
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json)
Hash identifier: UBejlW4ZWWIIm9xD3/CSmMC3lZWyJaNXnWy61NeipGw=
Subject key identifier: C5:B0:B6:2C:80:49:4A:1F:26:5A:DC:C2:20:5B:FA:8E:4E:0F:01:CB
Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Certificate serial: 02D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
Manifest number: 02D0
Signing time: Thu 05 Nov 2026 01:56:55 +0000
Manifest this update: Thu 05 Nov 2026 01:56:55 +0000
Manifest next update: Thu 12 Nov 2026 01:56:55 +0000
Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: ANIZ/gYcSvLMzwL7yDUUMKOrJhkXsQ0jWNZ9WTZAUDg=)
2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: BSe/xrmnbVtCYEoOzBEdpUE2pH3SuWmeYFTTZjAJbc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl
rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 01:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668
Validity
Not Before: Nov 5 01:56:55 2026 GMT
Not After : Nov 12 01:56:55 2026 GMT
Subject: CN=6aebe267-4c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:da:8b:c7:f7:06:eb:63:8d:00:5f:35:f2:
03:a5:56:a0:4e:62:6e:98:c5:ad:b7:d7:85:6d:8c:
3b:d9:55:c9:0c:48:5f:70:fb:45:2d:48:f9:c0:bd:
ea:05:02:a5:e0:25:db:5e:25:43:28:d3:4a:11:32:
9e:bf:55:c5:86:84:ff:93:5f:db:64:2c:9a:f2:94:
63:c0:31:80:74:ad:53:05:95:f4:1b:a8:6b:dd:af:
6d:c3:52:19:05:c4:66:e0:a2:d5:6f:1b:95:e5:9a:
73:cd:f6:0c:f1:8d:45:c1:e6:80:c8:d3:4d:06:f5:
3e:bb:d7:6a:ae:41:ef:87:e2:67:e7:73:9c:15:8f:
3b:95:f5:f6:02:70:ce:37:79:c3:ef:e9:ef:b3:3d:
e5:38:2f:14:30:b9:12:c7:57:39:9d:30:8a:77:2a:
db:bb:e4:9a:2d:11:de:bf:64:0a:d8:a0:17:ad:0f:
48:1a:e8:cb:0c:90:02:33:5a:91:94:1c:ff:52:61:
f0:97:05:40:ea:2e:8e:73:a4:ad:06:dd:4e:d7:51:
0c:5c:a2:74:63:14:75:07:d7:1d:97:3b:54:13:e9:
b5:d2:a2:9a:53:ef:de:8a:ca:cf:72:d5:e5:4e:7f:
a1:c0:01:4f:a0:8e:ed:08:ef:96:97:19:d7:fe:1d:
8a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B0:B6:2C:80:49:4A:1F:26:5A:DC:C2:20:5B:FA:8E:4E:0F:01:CB
X509v3 Authority Key Identifier:
keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:34:c6:87:9e:55:20:a2:a9:9b:14:bc:fa:08:3a:98:e7:ae:
85:9c:47:46:e1:d8:56:38:d1:b9:32:27:46:34:e9:f6:2b:ab:
fb:37:ac:bc:e8:5c:b3:88:11:56:1f:7a:83:33:f6:c7:4e:2d:
9c:f4:73:7e:2e:0d:e5:90:ad:66:8d:5b:5f:98:bf:a2:e3:29:
57:1d:d3:75:40:eb:59:75:4f:9d:90:8b:4a:e4:e9:0c:5e:00:
82:e1:57:c3:83:37:eb:4f:d7:aa:de:ff:67:eb:f8:ba:ae:0f:
02:48:cf:4a:78:5a:cc:9d:5f:ae:df:2e:c7:15:0e:12:42:8f:
ed:fb:2a:54:7a:58:d0:3c:71:f8:75:d5:0c:16:37:d3:2b:c0:
f9:14:03:b4:f8:81:5a:88:b6:18:7d:10:1b:45:ad:84:0f:32:
b0:2e:88:1d:67:d1:6a:2d:fd:76:32:3a:30:94:ef:b8:25:cc:
ee:dc:ef:ec:80:80:2b:0d:d2:dc:22:a2:ca:5b:3a:a2:be:98:
74:55:1e:5a:dc:91:ab:57:45:91:26:4b:c8:da:e7:d8:a7:0f:
3e:bb:98:d7:40:be:ca:b8:28:42:f7:0a:fc:34:02:73:8a:d0:
f6:b9:40:b8:de:cc:06:f1:d6:09:33:65:06:12:a0:ad:69:ac:
b6:e0:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:31:32 2026 by rpki-client