
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json)
Hash identifier: bMUCKLkAueNnjdUsdUtiKIFgHO68xbtBBI42/Htbm3Y=
Subject key identifier: 2C:52:EB:FF:31:AE:92:91:0C:8C:A9:60:3A:7A:3B:C7:4C:6F:61:71
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial: 0BEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
Manifest number: 0BCC
Signing time: Mon 12 Oct 2026 19:10:58 +0000
Manifest this update: Mon 12 Oct 2026 19:10:58 +0000
Manifest next update: Mon 19 Oct 2026 19:10:58 +0000
Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: sx5pSp8MoOR8s7w5NG0hZQ5rq+0ZE7dcH900UNrnqU8=)
2: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: OKEj9HXa1f9g4uR6sVBPFlkPnTkz7D9Cnlvm3kiY8Tw=)
3: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: /1SCEQVpr9moafPfMLqizcxn36EGeIZ1g7YGNLkjf1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 19:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3054 (0xbee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Validity
Not Before: Oct 12 19:10:58 2026 GMT
Not After : Oct 19 19:10:58 2026 GMT
Subject: CN=6acd30c2-b26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:3e:ec:27:b7:2a:f3:c9:74:c9:40:28:0a:
c7:09:59:ac:fc:32:f8:d5:81:aa:13:c5:d7:c6:ca:
3e:7d:f2:37:24:a1:9f:4e:51:98:18:d4:ac:bb:3b:
ae:d2:61:4b:3e:01:99:23:5c:de:f8:38:c2:a5:c4:
ab:d1:0f:93:17:b2:65:b3:4e:3f:4a:1d:9f:9e:5f:
34:c7:38:c4:cf:31:c8:85:64:04:05:3e:4c:24:4a:
7e:ea:03:d0:b5:cc:d2:2a:34:47:f6:4b:32:61:59:
72:80:94:96:df:38:73:35:df:85:6e:ef:0a:96:a8:
c8:ce:1b:6c:52:db:de:ff:83:25:6f:67:d8:ee:e9:
85:01:ae:52:3b:9e:79:01:25:db:a3:17:90:0c:92:
3d:c3:38:0e:61:43:3e:3d:7f:03:08:a2:ee:e7:a2:
7e:55:94:c4:5d:a4:98:89:5c:c2:35:9e:2f:80:4a:
46:57:e4:1d:48:2b:f4:d9:ae:6f:3e:d1:7e:74:2f:
b5:f5:b2:bd:00:36:32:43:a0:6b:fe:e3:95:5c:41:
d5:7c:69:5c:83:12:fb:91:98:e3:ba:43:99:b1:a8:
f6:98:f3:f7:e8:70:22:f3:ed:9b:06:d3:66:b8:cb:
07:9e:e6:1a:d9:26:56:5d:a9:23:ba:a8:52:d8:a0:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:EB:FF:31:AE:92:91:0C:8C:A9:60:3A:7A:3B:C7:4C:6F:61:71
X509v3 Authority Key Identifier:
keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:82:7d:4f:e0:f3:df:73:c4:83:1a:45:80:60:ff:0d:18:1e:
cf:a9:de:8a:fa:69:8f:d7:48:40:fc:c5:61:5d:50:9b:9c:b8:
45:06:1e:06:31:7f:86:63:14:0d:f6:81:ef:fe:85:fe:3b:10:
e6:c9:bc:c0:f8:dc:38:3d:01:a1:93:48:21:0e:98:3d:c8:b7:
84:1a:5e:4b:7b:31:75:ca:dc:ff:17:6d:e5:80:62:38:bb:dc:
f9:3d:28:93:99:f3:eb:e8:df:d9:00:b6:57:de:cf:fb:61:14:
2a:83:48:22:6c:f3:58:3f:94:33:45:0c:7c:61:1a:39:98:2b:
2c:8c:9f:78:83:21:d2:bd:fb:7f:2e:b8:d7:8b:e7:52:c6:6c:
0d:a9:b8:3d:77:64:a1:5c:10:55:ea:80:68:fb:d8:0b:46:6b:
ec:73:53:3e:84:64:b0:83:15:d6:6a:63:4e:49:92:22:24:51:
39:60:6d:07:a6:d3:96:61:18:03:4c:2a:f8:65:05:9c:bc:f8:
47:4a:9b:1f:09:63:1d:e8:31:b4:90:b8:0a:27:a1:25:30:47:
d3:a5:78:88:37:44:3c:6b:3c:8f:51:c9:c8:06:6e:bc:87:00:
07:d2:7d:55:36:93:47:eb:16:ce:cd:60:53:60:94:bb:dc:49:
e3:3f:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:17:52 2026 by rpki-client