83:15:be:a1:89:c4:dd:d2:c9:f2:6a:d6:42:31:
9e:3c:56:a4:83:ed:89:43:c9:89:0f:fb:ae:b5:82:ff:0b:64:
9d:f9:18:f5:a1:9d:98:59:61:eb:1d:c3:9c:a3:cf:f0:d7:e4:
5d:b4:48:16:44:2a:49:48:3b:ca:05:bc:a7:89:80:c8:41:5a:
d2:ad:5e:2a:9f:2b:9d:11:6f:00:60:c0:b6:c4:96:09:b1:7a:
69:d6:eb:b9:85:7b:9f:42:2d:7a:31:a0:1e:50:cc:7f:c1:4b:
43:1b:c9:85:db:27:8c:c9:79:b4:84:b6:a1:24:04:50:c9:5c:
52:be:db:36:4b:a6:fe:de:ec:a9:c8:b6:9b:5a:b9:0d:f6:84:
48:ff:31:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:48 2026 by rpki-client