
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
File: 9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json)
Hash identifier: dlSzhx7D/Y1gGt3AjtTIi/NiLstk+i+pscacouY2KWk=
Subject key identifier: CD:FE:13:61:E1:44:1D:C1:3E:08:09:A1:83:A2:24:F2:12:84:19:8F
Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
Certificate issuer: /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
Manifest number: D7
Signing time: Sun 15 Nov 2026 06:52:08 +0000
Manifest this update: Sun 15 Nov 2026 06:52:07 +0000
Manifest next update: Sun 22 Nov 2026 06:52:07 +0000
Files and hashes: 1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: mqS/tAyMu3D/eS+jPjWKGTQwtO83vTHKRy1G58cL7pM=)
2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: +oOWaz5+puMsV9knRaxvNPItkQ6Wk8WkynSxoQb5q8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 06:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Validity
Not Before: Nov 15 06:52:07 2026 GMT
Not After : Nov 22 06:52:07 2026 GMT
Subject: CN=6af95698-8232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:3c:c5:cf:09:c5:ac:7c:ac:1b:59:ac:19:
2a:41:1b:10:d8:2f:32:80:59:78:91:90:86:89:13:
c3:2a:e2:4c:6e:d8:08:1e:0a:cb:82:11:82:1d:8d:
ec:06:94:20:48:87:e0:bf:57:8f:90:35:84:4e:00:
f0:c1:45:44:07:c5:49:6b:b9:de:e5:07:a0:c2:f8:
71:e4:fa:91:9b:5d:fb:b2:b3:76:88:62:b8:f2:39:
69:23:ec:f6:39:ce:e0:31:b0:57:1e:cc:71:0d:22:
ba:70:0b:2e:b6:bd:ba:4d:a2:d3:2b:ac:aa:28:34:
fd:50:37:1a:2c:d2:a3:21:86:14:b1:c8:0b:74:88:
42:66:6e:3f:ad:5f:a5:c2:f7:38:a7:ad:94:ae:7b:
e8:98:72:97:86:c6:bc:64:cf:84:83:f7:92:08:2d:
97:e9:6c:d1:98:a6:19:76:22:7a:59:2d:c3:27:4b:
bd:9f:82:99:08:27:30:2e:83:5e:f6:26:7e:5c:a0:
4f:d4:20:9d:1b:e4:19:a6:ee:49:6f:ea:04:1b:18:
40:64:b2:f9:be:a2:21:bd:49:53:f1:f0:c8:5f:93:
13:9e:b7:0a:02:dc:16:5c:99:0f:4a:f6:62:bc:98:
66:3c:15:e6:ad:8e:00:fe:c6:53:22:7b:eb:80:2b:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FE:13:61:E1:44:1D:C1:3E:08:09:A1:83:A2:24:F2:12:84:19:8F
X509v3 Authority Key Identifier:
keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:ba:4f:f1:cf:16:f7:05:87:5f:3b:0f:33:20:b7:da:2f:a6:
03:f7:91:9d:67:b1:f3:c1:e5:4d:12:32:a3:43:47:55:44:47:
6d:99:09:21:92:c3:4f:0f:c9:bd:09:ad:b0:d5:c9:a1:03:33:
09:bc:87:81:a9:29:18:90:3e:1e:bb:e0:0b:38:2c:a2:1d:7b:
0b:2d:d7:18:34:31:a8:1a:72:db:18:9c:f7:99:cd:56:74:f2:
9b:f0:42:eb:69:31:01:8c:a5:e9:bf:61:d8:34:6d:2b:6d:08:
48:8a:4a:b5:e5:ee:94:a4:cf:a5:b2:e9:02:73:57:5f:95:60:
4b:bb:4b:ce:71:40:ad:fb:e8:4c:ad:df:34:43:a7:8d:da:3a:
4a:58:83:74:fb:af:ea:92:14:0f:27:dc:b4:8b:61:70:b8:7a:
49:ac:23:64:95:91:77:e8:d3:93:6a:7a:f2:4d:1e:3c:c4:fb:
3b:54:44:7a:a3:a0:91:4d:d1:2f:ea:1b:c5:8e:7a:4c:13:27:
82:d7:85:26:cb:f6:f2:0b:2d:9b:9d:30:9b:b4:7d:c2:06:6b:
b7:be:b8:f7:c7:ae:58:d3:6e:82:40:f1:b0:33:6d:5b:7b:a1:
bc:ef:f1:44:d3:7f:f3:61:af:53:ee:f5:af:9d:a7:56:98:0d:
54:ee:b4:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRGQjcxMTAvBgNVBAUTKEY2QjE0NTEwMjA1MjQ3Q0U1ODMzMjU5MUI5QTI5N0Ex
NUQyQUVBM0YwHhcNMjYxMTE1MDY1MjA3WhcNMjYxMTIyMDY1MjA3WjAYMRYwFAYD
VQQDEw02YWY5NTY5OC04MjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx2g8xc8Jxax8rBtZrBkqQRsQ2C8ygFl4kZCGiRPDKuJMbtgIHgrLghGCHY3s
BpQgSIfgv1ePkDWETgDwwUVEB8VJa7ne5Qegwvhx5PqRm137srN2iGK48jlpI+z2
Oc7gMbBXHsxxDSK6cAsutr26TaLTK6yqKDT9UDcaLNKjIYYUscgLdIhCZm4/rV+l
wvc4p62UrnvomHKXhsa8ZM+Eg/eSCC2X6WzRmKYZdiJ6WS3DJ0u9n4KZCCcwLoNe
9iZ+XKBP1CCdG+QZpu5Jb+oEGxhAZLL5vqIhvUlT8fDIX5MTnrcKAtwWXJkPSvZi
vJhmPBXmrY4A/sZTInvrgCthxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3+E2Hh
RB3BPggJoYOiJPIShBmPMB8GA1UdIwQYMBaAFPaxRRAgUkfOWDMlkbmil6FdKuo/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEZCNy83RUM2NjFDOEEw
NDQxMUYwQkM1Q0Y5NDdDNEY5QUUwMi85ckZGRUNCU1I4NVlNeVdSdWFLWG9WMHE2
ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlyRkZFQ0JTUjg1WU15V1J1YUtYb1YwcTZqOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEZCNy83RUM2NjFDOEEwNDQxMUYwQkM1Q0Y5NDdDNEY5QUUwMi85ckZGRUNCU1I4
NVlNeVdSdWFLWG9WMHE2ajgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmbpP8c8W9wWHXzsPMyC32i+mA/eRnWex88HlTRIyo0NHVURHbZkJIZLDTw/J
vQmtsNXJoQMzCbyHgakpGJA+HrvgCzgsoh17Cy3XGDQxqBpy2xic95nNVnTym/BC
62kxAYyl6b9h2DRtK20ISIpKteXulKTPpbLpAnNXX5VgS7tLznFArfvoTK3fNEOn
jdo6SliDdPuv6pIUDyfctIthcLh6SawjZJWRd+jTk2p68k0ePMT7O1REeqOgkU3R
L+obxY56TBMngteFJsv28gstm50wm7R9wgZrt76498euWNNugkDxsDNtW3uhvO/x
RNN/82GvU+71r52nVpgNVO60SQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:12:56 2026 by rpki-client