
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
File: K7fm9k6JPZEwSosliGA1DWdQVK0.mft (raw, json)
Hash identifier: 7gjrXv4l/DC6Zgq9209C8P1B4ciluZbdSr5/1YKZ5A8=
Subject key identifier: 8F:E2:04:1F:71:AB:CF:45:65:AF:E7:36:13:F7:06:68:84:4A:03:F5
Authority key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD
Certificate issuer: /CN=A91F08D9/serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
Manifest number: D1
Signing time: Thu 01 Oct 2026 08:02:35 +0000
Manifest this update: Thu 01 Oct 2026 08:02:34 +0000
Manifest next update: Thu 08 Oct 2026 08:02:34 +0000
Files and hashes: 1: K7fm9k6JPZEwSosliGA1DWdQVK0.crl (hash: O/dgMfGOFGOCNpIDARIrRZE6cVhLZqkZbOeq28c2Ky4=)
2: 87B1CF3484AB11F08EC73477C4F9AE02.roa (hash: wj3CysiZUbw6+gol3WXIUNIf6f/KPaKD87i7kYiUu3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl
rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 08:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD
Validity
Not Before: Oct 1 08:02:34 2026 GMT
Not After : Oct 8 08:02:34 2026 GMT
Subject: CN=6abe139b-0932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:da:71:14:2e:76:2f:c7:d0:e4:ee:ba:0e:
38:b8:0d:e2:b5:d7:fd:02:e8:ac:71:b2:8c:68:e4:
3d:51:8d:1f:28:7b:06:e1:ba:69:a8:be:5c:bc:8e:
25:c3:a9:67:05:84:f6:80:9f:d2:12:86:e5:54:f2:
99:da:70:ff:c5:4d:8d:94:95:7f:e6:fc:31:51:aa:
5e:d7:d4:5b:9a:8c:19:b0:7e:8c:3f:c0:1a:84:20:
ce:58:05:b9:d4:7d:56:fb:9d:86:82:1a:c5:10:fc:
b1:84:f8:b9:d8:59:d5:5f:40:bd:7e:38:34:0d:6f:
1b:7f:91:63:9d:6b:b8:c9:1a:c1:7d:11:98:8a:d9:
eb:26:4d:21:d9:67:0e:e1:52:4b:cd:d8:44:54:99:
68:76:34:30:0c:0c:cf:b2:db:6c:13:b4:01:f2:c5:
bc:23:a0:6b:86:7c:39:d0:d9:98:20:68:68:0a:55:
f6:9e:c4:f5:60:97:30:61:d8:5a:0f:f4:ea:47:89:
fb:ed:1b:11:96:76:84:0b:31:f4:14:29:aa:f8:2a:
70:a0:9e:d7:1e:ae:82:54:b1:fb:86:40:2c:4a:b4:
c2:d6:06:21:9e:d5:7a:6a:0d:0d:fe:e2:c5:40:d0:
a5:15:37:4d:09:59:89:5a:b6:d8:c2:eb:cd:f5:cf:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E2:04:1F:71:AB:CF:45:65:AF:E7:36:13:F7:06:68:84:4A:03:F5
X509v3 Authority Key Identifier:
keyid:2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:97:df:ef:c0:4f:8e:8c:52:fe:99:62:b7:f3:9c:4d:65:58:
81:78:d1:6f:0f:32:19:50:7d:30:91:9f:f2:ff:19:a2:11:39:
45:4d:c0:bf:be:80:ee:18:50:8b:c8:e9:42:cf:54:1e:64:c5:
3f:86:25:a0:74:c3:38:fe:aa:aa:2b:bd:0d:e8:77:33:e0:04:
90:94:42:03:35:f4:cf:2a:5e:cf:cf:6c:aa:b6:02:26:a3:23:
df:61:d4:4c:3c:d7:a7:88:9b:ab:4a:1a:c7:2c:e2:2b:39:24:
db:0d:9b:c7:68:6a:3d:2f:31:46:b6:7c:15:89:18:26:49:36:
64:8e:4a:04:9d:c2:7a:12:f6:17:dc:f4:f0:58:1a:55:ee:e3:
ca:19:8d:f4:8b:11:e3:80:83:b5:09:c5:66:24:20:4a:b5:19:
0b:1c:75:30:94:d4:2f:eb:3c:b0:c7:1a:50:3f:07:91:09:e5:
01:47:40:8a:3c:80:ce:2d:22:1c:80:63:56:97:93:fb:1a:9d:
a3:02:47:56:3c:10:c5:05:42:17:1d:b0:b0:21:4e:20:a6:22:
77:86:ba:90:d8:a0:9c:c2:13:01:af:0c:2b:0b:f0:6b:48:56:
10:36:c2:85:6b:bb:04:f1:60:f2:2e:e8:2e:df:35:3f:af:0d:
71:b6:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:09:24 2026 by rpki-client