
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
File: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json)
Hash identifier: t8JFkcYzYmUH8SYFs27G0FUz8m/r8uXuH/XR49Iy98M=
Subject key identifier: 1C:4D:1C:81:60:6D:2E:8D:58:59:69:1D:02:07:E2:1D:B2:C4:2B:CC
Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Certificate serial: 07C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
Manifest number: 07A0
Signing time: Thu 24 Sep 2026 21:30:58 +0000
Manifest this update: Thu 24 Sep 2026 21:30:57 +0000
Manifest next update: Thu 01 Oct 2026 21:30:57 +0000
Files and hashes: 1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: mJvOeR+yqKF3VZ80gh4f5sPRuh8sWukQvH5Y8o4lMEA=)
2: E00D6A56234511F19D87D3EAAA833773.roa (hash: m2Ad3hXmb6Jb8EQc6ygXGL7dAvqHRdE6xSp/glQ29Lg=)
3: 6EC9CC12746911F0B5BCC83EC4F9AE02.roa (hash: +/kAkfziYTn212TfYK9V8Vaa0l9HEiaFVxFsS7+dCsI=)
4: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: dkLPMtJ8tmcL7dR+kjEDPZv0Yw29R4zxocy9vRpdDVg=)
5: E959541EB28511ED8893C51CC4F9AE02.roa (hash: /mQOlGfVWmEy30ofXyuzY6t7pmr3Lkv7EZobHw1SsQc=)
6: DFBF8CDC6AF911F08AB48F35C4F9AE02.roa (hash: HqpWvOqH1rT1tI76V+VGFSF3BD9o+eyoT9fpq42OKAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1991 (0x7c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Validity
Not Before: Sep 24 21:30:57 2026 GMT
Not After : Oct 1 21:30:57 2026 GMT
Subject: CN=6ab59691-bd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:1a:5a:ff:67:8a:2c:58:4a:76:6d:b6:ad:
d1:78:1d:59:79:ff:f6:b5:91:b4:f5:a1:7f:aa:8a:
79:97:d6:37:47:9e:96:76:bf:dd:11:c7:c8:eb:c0:
f7:fe:1b:66:4f:96:ae:76:61:36:d2:8b:69:9c:8e:
af:90:3f:98:b2:62:ae:fe:11:d8:1e:18:6b:d0:f6:
61:b7:5c:55:48:4e:60:27:db:4b:73:f0:b3:89:90:
a8:3d:7a:5f:0e:18:c3:b5:94:9f:41:65:1d:ba:ed:
5f:42:9c:13:63:8d:ef:44:07:09:f8:17:f7:45:ec:
38:37:b5:88:30:88:30:0a:db:9b:9a:6b:10:bc:b5:
ce:c1:42:1c:2c:84:67:71:da:f5:95:a7:29:f6:0d:
d1:e1:3c:d2:b8:d3:d1:fe:3d:51:10:8a:30:49:dc:
6c:95:41:77:3e:8d:20:41:ab:44:29:1b:c6:6a:17:
f7:6b:27:06:51:9c:fd:97:69:e1:de:b9:db:93:46:
cd:f6:af:68:00:ec:1b:2e:55:15:8c:46:df:53:44:
dc:78:0b:d1:57:bb:88:90:bd:4d:c3:49:fb:d6:51:
0b:5c:2c:0f:fc:79:0a:57:42:7d:d7:3c:84:7c:0a:
f5:63:77:92:58:46:78:7d:d4:42:be:ab:3a:a9:93:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4D:1C:81:60:6D:2E:8D:58:59:69:1D:02:07:E2:1D:B2:C4:2B:CC
X509v3 Authority Key Identifier:
keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b4:68:bc:13:30:10:7a:94:a7:ef:93:2d:8a:68:71:79:32:
94:93:eb:5e:19:a5:d7:9d:8a:a5:8f:8b:b6:6f:ab:dd:cd:91:
ca:a8:68:a1:d0:41:aa:00:d4:4b:ff:32:57:0a:bd:91:b2:91:
23:be:1e:5a:7e:e1:0c:17:ea:d9:cf:9c:33:8b:7d:26:06:30:
89:a4:97:f7:c1:9e:ef:ef:1c:d2:69:6b:d6:1e:5e:62:e1:9d:
f8:b8:3c:42:82:e9:a4:5a:39:b5:61:d6:4e:52:cb:8a:56:65:
45:51:f8:82:9f:b7:0d:53:a1:f6:92:65:d1:ba:fd:e9:2f:07:
d9:65:12:cb:67:03:9d:04:e8:d1:a9:b6:5b:5f:f9:c7:7d:62:
20:4e:6e:c9:77:68:51:bc:09:44:6c:78:06:db:df:dd:a8:b7:
55:3c:16:a1:d3:1f:c4:97:25:ec:91:b0:93:63:9f:db:85:5d:
e9:0f:fb:24:35:e6:00:07:a3:1b:cb:6d:7f:cd:08:a6:1c:a5:
25:1b:46:b3:af:da:44:6e:0f:d2:68:24:02:6a:85:b7:fa:09:
b1:55:ad:9c:d0:b8:49:54:41:b4:c8:2e:75:a8:11:8b:9c:cf:
c1:fb:aa:54:ca:05:a1:fe:00:81:33:ef:55:07:72:ab:38:6e:
e2:49:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:39:15 2026 by rpki-client