
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
File: I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json)
Hash identifier: xjeOSngTlvTb4qYuj3xWuX0yJRScMCLRRQeHDb17H6E=
Subject key identifier: D9:6B:EB:B7:5A:74:67:4E:4B:3D:64:84:D9:F9:70:8B:06:69:48:66
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial: 07AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
Manifest number: 079E
Signing time: Sat 26 Sep 2026 21:36:36 +0000
Manifest this update: Sat 26 Sep 2026 21:36:36 +0000
Manifest next update: Sat 03 Oct 2026 21:36:36 +0000
Files and hashes: 1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: oG8oKgEZFDAEfLWe7ZtvVeSKMf/OMYf1yEexdV8hq7Y=)
2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: CuU/s3UKS9k04hjKJm9gWDdp3yaB5Ydqq+bcVnMC/ag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962 (0x7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Validity
Not Before: Sep 26 21:36:36 2026 GMT
Not After : Oct 3 21:36:36 2026 GMT
Subject: CN=6ab83ae4-de2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:63:11:18:1a:f5:34:42:3c:ad:4a:3b:b7:
02:32:1b:58:1c:c1:94:77:be:fd:88:30:f2:3d:c4:
7b:2c:dc:6f:4e:ae:ca:8f:3b:e9:18:75:96:f3:4a:
1a:e6:64:3d:44:33:e3:77:9e:51:1f:85:61:6d:43:
f5:fc:2f:b4:2a:c8:b4:2d:34:f0:ea:6e:90:66:01:
d8:88:3c:6b:18:9b:80:a0:01:69:6c:e4:f5:5f:02:
dd:b5:45:1b:06:af:fa:b4:4f:74:6e:89:55:95:f8:
cd:a0:9a:c9:b8:75:09:01:27:8b:76:44:89:2d:b4:
e5:3f:be:da:d2:d6:38:e7:c1:3b:4b:86:db:1d:c2:
47:42:49:12:5b:98:8d:63:10:af:be:d5:8f:04:ff:
79:39:2b:7a:6c:21:73:79:af:9f:55:ec:42:4e:3d:
d0:a1:d6:95:9d:b7:75:e2:5b:1a:bc:b9:31:65:a5:
ce:6b:f6:fd:64:3c:4a:7e:79:7e:ac:70:30:80:f2:
2c:97:66:d9:02:3e:4d:66:53:0e:89:ea:f7:69:61:
fa:e0:3f:3a:3d:91:8d:a8:fa:cd:c6:a2:4b:55:9f:
f0:3b:03:d4:46:66:99:23:63:f2:94:92:25:84:9f:
e5:b0:36:7a:32:ae:02:cd:d4:4e:bb:96:9c:a9:25:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6B:EB:B7:5A:74:67:4E:4B:3D:64:84:D9:F9:70:8B:06:69:48:66
X509v3 Authority Key Identifier:
keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a9:4f:d0:56:e9:0c:3f:58:79:48:ae:bd:b4:78:3e:90:69:
0d:4d:98:b5:fb:1a:42:4e:7e:da:0b:c0:ad:13:11:9f:df:59:
17:c7:42:66:95:80:32:41:38:b9:67:46:44:8b:61:eb:85:ee:
c1:03:fd:f1:ea:c6:0b:31:84:a7:3f:36:ce:bd:21:f4:ac:51:
fa:0c:20:33:ba:54:18:30:5b:67:5a:13:f1:ef:2a:d3:24:f5:
9c:da:2b:c4:68:27:28:26:05:7e:41:14:b2:6d:7a:1d:f1:87:
8a:9c:51:fa:1c:c3:75:1d:a2:6f:23:ff:0b:6c:80:81:85:89:
9e:0f:44:86:50:02:5e:3f:86:7e:75:85:b1:65:e8:9d:1e:55:
15:bb:5b:0d:e5:18:6e:21:e1:9d:05:40:e0:aa:3f:15:3e:dc:
60:aa:8b:e4:82:fd:b0:e0:31:aa:30:5e:5c:cf:cc:cf:c4:d2:
4d:d0:fc:e3:56:85:7c:a6:40:33:c0:8d:b8:be:65:79:42:82:
5d:e0:0e:f2:9f:8f:28:d1:d0:cc:2d:27:52:06:2a:51:d3:cc:
d8:56:0a:4b:7f:1c:e9:58:78:2a:10:9f:c6:53:51:41:2e:f4:
4b:4a:d5:c9:fc:fc:f8:11:45:3f:f5:f5:5c:8a:86:13:53:2e:
1b:9d:92:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVGM0MxMTAvBgNVBAUTKDIzQjMzQjkwMTZFMzExRUVBNkI3MjFDOEI5MzkzOUZC
MUE4NzBCRUMwHhcNMjYwOTI2MjEzNjM2WhcNMjYxMDAzMjEzNjM2WjAYMRYwFAYD
VQQDEw02YWI4M2FlNC1kZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2L5jERga9TRCPK1KO7cCMhtYHMGUd779iDDyPcR7LNxvTq7KjzvpGHWW80oa
5mQ9RDPjd55RH4VhbUP1/C+0Ksi0LTTw6m6QZgHYiDxrGJuAoAFpbOT1XwLdtUUb
Bq/6tE90bolVlfjNoJrJuHUJASeLdkSJLbTlP77a0tY458E7S4bbHcJHQkkSW5iN
YxCvvtWPBP95OSt6bCFzea+fVexCTj3QodaVnbd14lsavLkxZaXOa/b9ZDxKfnl+
rHAwgPIsl2bZAj5NZlMOier3aWH64D86PZGNqPrNxqJLVZ/wOwPURmaZI2PylJIl
hJ/lsDZ6Mq4CzdROu5acqSUVywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlr67da
dGdOSz1khNn5cIsGaUhmMB8GA1UdIwQYMBaAFCOzO5AW4xHuprchyLk5Ofsahwvs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYzQy80Nzg2ODM2QTZB
QzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVlNm10eUhJdVRrNS14cUhD
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k3TTdrQmJqRWU2bXR5SEl1VGs1LXhxSEMtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUYzQy80Nzg2ODM2QTZBQzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVl
Nm10eUhJdVRrNS14cUhDLXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiqlP0FbpDD9YeUiuvbR4PpBpDU2YtfsaQk5+2gvArRMRn99ZF8dCZpWAMkE4
uWdGRIth64XuwQP98erGCzGEpz82zr0h9KxR+gwgM7pUGDBbZ1oT8e8q0yT1nNor
xGgnKCYFfkEUsm16HfGHipxR+hzDdR2ibyP/C2yAgYWJng9EhlACXj+GfnWFsWXo
nR5VFbtbDeUYbiHhnQVA4Ko/FT7cYKqL5IL9sOAxqjBeXM/Mz8TSTdD841aFfKZA
M8CNuL5leUKCXeAO8p+PKNHQzC0nUgYqUdPM2FYKS38c6Vh4KhCfxlNRQS70S0rV
yfz8+BFFP/X1XIqGE1MuG52Skg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:24:12 2026 by rpki-client