
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
File: 7mC-_JS8D3S9nREVbhW6I_fr5ag.mft (raw, json)
Hash identifier: XaeQWLpnFJROis1etDlg7vh7m3ETHFFPOxI8rS8j3As=
Subject key identifier: CE:20:7B:96:EE:8F:71:B9:22:AA:2E:D0:38:77:C5:03:48:E3:07:14
Authority key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
Certificate issuer: /CN=A91B6DD0/serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
Manifest number: A6
Signing time: Fri 25 Sep 2026 07:20:03 +0000
Manifest this update: Fri 25 Sep 2026 07:20:03 +0000
Manifest next update: Fri 02 Oct 2026 07:20:03 +0000
Files and hashes: 1: 7mC-_JS8D3S9nREVbhW6I_fr5ag.crl (hash: Ou5kxvxo12+27xXNjb+9reU6pO4i+2UbjhH+XRXpet4=)
2: 24C380E04F8811F1995B86AB91833773.roa (hash: i/C/Zv+lf4zgTKZQlSdIZArw/siwXGF8uhHhJmmLFFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:20:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Validity
Not Before: Sep 25 07:20:03 2026 GMT
Not After : Oct 2 07:20:03 2026 GMT
Subject: CN=6ab620a3-255b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:ad:44:f2:21:52:43:cd:5f:63:b4:6c:06:
6f:2f:d7:c4:5a:10:e7:fc:06:46:cc:92:54:6d:e4:
7d:97:64:d6:87:a8:53:15:a8:2f:e4:9a:6a:80:f7:
07:f5:9f:ef:70:7e:d2:4c:ac:e2:74:ed:be:27:6c:
88:d5:84:59:b7:13:6e:c9:78:a1:63:95:18:3f:c8:
9d:2a:c6:e3:26:b5:e0:b0:bd:b0:23:20:06:e1:df:
90:f2:71:81:82:a0:22:8f:ce:67:e6:5b:f5:ba:59:
00:a7:ab:94:cc:e2:5c:c8:64:32:4c:7a:78:35:79:
39:8f:6e:8a:f3:24:75:97:ab:2a:5f:4f:07:50:cb:
67:a0:53:c9:a0:9f:ad:b1:85:2f:63:34:19:aa:69:
86:b6:94:28:af:5d:47:cd:ab:74:a7:ac:d2:29:9d:
cf:a1:68:2c:c7:26:ea:08:7d:49:e0:ff:6a:c5:4e:
e9:6c:43:ad:67:6e:14:3e:37:14:9f:0e:b9:46:5d:
46:a6:50:f0:0e:ba:2f:f9:9a:6d:ba:61:6c:c8:30:
8b:87:7b:d1:e7:16:aa:48:00:dc:a8:16:e0:7e:83:
ae:6d:79:5b:43:3a:cc:5a:c5:d0:92:a6:b5:f1:0c:
0f:48:53:b0:74:79:3b:08:12:4c:3c:58:8e:82:90:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:20:7B:96:EE:8F:71:B9:22:AA:2E:D0:38:77:C5:03:48:E3:07:14
X509v3 Authority Key Identifier:
keyid:EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:19:e5:e6:97:ce:18:b4:26:3f:eb:93:fd:61:ff:87:8e:1c:
49:82:07:ea:a5:0f:fc:64:13:47:e6:c4:ab:11:6c:d6:bd:1f:
b4:4e:c1:b3:60:62:4f:fe:a7:49:a7:11:0a:d1:d7:3b:dc:ae:
68:3a:b4:bf:77:93:97:e8:2b:0f:9c:10:ed:78:d4:d2:be:2e:
0d:aa:42:7c:01:fe:7b:f4:e0:c9:1a:0f:48:15:22:d8:2e:59:
e4:b1:43:22:ba:85:bd:2a:51:e9:b5:2c:d7:8d:58:fc:38:88:
5c:f3:c2:e7:45:06:f0:37:30:9c:93:c7:70:d7:4c:5d:80:da:
7f:67:8d:6e:f8:02:10:62:f9:6a:96:6e:95:7d:59:d7:17:69:
58:80:d4:47:16:70:b2:34:d3:22:84:83:a7:5e:14:b6:0a:22:
f4:87:c2:21:06:0f:22:9c:eb:ba:dd:ff:a5:35:97:34:b0:ac:
e2:95:ee:fe:0b:7d:89:f6:c5:40:37:29:dd:5b:10:7c:ba:41:
f2:a1:97:1c:03:10:ad:05:bb:da:7b:67:58:da:06:5e:06:54:
f4:3f:a8:f5:65:d6:0c:9a:5f:a9:5c:f0:c9:cd:27:9a:44:78:
ba:16:75:d9:8d:61:b8:db:aa:d6:5b:bf:7e:19:e3:13:15:e6:
db:8d:5e:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZERDAxMTAvBgNVBAUTKEVFNjBCRUZDOTRCQzBGNzRCRDlEMTExNTZFMTVCQTIz
RjdFQkU1QTgwHhcNMjYwOTI1MDcyMDAzWhcNMjYxMDAyMDcyMDAzWjAYMRYwFAYD
VQQDEw02YWI2MjBhMy0yNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoS6tRPIhUkPNX2O0bAZvL9fEWhDn/AZGzJJUbeR9l2TWh6hTFagv5JpqgPcH
9Z/vcH7STKzidO2+J2yI1YRZtxNuyXihY5UYP8idKsbjJrXgsL2wIyAG4d+Q8nGB
gqAij85n5lv1ulkAp6uUzOJcyGQyTHp4NXk5j26K8yR1l6sqX08HUMtnoFPJoJ+t
sYUvYzQZqmmGtpQor11Hzat0p6zSKZ3PoWgsxybqCH1J4P9qxU7pbEOtZ24UPjcU
nw65Rl1GplDwDrov+ZptumFsyDCLh3vR5xaqSADcqBbgfoOubXlbQzrMWsXQkqa1
8QwPSFOwdHk7CBJMPFiOgpAZfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4ge5bu
j3G5Iqou0Dh3xQNI4wcUMB8GA1UdIwQYMBaAFO5gvvyUvA90vZ0RFW4VuiP36+Wo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkREMC9DQTc1MEFDQUM0
NzAxMUYwQkQ1QTYyMzlDNEY5QUUwMi83bUMtX0pTOEQzUzluUkVWYmhXNklfZnI1
YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdtQy1fSlM4RDNTOW5SRVZiaFc2SV9mcjVhZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkREMC9DQTc1MEFDQUM0NzAxMUYwQkQ1QTYyMzlDNEY5QUUwMi83bUMtX0pTOEQz
UzluUkVWYmhXNklfZnI1YWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZBnl5pfOGLQmP+uT/WH/h44cSYIH6qUP/GQTR+bEqxFs1r0ftE7Bs2BiT/6n
SacRCtHXO9yuaDq0v3eTl+grD5wQ7XjU0r4uDapCfAH+e/TgyRoPSBUi2C5Z5LFD
IrqFvSpR6bUs141Y/DiIXPPC50UG8DcwnJPHcNdMXYDaf2eNbvgCEGL5apZulX1Z
1xdpWIDURxZwsjTTIoSDp14Utgoi9IfCIQYPIpzrut3/pTWXNLCs4pXu/gt9ifbF
QDcp3VsQfLpB8qGXHAMQrQW72ntnWNoGXgZU9D+o9WXWDJpfqVzwyc0nmkR4uhZ1
2Y1huNuq1lu/fhnjExXm241e5g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:45:59 2026 by rpki-client