
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier: FhHfpppDYbP6PYs/YLuOx34OOORFIXB8HtDGb1yAqzg=
Subject key identifier: 3D:FD:48:20:51:F5:12:07:DD:AA:AB:86:D3:6A:33:5A:33:24:35:0B
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 03EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number: 03C5
Signing time: Sun 15 Nov 2026 00:23:05 +0000
Manifest this update: Sun 15 Nov 2026 00:23:05 +0000
Manifest next update: Sun 22 Nov 2026 00:23:05 +0000
Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: mxVdNoFqHw6eYWYdViyveuruBcyOGJQrSjo2VI1dAaI=)
2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: IT6sjqgyeU7yL3F+eCEVuRIF5QZib/FjkDzd9+imaPw=)
3: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: igM78oSfeB942BNkl42YqKy+vOSBmm/qF44KEq3SfEc=)
4: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 3rz3y2F3aVzj5O9phACfchAMbGqJwRa3oLDOUx3l7LI=)
5: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: ZWhBeU6y3g8qTKiuOtQLL6VcfczNqvmkhr8Yqi5VXlY=)
6: 8BB438729C5311F19090C9214211F970.roa (hash: 4P3QCMBtXIARu2oRAALfV+4dtZEhy98vYnb2SXz40aM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 00:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007 (0x3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Nov 15 00:23:05 2026 GMT
Not After : Nov 22 00:23:05 2026 GMT
Subject: CN=6af8fb69-1cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:cd:9a:60:90:62:a6:d2:7e:94:1d:03:c1:
9b:51:89:ec:ff:21:6a:da:84:7d:70:3d:5a:06:d1:
17:87:ea:ba:bf:ac:65:80:66:56:fc:ee:b9:4f:07:
7e:cc:16:70:b4:ca:80:8a:35:3a:3e:e5:99:55:0b:
04:42:45:10:4b:db:f8:b3:35:1a:a7:11:54:52:fb:
75:95:99:f6:13:8d:ea:41:c0:53:49:72:81:b4:88:
e6:ae:0d:fa:34:6f:33:45:f6:7c:e7:2c:75:c0:2f:
fc:8e:9c:07:00:77:85:b7:d3:ac:8d:74:33:59:ce:
7e:c0:69:9f:f8:d9:46:b3:7c:5f:13:fd:4e:be:ca:
85:2a:04:61:f4:68:13:0d:63:e2:99:1b:86:63:f7:
f2:6f:bd:1f:52:1e:8f:a1:ad:20:1e:f1:56:4b:f8:
d0:80:2e:19:2c:50:2e:7d:97:b1:61:fc:e4:3a:f1:
9d:ee:18:c7:55:28:2d:14:6f:2b:a1:47:06:c1:75:
05:15:59:dd:86:14:e4:7c:a2:2f:51:e2:20:a7:f4:
b8:10:93:1a:62:97:03:fb:63:a5:cf:ec:70:49:db:
73:cb:0e:ed:2c:6f:77:32:c6:45:58:cc:f2:81:83:
ef:f5:71:c0:35:92:c1:90:62:f3:37:fe:8a:ca:b0:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FD:48:20:51:F5:12:07:DD:AA:AB:86:D3:6A:33:5A:33:24:35:0B
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:2c:ad:eb:5e:ae:35:17:f8:5e:6e:d8:fa:62:69:4e:82:51:
be:36:4c:5b:ee:03:82:f1:9d:d9:80:f2:a1:f3:84:f8:1f:c0:
c5:81:1c:bb:03:41:b7:1f:b3:6b:7e:4c:42:43:e7:ee:a5:af:
89:21:56:5f:7d:28:10:79:b7:f7:5b:34:04:90:e8:51:b6:8b:
a5:59:7c:af:e6:38:2c:1d:19:d3:3e:11:70:a4:cb:63:96:c9:
49:a6:0e:a3:67:c1:44:b7:86:10:ce:89:c7:92:a5:fa:0c:58:
3c:2e:1e:e6:7f:f1:35:f6:85:af:f2:8a:65:15:47:94:b5:6f:
51:f8:23:4f:64:07:68:81:0c:9f:3b:00:f3:cc:a8:f5:ee:dc:
de:08:09:0b:84:4f:ff:8b:d2:7a:1f:3f:dd:c0:12:24:cd:fd:
0a:a8:59:51:7f:9f:fe:30:45:e0:b2:00:7a:bf:a0:ae:0e:16:
13:4a:6e:6e:78:e5:51:7e:45:35:1b:92:d7:2a:af:dd:c2:5d:
a5:e1:c7:65:1a:fc:f9:2b:92:eb:63:52:7f:f7:4f:44:e0:b1:
a0:c2:e2:6d:b8:dd:3c:fc:c2:9b:89:65:46:16:6b:a8:9d:a4:
00:8b:b6:5c:93:b3:7b:5d:1f:ad:6a:e5:46:23:25:a8:e2:78:
80:e6:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:14:35 2026 by rpki-client