
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
File: 7vvGU2P1cW1yTBF81UIh5BLZI8w.mft (raw, json)
Hash identifier: JlGrSZiYHdGICppmdwkx/TrJVsOvhuhwE9WPnDzcZuM=
Subject key identifier: 61:4A:DD:81:CD:95:67:31:C8:12:6D:32:A3:5B:B1:C4:BA:11:F8:79
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Certificate issuer: /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial: 03E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
Manifest number: 03CD
Signing time: Wed 23 Sep 2026 00:08:30 +0000
Manifest this update: Wed 23 Sep 2026 00:08:29 +0000
Manifest next update: Wed 30 Sep 2026 00:08:29 +0000
Files and hashes: 1: 7vvGU2P1cW1yTBF81UIh5BLZI8w.crl (hash: WGVyZsS8TONwj71pcZ6moRGcsa5X9p5e6GadWAAk1ew=)
2: 01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (hash: c1QKX3+B/fQ6vz88jLkNlQcTt721ZjvBygzVcgkBxk8=)
3: ABF61020E93C11ECA5406975C4F9AE02.roa (hash: 8wUioVoR4870F98QGtk9QCMUeXCKHQ3K6gXxosWUp0c=)
4: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (hash: ChKr469/arH+VAmz0naG8nFKILTVrduQWXjfKET5pZc=)
5: AD08F946E93C11ECA5406975C4F9AE02.roa (hash: IY9FDaJoL4Z/rcOWwYXaAdDKkzf6zbvvREGE1Yn5Gug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 997 (0x3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2A41, serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Validity
Not Before: Sep 23 00:08:29 2026 GMT
Not After : Sep 30 00:08:29 2026 GMT
Subject: CN=6ab3187e-2065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:17:f9:c3:9e:49:9c:eb:ee:53:31:a2:d4:
33:58:cb:a5:0e:71:55:df:e8:ce:9f:56:42:34:7c:
15:41:bf:ae:ef:3e:d3:28:b3:69:75:71:cf:d3:0f:
d5:1e:39:77:c4:6b:20:d8:78:49:61:5f:17:b7:1f:
b7:9f:77:e4:e5:04:a6:d2:78:17:5a:dd:f1:f0:1d:
73:e6:cb:c4:99:32:5a:b2:92:d4:34:c0:63:0f:cd:
f1:57:87:2b:79:76:c3:cc:c3:70:26:db:f4:0e:dc:
b8:77:b7:3f:31:00:a5:a6:c4:ef:db:70:df:06:5e:
75:e5:c3:14:fd:98:b3:f6:cf:6e:07:53:4e:99:13:
cf:29:d8:85:f1:62:fb:ac:b7:86:01:8c:0a:e0:67:
a1:f2:eb:72:43:5d:9a:fa:7f:db:25:a9:b2:f3:cd:
34:49:76:dd:c3:86:7d:b4:36:14:63:8e:0c:bd:67:
5f:3f:48:e9:a1:26:64:71:e8:8e:00:1e:f6:ae:df:
10:fd:63:08:79:6e:c9:b5:96:6b:be:6a:38:4a:2b:
15:01:4d:44:d8:7c:bc:d8:56:41:0f:0a:cc:06:ed:
3c:2d:05:22:9f:5a:42:2c:bd:16:fe:07:4c:f7:00:
6c:de:68:1c:57:90:14:94:78:6e:07:60:95:47:5e:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4A:DD:81:CD:95:67:31:C8:12:6D:32:A3:5B:B1:C4:BA:11:F8:79
X509v3 Authority Key Identifier:
keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:7f:a4:2c:de:79:56:3e:13:22:23:fc:ad:9a:a1:c6:56:61:
4e:91:95:6a:31:69:07:dc:82:59:12:6d:62:ec:6d:34:a4:f7:
1f:fa:fc:95:b3:51:09:e8:aa:5a:4c:0b:09:b7:12:1a:56:a9:
47:6e:03:00:04:1d:82:47:90:f4:48:4c:76:b7:12:9c:c7:0b:
a8:63:d4:b8:e6:d6:40:78:44:d2:7a:d8:47:3d:6b:4b:81:c0:
43:93:53:c1:a5:59:d6:3c:0a:ef:39:44:7d:92:34:c7:04:29:
fe:7d:67:07:3e:7d:f8:f2:97:85:57:12:40:16:0e:9a:20:b3:
db:c1:ab:0a:c4:c4:8d:02:e3:e5:52:b0:91:8c:a8:54:79:a1:
e5:ad:ba:0a:02:38:d9:2b:0c:03:0c:b8:d3:12:15:54:de:ee:
6f:37:ec:fd:4d:30:21:02:6e:e4:b6:1f:9a:03:55:b7:41:ae:
5c:f2:30:30:76:fe:d2:e0:80:b3:67:92:67:c1:72:bc:f0:63:
ef:bd:00:ef:aa:d3:45:f8:2f:cf:14:58:d5:c8:8b:62:8b:7a:
c0:64:fa:53:0b:4a:f3:e0:8f:b4:fd:7a:b9:64:4f:b6:a0:ae:
25:95:31:da:ce:ae:39:ef:39:a3:3d:1c:29:42:4e:d6:11:f6:
bd:a4:d8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:14:37 2026 by rpki-client