
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
File: C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json)
Hash identifier: oQGV/BAvHcrvzdpL680AjXoMGvG0CJxqbeg2tgllkwc=
Subject key identifier: B7:7F:5B:74:5D:24:B4:C2:03:E7:CB:3F:DF:D6:F9:FC:3F:3C:3D:80
Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67
Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
Manifest number: D8
Signing time: Sat 03 Oct 2026 07:21:08 +0000
Manifest this update: Sat 03 Oct 2026 07:21:07 +0000
Manifest next update: Sat 10 Oct 2026 07:21:07 +0000
Files and hashes: 1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: DvBa8gHXznPqTtni8dN+cyYEmhzxEYAFGyTyTOU7S1c=)
2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: aA5xOOf0l5kwLxMjA9WGASG0n2PqG9HAsf+v12Q+bMc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl
rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
Validity
Not Before: Oct 3 07:21:07 2026 GMT
Not After : Oct 10 07:21:07 2026 GMT
Subject: CN=6ac0ace3-96d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:a6:e1:9e:58:61:c0:6d:fe:07:53:d4:3c:
a2:f7:e0:e6:c8:13:d0:da:57:42:83:c9:5c:8d:5a:
71:0d:fa:eb:8c:8b:ff:5d:b7:c9:0c:55:53:fb:20:
34:f4:fe:fd:26:28:da:57:22:2a:77:13:6e:18:2e:
ea:06:de:4c:ee:84:88:d2:95:22:cd:94:a0:0d:74:
ce:03:c9:ad:21:36:e0:12:6c:e9:df:86:7f:14:8b:
20:09:dd:24:fa:ab:8e:c1:28:e7:92:2d:cb:70:7d:
21:bd:5f:57:17:cd:97:15:de:9f:ca:09:ec:71:c3:
4e:2f:86:82:2b:b3:31:48:7e:4e:a9:7d:17:95:d3:
3f:cf:dc:17:c0:f8:e1:de:69:c7:01:3e:4d:e8:64:
db:50:ae:2f:9f:32:5a:29:52:4e:71:ad:8a:74:75:
d1:2e:7d:64:06:42:6a:45:c4:56:38:38:10:a6:9d:
f2:46:dc:6b:db:53:24:d8:59:63:79:06:91:62:3e:
6b:0c:1e:39:1c:29:4b:39:be:57:d5:c2:b5:be:1b:
7c:c8:8b:b7:48:8a:ee:d2:09:e5:f5:01:55:f7:a8:
d7:f6:d0:91:ce:54:7d:ed:86:16:c9:43:f1:f4:b0:
a0:2e:f8:a5:f3:5d:35:c0:99:ad:5b:1c:72:0b:98:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7F:5B:74:5D:24:B4:C2:03:E7:CB:3F:DF:D6:F9:FC:3F:3C:3D:80
X509v3 Authority Key Identifier:
keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:df:d4:2f:4b:28:13:25:67:57:b7:0c:45:63:04:d7:1c:92:
3f:f3:23:80:ec:95:85:9c:4a:a2:40:5c:27:88:d4:25:0f:e4:
2c:4c:f9:4c:6b:39:68:1a:de:b5:0d:97:e7:10:58:cd:54:ed:
e1:02:0d:6d:d4:4a:7a:22:50:b7:4c:17:02:37:93:f9:ca:4b:
f7:e1:1e:1d:1e:6a:4d:5b:1d:16:51:ad:19:22:e7:98:27:04:
44:59:49:14:3e:2d:0a:98:4e:b7:d9:a9:3d:12:cd:00:17:51:
07:b0:58:d3:33:42:0c:13:e8:7f:ac:c4:96:6a:98:ed:65:b0:
43:4e:b5:da:e5:33:64:a8:24:99:d1:e8:78:26:db:c1:45:69:
b6:38:be:11:bc:11:86:f5:cb:f3:90:6c:9c:07:16:87:9e:b7:
9b:ad:e6:52:1c:eb:d4:f6:20:97:73:14:8b:c2:fc:d6:4d:d4:
6c:43:1d:f2:2f:9d:65:ce:3b:10:ca:14:a2:7a:11:5c:31:38:
ec:e9:7d:a6:a3:75:46:e7:96:b0:c0:8b:d0:85:79:bb:fc:74:
22:6d:b2:d8:8a:f4:65:db:d8:65:00:6f:0d:c7:6c:48:e4:5b:
fb:68:0d:bc:03:ce:9d:90:bd:87:6d:de:02:2a:31:da:68:5e:
68:a8:df:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:15:38 2026 by rpki-client