
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json)
Hash identifier: +2uMEd5neJKu4uXv+EEbDKUMCxEMldQK35fU+hZbkbs=
Subject key identifier: 6C:7C:95:39:18:1B:1E:94:71:E6:22:72:14:CA:8E:F0:99:F2:69:D9
Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
Manifest number: 0218
Signing time: Fri 25 Sep 2026 02:55:49 +0000
Manifest this update: Fri 25 Sep 2026 02:55:48 +0000
Manifest next update: Fri 02 Oct 2026 02:55:48 +0000
Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: cZ4BTg7EwUESHf3fNVAGpex5ICvF1GJbY7sK8SUG2aA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Validity
Not Before: Sep 25 02:55:48 2026 GMT
Not After : Oct 2 02:55:48 2026 GMT
Subject: CN=6ab5e2b5-e3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:61:59:a5:e1:02:09:95:1a:a0:ad:61:28:
7f:69:74:c7:76:e0:63:2f:48:f4:51:df:06:d9:1d:
92:6f:34:ba:f2:9e:e9:0b:13:5d:7e:81:ef:74:f8:
00:ae:80:63:31:7e:dc:42:5a:fa:11:f7:33:63:f8:
da:1f:e3:84:f0:49:36:e4:af:5d:60:b6:24:af:c1:
ff:da:4a:aa:7c:8c:d9:46:1c:52:80:ef:98:cb:a8:
63:60:fd:e8:ab:3a:80:87:c6:ff:07:90:9d:4c:de:
d2:bc:88:41:a7:2c:99:12:96:8b:c6:7a:14:c5:24:
ff:aa:f1:7d:cd:c1:94:37:51:02:c6:3c:11:f2:45:
72:e2:ea:c8:85:99:cc:d7:ca:6d:83:2c:ac:f9:73:
6f:73:63:8d:75:cc:3d:71:2b:78:17:5c:64:4b:89:
23:52:9a:3e:c1:bf:b6:18:d4:34:09:67:1a:94:c4:
e3:2b:45:af:73:60:43:21:5d:d9:9c:b2:3b:e2:99:
9a:f4:13:8f:b2:9a:56:ab:46:52:94:4f:33:21:01:
f8:68:62:97:c3:bf:4b:e3:d8:82:49:cb:02:c7:b8:
51:00:3c:2b:19:fe:31:7e:a4:4b:5d:31:7b:3f:12:
43:b2:76:cf:dc:48:6e:18:55:73:46:0f:cd:6a:1d:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7C:95:39:18:1B:1E:94:71:E6:22:72:14:CA:8E:F0:99:F2:69:D9
X509v3 Authority Key Identifier:
keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:cb:c1:d0:b8:2c:17:09:91:5c:85:59:25:8c:b2:1f:88:0b:
b5:05:de:f1:5e:19:b9:d0:8b:21:79:08:08:8a:6f:24:1c:9a:
d2:57:d7:72:3e:8e:d6:73:e1:24:b9:0e:f5:c4:e1:80:51:10:
34:f1:2c:9d:73:92:6a:c7:2b:ef:60:86:aa:97:13:31:15:b6:
45:3b:98:12:8f:f0:49:1d:d5:71:35:72:8e:d0:37:6c:e5:e1:
58:1e:53:a1:c5:78:69:e5:0e:bc:bf:c5:37:58:91:8d:23:da:
c5:67:1a:00:ff:ec:d0:51:93:f0:1e:5e:67:ff:c1:6b:2c:ab:
2f:f0:27:79:2a:63:77:02:b9:6f:b0:f9:07:4a:84:50:eb:46:
53:88:cf:41:b9:b5:98:0e:55:0c:9f:dc:71:bb:7a:87:42:16:
8c:28:f1:d5:be:2f:9b:67:85:07:4c:a5:2a:75:9f:33:13:16:
a3:54:7f:4d:d9:97:42:41:2e:3d:02:c3:8d:51:d8:dd:92:d3:
1c:d4:05:61:cf:e3:db:c3:00:72:c7:7d:27:18:33:f4:81:af:
3c:0e:bb:f9:87:e9:e3:94:73:17:75:37:7c:69:5e:00:37:66:
a5:cf:03:c9:9d:53:77:d6:a4:e8:1c:1c:ce:c2:e9:45:24:fc:
bd:4f:49:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgyRjAxMTAvBgNVBAUTKEVFRTlFMTBDMjkxRTU2QzgyRDc3MDcyMDEwQjBFNTgw
MDgzRkU3MjkwHhcNMjYwOTI1MDI1NTQ4WhcNMjYxMDAyMDI1NTQ4WjAYMRYwFAYD
VQQDEw02YWI1ZTJiNS1lM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz2NhWaXhAgmVGqCtYSh/aXTHduBjL0j0Ud8G2R2SbzS68p7pCxNdfoHvdPgA
roBjMX7cQlr6EfczY/jaH+OE8Ek25K9dYLYkr8H/2kqqfIzZRhxSgO+Yy6hjYP3o
qzqAh8b/B5CdTN7SvIhBpyyZEpaLxnoUxST/qvF9zcGUN1ECxjwR8kVy4urIhZnM
18ptgyys+XNvc2ONdcw9cSt4F1xkS4kjUpo+wb+2GNQ0CWcalMTjK0Wvc2BDIV3Z
nLI74pma9BOPsppWq0ZSlE8zIQH4aGKXw79L49iCScsCx7hRADwrGf4xfqRLXTF7
PxJDsnbP3EhuGFVzRg/Nah2RqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGx8lTkY
Gx6UceYichTKjvCZ8mnZMB8GA1UdIwQYMBaAFO7p4QwpHlbILXcHIBCw5YAIP+cp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJGMC81QzU3RTVDMDgy
ODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZzZ3Rkd2NnRUxEbGdBZ181
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzd1bmhEQ2tlVnNndGR3Y2dFTERsZ0FnXzV5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODJGMC81QzU3RTVDMDgyODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZz
Z3Rkd2NnRUxEbGdBZ181eWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAMvB0LgsFwmRXIVZJYyyH4gLtQXe8V4ZudCLIXkICIpvJBya0lfXcj6O1nPh
JLkO9cThgFEQNPEsnXOSascr72CGqpcTMRW2RTuYEo/wSR3VcTVyjtA3bOXhWB5T
ocV4aeUOvL/FN1iRjSPaxWcaAP/s0FGT8B5eZ//BayyrL/AneSpjdwK5b7D5B0qE
UOtGU4jPQbm1mA5VDJ/ccbt6h0IWjCjx1b4vm2eFB0ylKnWfMxMWo1R/TdmXQkEu
PQLDjVHY3ZLTHNQFYc/j28MAcsd9Jxgz9IGvPA67+Yfp45RzF3U3fGleADdmpc8D
yZ1Td9ak6BwczsLpRST8vU9JlQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:03:02 2026 by rpki-client