
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier: NrryXGA4Z64PCsjoTv/Kl/h+qQhs7t1EbyzYmE3eRrY=
Subject key identifier: 34:DB:50:DA:60:BA:F4:70:D3:25:CE:B4:3B:D6:E6:0E:02:EA:1D:AB
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial: 0C1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number: 0C0A
Signing time: Sat 26 Sep 2026 19:00:28 +0000
Manifest this update: Sat 26 Sep 2026 19:00:27 +0000
Manifest next update: Sat 03 Oct 2026 19:00:27 +0000
Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: au+BY8QUvD7j/2djGWsWFLd7VNidYr67hmk0SyVdVAc=)
2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Validity
Not Before: Sep 26 19:00:27 2026 GMT
Not After : Oct 3 19:00:27 2026 GMT
Subject: CN=6ab8164c-0be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:c3:be:ff:c2:b6:a5:76:43:c6:62:91:be:
5a:e6:51:ec:ae:52:45:95:f8:3a:a6:b7:b8:6f:75:
e4:9b:0a:14:b7:86:09:3f:1a:95:98:e8:3f:18:e0:
ba:4a:9e:0a:b5:69:43:be:3d:6e:d8:a9:5a:d8:09:
a1:c9:a0:5d:dc:c6:e9:8c:b1:8c:49:35:9d:cc:2b:
8e:4a:5a:5b:b7:dc:1f:8a:85:fc:23:23:c1:d1:6c:
84:39:2d:ad:fc:ae:a9:40:e4:d8:04:60:22:c7:56:
ff:c1:4b:7f:df:f4:32:31:27:c3:70:7e:64:5f:0a:
6d:21:04:06:e1:d0:46:8d:2a:f4:79:49:75:e0:31:
88:47:ec:6a:ef:3a:61:32:7b:6c:16:f0:14:1c:08:
4d:61:df:4f:b2:25:08:cd:55:d4:88:42:90:51:30:
2d:19:7e:7a:e7:74:d9:4a:ad:49:7b:e9:33:4d:cb:
2f:12:90:80:b8:83:ac:23:1c:c8:45:83:57:d7:26:
9f:ff:7c:e0:32:5e:10:4b:b5:39:0b:95:55:63:ae:
e1:78:d5:22:a0:87:61:b2:8a:a2:3b:45:02:c2:51:
01:67:88:e6:b4:47:ae:2a:c0:45:c8:bd:0e:e8:f4:
27:f0:bd:03:b6:d1:ac:50:90:22:3a:14:59:dc:df:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DB:50:DA:60:BA:F4:70:D3:25:CE:B4:3B:D6:E6:0E:02:EA:1D:AB
X509v3 Authority Key Identifier:
keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:37:a6:94:4a:ff:f2:79:55:ab:17:0f:ea:ee:43:39:1f:02:
a5:6e:83:83:b8:21:af:23:82:25:50:65:61:f1:e3:cf:e3:6d:
47:df:54:49:57:9c:d2:20:26:25:fe:c8:b8:34:bd:1c:0e:14:
24:3a:e4:aa:36:ed:3d:7a:82:3f:44:0c:22:39:1a:d4:c6:57:
ee:fc:25:a2:99:5a:6d:e3:66:f1:23:6b:bc:a7:68:93:9b:a1:
c7:c1:27:55:64:b9:86:c1:20:9d:f3:dc:57:73:fc:7e:34:2d:
37:e8:63:9d:74:bb:3d:6c:72:69:20:b4:75:3d:b0:d6:38:4f:
04:c2:0a:dd:da:23:9e:dc:1a:41:05:29:80:6c:72:0f:14:d7:
2c:9e:a8:a2:78:a3:d6:03:66:ea:c2:64:1d:d0:20:0e:68:65:
90:25:73:23:dd:6b:f6:c4:3a:08:0a:51:5a:1f:c9:66:27:6e:
bb:fe:f4:cf:e8:01:e8:15:f5:c0:65:8f:52:aa:f6:80:1b:73:
db:0a:79:26:eb:3b:84:e6:0b:e9:d4:4f:27:78:d5:78:dd:93:
c4:18:fa:4a:98:ac:e2:b5:37:5b:8b:d5:42:12:5d:c7:85:ec:
42:38:93:c1:59:06:d0:df:cc:40:ea:d3:23:e3:63:79:e4:ce:
24:03:83:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:47:00 2026 by rpki-client