
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json)
Hash identifier: AHsdE0xFsVGstzuB3m8v6dvRTPKImkHzhCipF0oixng=
Subject key identifier: FE:65:F2:0D:74:8C:67:86:71:94:D7:3C:F2:BA:C8:41:47:0D:59:0F
Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Certificate serial: 0C30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
Manifest number: 0C23
Signing time: Thu 24 Sep 2026 18:45:11 +0000
Manifest this update: Thu 24 Sep 2026 18:45:11 +0000
Manifest next update: Thu 01 Oct 2026 18:45:11 +0000
Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: 39aJlMOJCTnNjLPtqWjv2qbZQxiVpmP3HLR2KPCx4og=)
2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: oSu7opmD3HBYoBwJbIsmMaGXMM1R4NMeIhfp2irZM0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Validity
Not Before: Sep 24 18:45:11 2026 GMT
Not After : Oct 1 18:45:11 2026 GMT
Subject: CN=6ab56fb7-454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3e:d3:01:98:67:c7:19:27:08:d9:6b:56:85:
b5:0c:d0:50:11:da:17:77:07:4d:55:63:6b:12:96:
50:d6:b6:b6:78:26:26:fd:46:ff:2e:d3:08:9a:c8:
55:f9:0b:1d:c5:74:c7:55:25:ec:1c:6a:3c:a8:41:
0e:a3:91:ed:19:7b:07:62:16:3f:6a:d6:94:1e:ec:
3f:d1:22:6f:e3:8a:a2:57:2f:a0:20:12:f7:aa:64:
e4:ab:7d:6d:19:1b:de:ab:fd:f4:06:18:82:3e:55:
53:3f:52:96:8e:10:ae:06:1e:72:b0:4e:ed:1d:08:
ac:94:f8:1d:86:a7:04:13:95:36:c1:6e:25:31:1e:
39:4b:2f:bc:5c:8a:9e:dd:32:2e:78:f6:5e:28:69:
77:99:c9:b1:89:7a:ad:4f:95:f6:fd:da:df:71:ba:
1e:ec:32:56:e8:36:c5:76:c3:d9:50:76:c9:32:e1:
a9:3e:ef:94:58:c7:ed:c5:e7:20:99:b8:a3:f5:e9:
61:bd:c8:8b:08:60:5f:a4:03:fb:70:cc:a3:cc:aa:
b8:1f:50:52:af:14:d4:72:4c:ed:b5:6b:a4:13:10:
a5:a8:1f:2e:d8:8a:ee:c8:4e:02:3c:c1:df:14:e8:
13:5b:66:6b:91:fc:85:08:9d:90:79:e9:2f:d1:c4:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:65:F2:0D:74:8C:67:86:71:94:D7:3C:F2:BA:C8:41:47:0D:59:0F
X509v3 Authority Key Identifier:
keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:be:b4:7a:0c:76:45:80:c2:06:e7:6f:51:f7:7f:1a:94:d5:
0e:ca:32:a1:0e:ed:1c:91:95:47:75:ce:67:3a:7b:79:89:0a:
b8:1e:ce:9e:ea:e3:02:60:b6:54:45:60:5f:55:40:74:85:4e:
31:9d:e5:3b:2f:20:a7:d2:16:cf:72:30:9a:19:4d:d8:8f:5b:
31:2e:9a:1d:48:ca:8b:4d:0a:e6:75:91:00:d6:e6:71:b4:70:
76:73:a0:87:3e:8d:6f:48:82:e2:38:91:f6:d6:9c:6e:70:23:
ed:3c:04:96:91:bf:89:9b:3f:5e:e9:96:9f:d2:19:b2:4c:94:
bd:a8:e3:71:3f:d1:e4:25:42:17:14:2b:2b:eb:99:9a:1e:62:
b4:e7:04:24:dc:35:b6:bd:90:3a:0b:b7:09:e7:c5:e7:ee:8b:
28:16:e3:50:5f:46:b5:61:9e:b9:22:18:e1:9d:57:8a:bd:7a:
38:b4:2d:18:f0:2f:8d:6b:a8:89:13:6d:25:89:ba:7f:82:39:
5f:3c:4c:a4:71:ea:a9:2d:bc:e0:84:0b:6a:01:31:e2:f7:e8:
64:7d:fc:4b:6e:c4:3a:29:af:7a:e4:b3:33:92:2a:f6:fa:32:
a3:7a:bb:43:28:ae:62:82:11:2f:e8:b1:73:63:03:50:fe:f5:
ea:14:42:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:45:19 2026 by rpki-client