
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
File: g7x91dFCfoM0DS32wztiPUPX7KQ.mft (raw, json)
Hash identifier: mhJaNZP6d+12L0sxYjju6KD2/UGzktBI+GdXhyl/vvM=
Subject key identifier: 10:74:4C:E5:A9:BD:0F:BF:8A:3E:26:B4:99:6C:AC:CF:B4:03:3E:8B
Authority key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
Certificate issuer: /CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
Certificate serial: 0FB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
Manifest number: 0FA1
Signing time: Mon 12 Oct 2026 17:35:22 +0000
Manifest this update: Mon 12 Oct 2026 17:35:22 +0000
Manifest next update: Mon 19 Oct 2026 17:35:22 +0000
Files and hashes: 1: g7x91dFCfoM0DS32wztiPUPX7KQ.crl (hash: OwROPhmwk7SfqZgQn2LCbOnwl4aR//9wvLAkr0wKU7E=)
2: 16C329A4713B11F0A2354E78C4F9AE02.roa (hash: IL/E/nWcOLdpvY6kRKEbHNWbHgxGSummYUXsi86XlXA=)
3: E1769D329EF711EABE23195AC4F9AE02.roa (hash: t/D8IYKB/rM46dZgcTuJ/X2CfX2Uf2X0FQN7ZHOdxv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl
rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4023 (0xfb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B468, serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
Validity
Not Before: Oct 12 17:35:22 2026 GMT
Not After : Oct 19 17:35:22 2026 GMT
Subject: CN=6acd1a5a-4b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:fe:94:bd:da:8e:b3:e4:0a:ac:e0:56:b9:
9b:fd:ab:95:13:94:c5:72:24:e1:71:c1:5d:b3:1d:
ee:f7:99:6a:d2:ee:68:13:a0:0f:82:a6:25:f2:e1:
b5:59:2c:7e:a2:11:20:a2:06:de:e2:84:bd:62:f7:
cd:8f:9f:2c:7e:94:53:5d:51:c4:4b:33:66:be:dc:
8e:66:1c:81:0d:1d:3a:cd:05:2e:92:fc:9b:aa:1c:
5a:43:c9:9c:c7:87:9b:93:7b:78:c7:cd:a5:ee:69:
36:7a:a9:36:9f:89:b0:66:76:7a:58:c0:df:e1:f6:
0e:e8:64:7f:bd:68:82:48:f2:85:c6:20:37:6e:ae:
9a:31:0f:8a:f3:7d:00:2e:1e:d5:4e:08:59:47:a7:
3c:0a:6a:13:63:da:d2:1e:d6:1c:c5:86:e3:fe:9c:
6d:54:aa:5b:cf:19:95:43:33:e7:65:2b:b1:e5:c7:
d2:9c:44:9d:f2:02:c9:64:4a:c5:8a:97:84:90:37:
2c:46:2e:16:47:ef:e4:4f:0b:3a:9d:3c:8c:e5:72:
27:23:b6:5a:66:6c:bc:fd:13:a8:1f:09:9c:44:79:
3c:5e:c7:75:f3:85:e7:b5:45:e2:37:8e:5b:55:07:
b2:05:f3:25:1e:2f:e4:f3:f3:26:46:f7:8a:75:de:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:4C:E5:A9:BD:0F:BF:8A:3E:26:B4:99:6C:AC:CF:B4:03:3E:8B
X509v3 Authority Key Identifier:
keyid:83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:c9:3b:50:1d:41:f0:85:3f:5c:72:08:8c:65:76:dc:39:59:
7f:5d:1d:9e:88:68:a5:4a:c7:6e:29:d1:1d:3f:09:9d:d8:9b:
ea:53:a1:a8:25:e1:d5:07:39:bb:bc:75:a5:de:62:13:75:56:
c5:2e:0f:8f:01:7e:63:a6:07:c8:70:48:e5:f1:92:c4:4a:6f:
10:35:df:64:3e:68:b1:fa:23:7b:7f:55:a3:94:9a:5a:40:ed:
6a:39:45:3e:1b:b3:0d:ea:7a:bc:1b:e5:e4:a1:4d:8d:b6:fc:
da:43:59:9a:d1:7b:9e:41:48:9e:64:93:84:a3:d6:b6:57:e3:
68:d7:91:be:d9:7f:0f:00:4d:28:59:d3:f8:28:47:6f:72:0e:
c8:ed:45:21:69:7a:7e:92:59:a9:f2:08:7d:cb:93:99:9f:27:
de:88:2f:21:2e:17:a3:fb:be:61:48:55:81:25:e7:31:ee:a2:
62:11:48:b5:00:80:58:5d:f5:a3:5b:dc:7d:8d:72:94:64:69:
9c:b4:9d:f5:a3:f2:5d:cc:0c:57:0f:b1:c4:40:b8:88:4c:da:
f0:a8:f8:fb:64:e9:a8:da:49:57:2e:b2:99:50:b3:53:db:fd:
84:64:c6:db:54:1a:b6:35:0f:84:c8:52:74:5f:08:67:66:bb:
5c:06:cb:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0NjgxMTAvBgNVBAUTKDgzQkM3REQ1RDE0MjdFODMzNDBEMkRGNkMzM0I2MjNE
NDNEN0VDQTQwHhcNMjYxMDEyMTczNTIyWhcNMjYxMDE5MTczNTIyWjAYMRYwFAYD
VQQDEw02YWNkMWE1YS00Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA35r+lL3ajrPkCqzgVrmb/auVE5TFciThccFdsx3u95lq0u5oE6APgqYl8uG1
WSx+ohEgogbe4oS9YvfNj58sfpRTXVHESzNmvtyOZhyBDR06zQUukvybqhxaQ8mc
x4ebk3t4x82l7mk2eqk2n4mwZnZ6WMDf4fYO6GR/vWiCSPKFxiA3bq6aMQ+K830A
Lh7VTghZR6c8CmoTY9rSHtYcxYbj/pxtVKpbzxmVQzPnZSux5cfSnESd8gLJZErF
ipeEkDcsRi4WR+/kTws6nTyM5XInI7ZaZmy8/ROoHwmcRHk8Xsd184XntUXiN45b
VQeyBfMlHi/k8/MmRveKdd6JwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBB0TOWp
vQ+/ij4mtJlsrM+0Az6LMB8GA1UdIwQYMBaAFIO8fdXRQn6DNA0t9sM7Yj1D1+yk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQ2OC84MTIyNjAyODkx
MUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2ZvTTBEUzMyd3p0aVBVUFg3
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c3eDkxZEZDZm9NMERTMzJ3enRpUFVQWDdLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjQ2OC84MTIyNjAyODkxMUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2Zv
TTBEUzMyd3p0aVBVUFg3S1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkck7UB1B8IU/XHIIjGV23DlZf10dnohopUrHbinRHT8Jndib6lOhqCXh1Qc5
u7x1pd5iE3VWxS4PjwF+Y6YHyHBI5fGSxEpvEDXfZD5osfoje39Vo5SaWkDtajlF
PhuzDep6vBvl5KFNjbb82kNZmtF7nkFInmSThKPWtlfjaNeRvtl/DwBNKFnT+ChH
b3IOyO1FIWl6fpJZqfIIfcuTmZ8n3ogvIS4Xo/u+YUhVgSXnMe6iYhFItQCAWF31
o1vcfY1ylGRpnLSd9aPyXcwMVw+xxEC4iEza8Kj4+2TpqNpJVy6ymVCzU9v9hGTG
21QatjUPhMhSdF8IZ2a7XAbLHA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:49:35 2026 by rpki-client