
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json)
Hash identifier: 4tCf+O3nXpDcMqJ9MldScj3qbSzfFnI5pm2GKDxjZCg=
Subject key identifier: B8:D2:F5:FF:F7:92:21:51:FF:D7:CA:A2:08:0E:71:BC:58:C8:D0:FC
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
Manifest number: 01CB
Signing time: Fri 25 Sep 2026 03:50:26 +0000
Manifest this update: Fri 25 Sep 2026 03:50:25 +0000
Manifest next update: Fri 02 Oct 2026 03:50:25 +0000
Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: LycGG1WQNdX6L6+aZtM5UUAyMcly+69WgvcpEKm1hko=)
2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: ShuWejN2dIhVPSYGiU/45kIcp67jd+NNHpFV+hRD9UQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Validity
Not Before: Sep 25 03:50:25 2026 GMT
Not After : Oct 2 03:50:25 2026 GMT
Subject: CN=6ab5ef82-4d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:bc:51:b7:00:58:62:93:e2:7e:b1:aa:21:
ea:3f:fa:d7:17:56:c3:79:0e:a4:75:79:71:f6:65:
ec:7d:00:9b:d7:32:67:06:ff:c5:87:12:b4:a2:aa:
e2:88:bc:dc:0c:bc:d9:c1:53:3c:0a:31:16:fa:4b:
9c:92:6b:ff:9f:b3:f8:ff:c6:c5:1a:a5:69:df:5f:
66:5b:41:f2:75:26:7b:5f:e2:57:64:1c:ae:02:6e:
78:81:3e:ac:f7:93:09:80:7b:b5:44:8e:a4:8a:21:
07:af:f8:e5:d6:81:2d:c8:16:bf:19:84:12:be:4d:
c1:7e:c6:93:33:a2:d5:83:1a:a1:4d:cb:16:f7:e3:
ea:90:94:21:3e:1f:e8:91:cc:d0:b6:0f:82:dd:a9:
c2:91:59:53:bf:a0:e6:3b:80:05:fe:2d:7f:36:94:
04:b8:20:8a:1b:4f:e1:cd:71:5f:f7:b6:61:1e:54:
0c:dd:51:55:5e:8d:d1:c2:21:fd:34:b0:2e:2e:54:
e1:b1:c5:b6:f0:1e:8c:13:41:2d:e2:e4:b5:7a:c7:
22:b4:63:d5:e9:4c:d3:6f:a9:84:46:ad:aa:f6:31:
ef:4a:4f:3f:5c:89:34:7a:0a:ed:a8:5a:f9:48:7f:
39:6a:3f:bb:89:3e:da:64:96:f1:ce:1d:80:03:80:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D2:F5:FF:F7:92:21:51:FF:D7:CA:A2:08:0E:71:BC:58:C8:D0:FC
X509v3 Authority Key Identifier:
keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:76:71:fb:48:68:52:84:6c:72:bb:87:a4:32:1e:da:b2:dc:
7a:b2:96:db:84:45:5f:b5:be:6f:48:4e:f8:d5:a9:44:3f:91:
1e:12:58:23:30:c9:49:34:74:e7:83:e7:8c:42:b1:2f:b7:c0:
c1:f7:4d:45:c4:55:e0:2b:0f:9e:c7:07:d7:7a:a6:8b:17:20:
f9:1c:d0:76:9d:71:ac:03:28:b8:33:13:32:81:6a:5c:f9:3a:
96:fa:55:d2:3c:65:3a:c2:9e:9e:62:1f:81:5c:24:6f:d6:55:
c6:67:03:f9:bf:a6:45:3a:31:6d:76:0a:09:79:c9:39:b2:e1:
ae:9e:57:39:34:29:a1:49:e0:e5:df:22:bb:fb:d9:d3:74:2a:
99:49:b0:d6:e4:17:fd:f2:55:ed:54:a6:d4:d2:5e:9c:13:c4:
13:f3:3f:c4:1f:d6:05:e5:f8:ba:fa:97:86:fe:c0:e8:09:b7:
fc:71:c4:0f:23:e5:dc:ef:46:69:87:cd:52:8b:c8:5a:69:88:
ee:db:c1:5f:3c:cb:1d:8d:99:a2:04:b0:e9:97:2f:23:3a:17:
d9:8b:9c:7f:33:c2:f9:cc:64:04:58:39:db:75:13:fb:33:a5:
6f:1c:40:e9:08:fd:3b:87:01:1b:d6:5c:b1:50:df:2e:04:5a:
d4:a6:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:38:13 2026 by rpki-client