
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json)
Hash identifier: +l0/O/LjjViXcrADLq44Lb/hMvo/DcVMIzIG49C0fDM=
Subject key identifier: 49:CF:59:EC:97:63:BF:27:1F:E0:D8:40:5D:91:67:78:BA:98:7F:7C
Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Certificate serial: 070E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
Manifest number: 06F4
Signing time: Tue 22 Sep 2026 22:01:11 +0000
Manifest this update: Tue 22 Sep 2026 22:01:10 +0000
Manifest next update: Tue 29 Sep 2026 22:01:10 +0000
Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: BITE+Xufi/PatRb7Ks1/gmlgOFcNFd5PqRG2ldr2zOA=)
2: 025F93342CC111F18F49A0CD8E833773.roa (hash: 9OxQnJdbcQDzkvTkGEhjvJVE/K7YZ3jW1C9gUIBfMOo=)
3: MxbgNdzUPQ8JUFw4yDKY22elaak.asa (hash: tfLQfnMmfS+VxwhQ6y1bHMpVkN/qGYBl0OXesphlAxY=)
4: 26E44986BE8311F0B427BB65C4F9AE02.roa (hash: zkdAaeEPlXvrLzm7ABEo4z3HGm72cLwvTgwa/SWGVl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Validity
Not Before: Sep 22 22:01:10 2026 GMT
Not After : Sep 29 22:01:10 2026 GMT
Subject: CN=6ab2faa7-3666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:77:c7:84:e8:56:6a:c0:f5:ae:b6:f9:77:
94:96:08:5a:f6:43:73:77:51:ec:9d:a0:f9:11:85:
57:b9:a4:c4:c0:d7:3d:3c:45:45:6e:f7:79:f8:a8:
d8:c0:4b:2c:a3:c6:41:d3:c4:59:f3:4b:eb:c7:da:
2a:de:db:ea:c4:28:48:91:c0:3a:c7:0e:d8:8b:89:
98:62:63:7d:53:ff:93:73:8d:b6:e4:bf:46:34:d3:
a1:f5:b5:97:b7:ff:cf:74:38:78:26:68:e4:2f:ef:
8b:5b:a2:ba:14:3c:f8:0d:80:a9:48:75:23:62:bd:
fa:2d:3e:3e:c5:16:f7:6e:21:b2:a8:29:ca:f0:15:
d7:e0:2c:56:78:6c:a3:c9:a4:75:11:f5:05:ad:19:
ec:08:04:37:68:0e:73:c8:e1:b9:4a:f1:4f:89:c3:
8c:9e:93:34:54:b3:0b:3c:06:6a:8a:37:bc:80:0b:
f1:88:9d:5b:09:b3:e1:38:27:28:a8:ae:1f:c8:2a:
c4:43:8a:8c:9d:a6:52:5e:db:9b:2c:60:63:f4:89:
1d:04:21:a9:52:de:56:7c:12:54:e3:bb:78:09:08:
0f:f7:f9:a9:6b:1b:e3:7b:b1:75:3f:c1:f0:38:b5:
62:97:5a:52:0c:39:1f:1b:31:d5:82:7d:f3:97:91:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CF:59:EC:97:63:BF:27:1F:E0:D8:40:5D:91:67:78:BA:98:7F:7C
X509v3 Authority Key Identifier:
keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:68:0f:b5:21:d6:87:4a:4e:8c:33:42:75:5c:df:42:61:9e:
85:e2:cd:16:0c:d8:77:28:c1:40:23:01:3a:2d:9c:fe:84:5c:
5d:8e:16:ea:5a:8b:c0:39:57:d3:ee:c2:e5:de:fe:a9:ef:23:
2d:c6:8b:16:6c:69:e1:ef:17:82:c9:3b:36:95:75:5a:ca:c5:
81:f3:53:bd:2a:79:f0:da:a2:14:2e:de:a0:c6:bc:5f:2b:5a:
37:05:06:d5:b9:8f:96:83:54:0c:a4:ec:2c:81:1c:94:cd:b5:
24:4a:99:0d:4d:a5:ff:d3:51:5a:62:c7:c4:d8:4f:34:9b:50:
1c:4c:50:01:96:41:1f:cc:77:84:2f:09:0c:9f:8c:3f:de:17:
22:a2:57:f8:d5:48:23:52:09:81:2a:49:53:2e:21:e4:ae:db:
b4:be:db:59:d0:1f:57:77:cc:2b:de:be:46:93:5c:25:8d:a4:
ef:6e:85:b0:f2:e6:3c:03:63:ec:e3:de:60:31:ac:f4:6b:34:
67:16:f7:77:98:57:b4:56:01:e2:18:67:ec:a2:7f:1f:07:0a:
e5:75:52:69:5f:c9:29:5a:92:5a:ca:34:89:bd:40:50:61:f3:
11:92:e4:9b:86:95:cb:cc:62:18:b5:fa:24:64:97:45:7c:76:
56:88:e1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:46:54 2026 by rpki-client