
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
File: exUBXdufhEEqZ9s-Jv7LTdy72YA.mft (raw, json)
Hash identifier: YvuExc+UDJxDolwO4SAYDW0SLu9Ll4njirBwN1sCTfA=
Subject key identifier: 7E:2E:F6:A7:28:6E:BC:E9:3E:30:EC:66:25:92:19:6E:32:D8:93:17
Authority key identifier: 7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
Certificate issuer: /CN=A91F6B3D/serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Certificate serial: 07EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
Manifest number: 07CA
Signing time: Tue 22 Sep 2026 21:09:51 +0000
Manifest this update: Tue 22 Sep 2026 21:09:51 +0000
Manifest next update: Tue 29 Sep 2026 21:09:51 +0000
Files and hashes: 1: exUBXdufhEEqZ9s-Jv7LTdy72YA.crl (hash: 1yEfgytebur/wuJvTBIWr2xYFJdGLfh00KDs+X6nAcM=)
2: 0F83E674B45611EC8D43DA35C4F9AE02.roa (hash: T6HFTYBUh/26VZgPfrF74DoTW/IXsvK96NsqSgKyyQ8=)
3: 76F636C6C13111EC8B2DD839C4F9AE02.roa (hash: k/My+/ubHS/O/FNtoNjs3sm4BhCb18Gw3kC4Ft+xpyI=)
4: 4FB0329A827311EBAB565A86C4F9AE02.roa (hash: Dk/3Vvh7/c0Dg6EggN4L0LLNQkacjlVZcoivFwpQOUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6B3D, serialNumber=7B15015DDB9F84412A67DB3E26FECB4DDCBBD980
Validity
Not Before: Sep 22 21:09:51 2026 GMT
Not After : Sep 29 21:09:51 2026 GMT
Subject: CN=6ab2ee9f-3a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bc:56:0e:a5:f4:a3:1b:05:27:28:56:19:3a:
e3:49:87:0f:4d:fc:c7:8b:ef:6e:ba:00:64:1f:ad:
89:36:9d:fd:c1:44:6e:57:00:04:67:3a:b1:d9:4c:
4d:71:27:90:de:26:6a:fe:37:9d:66:65:a7:1e:f6:
a3:5f:18:27:e1:6d:d4:a9:be:7f:0e:d9:78:45:3f:
29:9b:34:d0:4f:96:cb:ed:3f:4a:81:77:2f:3d:09:
c8:da:50:67:35:0f:c1:55:a3:e5:c3:59:54:86:53:
7b:d0:a8:0d:36:64:e0:8d:e9:a6:b0:db:68:de:60:
f0:c2:7f:25:26:27:13:66:a1:4e:bd:f8:04:09:d4:
54:37:ff:3e:85:3f:10:5b:2d:f3:ee:fc:04:70:44:
61:96:32:62:1f:50:e6:3b:5c:8e:ec:a7:d7:63:dd:
96:b7:cc:b9:a1:0c:ae:4e:2b:35:6b:3a:f7:a1:a4:
42:b9:05:16:89:29:c1:e5:77:4f:09:6c:cf:fe:cd:
6d:54:bc:61:df:94:d4:7b:c9:62:9a:5e:49:e5:58:
3d:8d:32:b7:25:a8:08:74:3e:6d:2c:5e:0f:19:62:
ed:39:bd:71:4d:c2:fb:9c:d3:bf:72:ed:58:0f:d1:
02:d7:93:8b:60:d6:76:f4:2b:e5:b2:cf:4a:7b:0d:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2E:F6:A7:28:6E:BC:E9:3E:30:EC:66:25:92:19:6E:32:D8:93:17
X509v3 Authority Key Identifier:
keyid:7B:15:01:5D:DB:9F:84:41:2A:67:DB:3E:26:FE:CB:4D:DC:BB:D9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exUBXdufhEEqZ9s-Jv7LTdy72YA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6B3D/0E978E64596211EBA40B5C85C4F9AE02/exUBXdufhEEqZ9s-Jv7LTdy72YA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:82:4e:3a:bb:8d:51:c8:eb:f5:33:49:e7:57:ad:9c:3f:4f:
48:78:f5:fc:2f:2d:ef:a2:af:3e:ac:cc:ec:e9:72:51:36:4f:
ad:10:2f:11:eb:d2:17:f2:c6:3c:fc:41:15:92:31:eb:b4:cb:
12:3c:55:3d:69:d9:02:ee:46:51:9c:9c:0f:94:a1:b7:1d:58:
00:6f:cb:70:9b:3c:ce:d4:a8:79:b7:fe:fe:6a:2c:f5:b9:14:
8c:c9:0b:10:0e:91:1a:c0:e7:1d:c3:5f:fb:d7:e2:f0:3f:fd:
27:8e:61:ba:6c:78:74:08:74:b3:ea:37:8a:5d:47:fc:f8:ba:
1f:40:58:9e:bc:e5:d0:f4:91:3b:6f:d8:9e:9a:38:a6:a8:b2:
62:91:90:78:b7:cb:b2:c3:41:7e:ce:f1:08:e5:2b:19:a7:d5:
03:ef:03:24:cd:c4:62:f4:58:47:49:f6:5d:41:62:a4:7f:48:
f4:28:9a:74:b6:49:bc:7b:3e:fc:52:0a:7a:7f:97:5c:0a:2a:
fe:43:9d:81:a8:77:e5:64:6e:3c:49:0f:0c:9c:2f:5a:86:4e:
cb:9f:ba:bb:30:70:da:f8:41:de:30:17:eb:4e:09:6c:97:64:
d7:f9:8d:77:ee:5b:9f:da:91:45:ab:7c:5a:8e:d1:44:f2:fc:
81:e5:86:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:17:52 2026 by rpki-client