
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
File: 7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json)
Hash identifier: qqHro6JzSvJEJGcsxJkIvh/9v+cXLetfRDXqnolZDU8=
Subject key identifier: 8A:0B:AE:25:6E:55:00:98:75:21:C4:C2:5F:C3:7A:11:6F:12:C7:C7
Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
Certificate issuer: /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
Manifest number: CF
Signing time: Wed 23 Sep 2026 06:31:34 +0000
Manifest this update: Wed 23 Sep 2026 06:31:33 +0000
Manifest next update: Wed 30 Sep 2026 06:31:33 +0000
Files and hashes: 1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: Cg2SqJ6+A3HEcscAf6SVLf+2V/rSAjIcKZ3CxX8fJ/0=)
2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: HxCACU6dtVJKQL4jCvo8QQmANlxdh6BLrwvzeSETm8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC
Validity
Not Before: Sep 23 06:31:33 2026 GMT
Not After : Sep 30 06:31:33 2026 GMT
Subject: CN=6ab37246-5381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:e9:59:42:2f:55:8b:b3:6c:d3:0e:44:43:
42:f2:50:95:86:a9:1a:34:c7:19:f3:d6:60:49:ec:
a5:41:65:1d:45:d3:7d:94:94:5f:bb:5e:ac:3e:84:
bc:6a:69:20:e5:5d:23:e6:50:eb:84:d2:f6:e8:d9:
7d:81:3f:77:30:8f:0d:81:1b:fc:57:bf:81:ac:e3:
df:5d:d1:2c:d2:3b:e9:64:cd:fd:4a:5f:85:0a:40:
b4:aa:00:47:82:e9:f8:3e:4f:69:bb:03:25:be:74:
18:d3:12:97:9c:46:c0:c4:f5:5f:29:b2:f9:6d:04:
cd:88:2c:08:35:61:93:e6:43:02:61:9e:7c:df:46:
1d:9e:dd:68:b3:3b:b9:22:7c:37:e7:bd:94:cf:32:
a5:2d:d1:67:ef:a2:2f:6f:2b:a9:1b:54:57:98:a4:
70:fe:a8:98:f9:30:3a:b0:b8:2e:3b:6e:15:6d:37:
d3:5f:bd:7b:89:3c:61:af:68:ae:b9:28:af:40:29:
4a:df:1e:f0:21:35:7d:41:e6:5e:d5:42:3f:a4:1d:
d6:64:fa:71:d3:a5:79:9a:bc:e4:74:9c:b5:31:c6:
87:c6:83:a9:ff:ed:4f:05:b5:c5:d1:94:3b:c7:9c:
2f:2b:7c:8f:f4:b5:a6:4a:2a:43:47:a6:2c:d9:9c:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0B:AE:25:6E:55:00:98:75:21:C4:C2:5F:C3:7A:11:6F:12:C7:C7
X509v3 Authority Key Identifier:
keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:d7:64:78:aa:14:fd:1f:e7:54:66:a3:6a:89:a6:85:70:fc:
98:73:df:e4:e4:c5:73:8a:e7:db:1c:4e:63:18:be:ca:45:d1:
c8:8a:4f:e0:8d:36:c6:03:b4:6c:af:ec:97:e2:df:1c:1a:f1:
e2:ee:51:ba:94:25:2b:d8:a7:9a:77:80:35:4e:d1:5f:14:bd:
b5:69:51:8a:7a:f4:87:cb:c0:6a:a5:0b:be:4b:76:f8:de:c2:
c5:dc:bd:80:ab:3e:cd:66:65:44:55:10:6b:45:a9:28:e9:56:
54:f9:47:fb:bc:81:b5:e3:3f:d1:d5:b6:d5:f9:fd:ab:94:99:
7f:e3:b0:bd:d6:ce:26:58:87:fb:1c:3a:7f:d9:f9:68:e5:94:
8d:c6:e5:1e:30:72:3c:1f:b4:d1:b4:1d:f0:9c:35:05:82:38:
ac:e7:2c:c1:56:90:dc:b1:4c:ce:96:57:54:28:92:be:87:e8:
0f:54:ea:23:08:db:8c:c6:cb:6a:a6:2b:c8:42:9f:b3:c6:1b:
67:d0:02:86:26:8f:cd:5f:40:b5:f2:6f:77:23:fc:17:51:6f:
a6:eb:99:95:8a:2e:3d:9a:76:9c:b6:af:2c:0f:b6:ad:a8:2f:
84:4f:68:41:2c:90:d1:50:c3:7a:20:72:55:61:1d:c7:73:a7:
bb:b2:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:01:44 2026 by rpki-client