
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
File: r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json)
Hash identifier: wt1MSo/XXyyS7rnfcbdILERv7xuFCw/oMsRSDz4BXcw=
Subject key identifier: 22:BB:B5:4A:63:85:1D:25:8F:91:B3:95:CA:C0:64:AB:C9:D8:80:B0
Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
Manifest number: 01E9
Signing time: Mon 21 Sep 2026 03:28:16 +0000
Manifest this update: Mon 21 Sep 2026 03:28:15 +0000
Manifest next update: Mon 28 Sep 2026 03:28:15 +0000
Files and hashes: 1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: OOEpOn0I9wD2dk1kF3suj4qdiFrLGX5mnjn8nBRbUvU=)
2: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: YLQu+XBkP0u4scPVL2HjSFkhwvlDsdMdNxwXV2B40qg=)
3: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: SJ1zAtwuUDoklbt6R8JhcX6A+HkMTpxPrsLu4rdoP7E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE
Validity
Not Before: Sep 21 03:28:15 2026 GMT
Not After : Sep 28 03:28:15 2026 GMT
Subject: CN=6ab0a450-3a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:1b:01:db:b5:eb:59:53:5f:93:33:6a:fa:
b7:b5:93:07:a2:53:2d:01:74:95:2a:fc:2c:49:0f:
77:d6:7f:08:0f:3e:98:85:44:2e:b5:70:c5:31:c4:
6c:f9:0a:5f:a8:3f:39:9b:6d:0f:94:17:03:66:6c:
c6:d1:3d:1d:61:9d:20:11:49:fe:49:c5:7f:43:58:
a0:fb:15:b5:b5:ac:e5:33:1d:a6:14:06:cc:83:24:
68:10:2b:65:3a:00:4f:01:01:d1:6d:d6:37:8f:29:
df:af:36:38:40:40:84:be:f6:0e:76:6a:d6:b8:36:
68:4d:41:14:19:a6:8d:44:cd:f0:cd:ef:9d:17:7a:
28:e2:f8:e6:9f:0a:e6:a5:3f:72:99:e9:d6:7c:ec:
63:ab:42:87:63:3b:2c:8a:2a:31:18:1f:05:1c:f6:
13:2d:93:86:1c:f3:69:95:e6:3e:ee:cc:85:16:18:
0d:a5:00:92:87:9e:59:bd:49:ba:e4:4d:10:9e:92:
a1:f6:44:47:cb:cd:db:18:f9:60:95:c0:7d:ed:da:
c6:fa:c7:84:03:eb:4a:60:5c:10:74:3b:1d:8d:e4:
90:9d:b7:e7:42:e5:58:a1:6e:4a:e5:01:12:6e:bc:
da:b0:8d:87:22:3d:b7:84:36:50:53:62:67:53:1c:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BB:B5:4A:63:85:1D:25:8F:91:B3:95:CA:C0:64:AB:C9:D8:80:B0
X509v3 Authority Key Identifier:
keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:0b:4e:37:24:f5:ef:55:77:8b:c2:44:72:97:0f:31:40:8b:
c6:a7:76:8d:81:9b:38:8b:bd:9b:ef:e2:b8:4a:eb:6a:88:e1:
c7:91:d5:14:6f:92:ac:60:6d:7f:12:4f:f9:3a:91:b5:65:b6:
3e:f0:8a:00:d3:9d:9f:7d:10:ec:81:41:f0:da:35:d4:f0:f5:
ff:46:5d:be:78:3c:f1:1e:48:cd:19:e5:ea:35:c6:3f:48:d6:
6e:b7:d3:34:5d:2d:29:c4:68:59:00:33:d1:87:b1:48:26:e9:
2d:82:43:ba:44:09:a7:31:68:e5:63:5e:83:e2:92:69:0b:b6:
d5:a1:20:71:d8:42:84:aa:37:e4:ac:e3:41:be:72:1c:08:ca:
50:9c:16:0c:f7:5f:6f:4d:a0:3d:bf:04:45:fa:8b:1d:e9:20:
26:18:c2:52:5f:28:4f:25:42:45:40:2c:b5:b4:2e:01:22:fd:
c8:4d:8b:0b:54:d4:50:62:58:5a:34:50:20:2c:d4:96:25:92:
c4:18:2e:59:f4:e0:09:26:1a:52:24:c4:b6:8a:76:6c:6e:c2:
42:de:9c:ed:15:1a:d0:7a:51:ac:29:b1:c9:c4:17:fd:f7:10:
5f:fa:37:bc:b2:a3:45:6e:b2:d7:f4:11:da:81:c9:7a:18:b4:
2a:cb:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:33 2026 by rpki-client