
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File: R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier: EgVTz+twXEfeGuCDml7khctrPyFQ9fdDHbafSZ2VVJI=
Subject key identifier: D8:EB:74:15:E6:80:43:80:8A:A4:7C:BA:2A:2B:13:D1:3E:84:54:97
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer: /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number: BE
Signing time: Tue 29 Sep 2026 07:57:34 +0000
Manifest this update: Tue 29 Sep 2026 07:57:34 +0000
Manifest next update: Tue 06 Oct 2026 07:57:34 +0000
Files and hashes: 1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: RHcZ+E5x1J3htntSUX/T4iJGn4xLvTw9D6TRyaNR/Is=)
2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: 1Vca/T8ggjOA5o9QtjoKhFaIwHS9DNFGX+kUo9lU2bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 07:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Validity
Not Before: Sep 29 07:57:34 2026 GMT
Not After : Oct 6 07:57:34 2026 GMT
Subject: CN=6abb6f6e-0c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:88:d5:9b:12:b2:9e:4c:14:97:78:ea:f4:
36:77:91:3c:30:2b:65:6e:48:33:11:24:33:dc:31:
40:09:1e:6b:bd:58:b9:38:38:58:52:07:c7:b5:5e:
3e:9d:31:31:75:d5:22:93:d6:59:79:8e:9d:b0:a0:
67:36:70:95:83:cd:89:b8:2e:af:44:03:e3:d7:37:
e9:ef:cb:d0:39:41:0b:48:7c:87:7b:03:67:cf:e5:
cf:a4:1b:01:0a:14:1e:39:36:f9:ec:fe:f8:01:b6:
05:5e:1f:53:a1:d1:2a:07:c2:c7:56:d1:d7:b9:bd:
6c:72:4a:8b:c8:a5:92:a2:64:da:47:d0:54:b4:f6:
e4:a1:ad:b6:87:a0:d0:be:22:18:e3:42:a2:63:7f:
74:51:f3:43:9e:92:af:c9:6d:9d:19:b7:67:e7:3e:
bf:c4:37:9f:6c:f8:85:0e:e6:1f:cc:4f:e1:1f:e3:
1d:25:97:33:f1:38:51:57:d2:b9:e7:67:b3:37:68:
fd:f2:bc:83:b9:2f:5c:5e:ca:72:9d:9c:2b:58:cf:
04:2b:e9:7d:01:81:8e:46:8b:c1:65:05:1e:bd:78:
62:c4:d2:21:55:88:20:cb:0b:02:a3:c0:e1:17:b1:
da:8f:62:fc:31:58:a3:4d:1a:07:08:25:82:0c:62:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EB:74:15:E6:80:43:80:8A:A4:7C:BA:2A:2B:13:D1:3E:84:54:97
X509v3 Authority Key Identifier:
keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:42:7c:c6:7c:45:91:0e:64:49:e8:23:4a:eb:1a:f0:94:e7:
92:d4:6c:f3:2e:60:bb:f9:1b:ad:d5:61:d1:ad:2a:7d:ba:f2:
45:c6:d4:28:5a:b7:71:e2:d4:ba:d1:da:a6:3d:77:f0:8d:eb:
c7:b3:e2:b1:e4:1a:77:2c:58:d3:64:fe:f5:b6:bc:43:86:60:
7e:d7:9e:66:1c:17:00:b4:5a:a7:05:65:6f:e4:20:60:6b:93:
38:5d:01:79:a4:51:56:1c:28:d8:ae:19:df:69:01:f7:a8:a3:
2b:ea:7b:46:f2:70:39:b5:78:15:ba:46:ec:b7:bb:02:2b:4e:
4f:dd:b2:f0:1e:ee:61:83:e7:2b:f5:5b:25:ac:c1:e3:cc:90:
ee:e8:00:09:24:b5:03:b4:dd:65:24:dc:ce:d5:9f:e3:4d:23:
5e:fc:25:52:fb:6c:91:97:96:66:b5:58:01:90:cf:12:86:07:
59:a3:13:4b:73:9d:0b:04:aa:8a:de:2d:97:aa:be:9d:1e:6c:
7e:4b:3e:9c:41:7b:dc:9e:1f:95:c0:31:fc:ee:59:2b:fc:cf:
cb:50:14:bc:ca:03:26:b7:03:02:47:50:7d:0f:81:a5:ea:f7:
c0:07:d8:2c:c9:5d:58:01:e1:40:18:d5:fb:48:34:3f:da:b3:
90:e3:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:54:01 2026 by rpki-client