
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
File: 7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json)
Hash identifier: dS/UbDHvPjFx07dCMQ1Qg+qJHa8FS25BAO8rBdeOtx0=
Subject key identifier: 7D:99:98:F6:98:E3:21:69:70:01:7A:24:1E:43:F4:DC:64:53:C8:B6
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Certificate issuer: /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial: 08B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
Manifest number: 08AF
Signing time: Fri 06 Nov 2026 20:43:30 +0000
Manifest this update: Fri 06 Nov 2026 20:43:29 +0000
Manifest next update: Fri 13 Nov 2026 20:43:29 +0000
Files and hashes: 1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: QQNISaDAZ8c3JDqmWotViG3VGJx9k/xhpkfaxKI0BKI=)
2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: 2EY7R7tVDdd7hDu3kyFJDxK/DA0IkkvmNGWO1GOsC/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Nov 2026 20:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232 (0x8b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Validity
Not Before: Nov 6 20:43:29 2026 GMT
Not After : Nov 13 20:43:29 2026 GMT
Subject: CN=6aee3bf2-9ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:a4:c8:f2:17:0c:ad:76:20:e7:ed:65:9f:
87:5b:f3:64:1a:d4:24:0b:1c:a4:67:95:c4:fb:48:
4f:e5:1b:09:56:3a:06:d6:b8:b9:63:3d:a6:00:08:
b6:01:04:e3:1d:0e:76:91:3c:0c:b5:a8:e6:5e:71:
41:1a:e9:e9:76:f4:8b:d9:b9:2a:ac:f4:b9:fe:c3:
72:1a:7d:57:60:e6:d7:10:29:fc:1f:4d:67:69:2e:
78:20:c3:4f:42:e5:36:7e:99:5d:33:45:1b:9f:ee:
93:2d:9d:ad:a7:85:c8:85:2d:a7:e5:75:86:25:11:
9c:c1:0a:b6:a2:5d:9f:ac:88:44:cd:35:2f:74:aa:
34:7d:18:5b:85:f9:99:03:bb:13:d3:0a:f8:15:bb:
5e:33:23:24:f3:10:59:3d:16:20:f5:76:da:6c:19:
69:4d:e8:aa:ee:fc:c9:59:e7:2f:69:82:12:15:e5:
e8:58:db:b0:2a:7d:bd:f5:cc:53:40:0e:3f:93:4b:
84:cc:dc:2a:77:71:94:6e:5d:25:e1:e4:5d:56:83:
ee:7e:fe:3a:a0:aa:88:5a:c1:43:23:ff:a7:19:8e:
ac:50:d2:b5:b1:2a:0e:91:0e:99:14:13:a3:df:21:
43:36:8f:d5:f9:81:7e:05:f2:be:3e:65:17:c0:85:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:99:98:F6:98:E3:21:69:70:01:7A:24:1E:43:F4:DC:64:53:C8:B6
X509v3 Authority Key Identifier:
keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3e:f3:2b:d6:69:03:3f:8f:67:ed:b4:fe:d4:d1:a8:42:00:
d5:78:30:da:c0:b5:0e:6c:e1:29:ed:fd:92:28:82:e9:8c:11:
79:f1:d9:91:b1:30:24:67:1e:3b:d1:48:2c:e9:d5:53:54:cf:
1d:54:3c:1d:60:a8:07:14:31:40:6c:fb:bb:d1:6f:f8:b2:06:
89:d4:3e:64:29:24:fb:4d:bd:84:fe:e2:11:4b:b6:f0:f3:a8:
c3:16:10:75:13:c7:84:48:37:d1:c5:92:07:2d:e5:56:fd:24:
6d:f3:ce:aa:e8:fa:71:cc:c4:61:6a:93:8e:05:ee:e9:29:64:
6d:ab:be:ce:ba:df:b6:d9:2b:1a:33:4c:57:5b:15:1d:4d:f6:
bf:66:9c:61:96:6a:f9:26:67:1b:52:74:ab:4e:de:f4:bc:da:
9c:e9:13:f2:f3:63:b3:62:0b:8f:02:66:d7:29:c6:ed:90:4c:
26:86:64:8f:30:80:a4:81:12:18:7c:ec:16:97:68:83:99:f2:
71:63:19:a2:f2:f5:9d:3f:4c:c0:d8:9a:86:78:f3:fd:b7:a7:
41:ed:80:e2:79:eb:b9:42:4e:22:5c:6b:f5:b0:f0:9a:19:11:
b0:b1:ad:96:04:22:9b:2e:68:53:83:24:54:d7:0d:12:d6:84:
42:40:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 08:06:24 2026 by rpki-client