
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
File: -7tvOPZwPQLXJu3kYjmzvtih8eQ.mft (raw, json)
Hash identifier: aFZPzkocP96sLP+O+1ObNKTuHavPP943lS8WpcS+DQg=
Subject key identifier: A5:4F:04:E9:8B:31:73:58:18:2C:E3:9B:C0:0C:AF:06:5D:8B:72:42
Authority key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
Certificate issuer: /CN=A9141B4C/serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
Manifest number: 81
Signing time: Sun 11 Oct 2026 08:21:46 +0000
Manifest this update: Sun 11 Oct 2026 08:21:46 +0000
Manifest next update: Sun 18 Oct 2026 08:21:46 +0000
Files and hashes: 1: -7tvOPZwPQLXJu3kYjmzvtih8eQ.crl (hash: r4PipdMLOraBlF0y08KmBMIScqSbK2lowsWAKnn0EmE=)
2: A8CF90D807E711F1BD5B02F0213D8C67.roa (hash: hV/y2S97hrz2Q67W/IE/R1j506bwev+zG5Z7LB9xvfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl
rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4
Validity
Not Before: Oct 11 08:21:46 2026 GMT
Not After : Oct 18 08:21:46 2026 GMT
Subject: CN=6acb471a-c1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:1f:2f:06:52:38:8a:74:5d:e8:14:e8:f9:
57:0f:36:55:11:1d:0f:dc:bf:22:b3:3b:14:c3:d2:
8e:99:d0:0d:8a:8c:a0:41:a4:3b:25:d7:11:58:cc:
8c:4b:ac:c1:bb:d5:80:90:1f:fc:64:46:b7:2c:9d:
4a:1d:1b:d6:bb:41:45:c2:01:ff:fe:be:77:d3:66:
42:d6:58:3f:05:6a:f1:8e:72:12:4e:94:69:e2:2f:
0f:0c:56:e0:15:62:9d:67:4d:d3:11:5e:61:ff:85:
64:66:0f:41:a7:9e:78:7e:fd:5c:fc:d6:f5:9d:4b:
97:f1:d1:5b:68:ba:29:3b:21:b6:e4:b7:c1:9b:9f:
09:71:3b:c3:1b:86:ee:fa:c2:b9:10:0e:0c:c0:1b:
ed:76:63:0e:2a:fa:1e:8c:b8:e5:a7:a5:ad:00:7a:
0f:88:f7:56:d0:85:85:ee:96:1c:79:63:32:f9:96:
4e:c3:ba:51:d5:9b:80:22:5e:6b:b1:14:f2:e6:6e:
ed:89:e9:75:5c:ac:56:fa:2c:7c:2a:e0:0e:c2:9d:
17:22:15:95:ff:78:8d:07:fb:39:9a:a1:3c:75:a2:
c3:eb:a6:2f:f1:88:2e:bc:81:2b:4c:79:5a:df:73:
13:30:0e:10:9a:9f:00:41:8b:b6:8f:04:5c:76:f7:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4F:04:E9:8B:31:73:58:18:2C:E3:9B:C0:0C:AF:06:5D:8B:72:42
X509v3 Authority Key Identifier:
keyid:FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:71:05:5a:28:dd:d9:80:08:d8:1c:d9:6d:2b:47:66:84:02:
09:1c:13:84:52:b3:c8:fc:cc:c4:77:97:93:c3:61:5d:55:09:
17:7d:0f:07:2c:08:af:46:01:33:b8:fb:f6:ce:cd:8b:64:6f:
7f:10:6b:48:fa:67:85:0e:08:cd:76:04:22:2d:8c:cc:d4:ef:
56:fd:4c:05:73:99:f1:9c:5f:9d:82:1f:7e:05:91:79:2d:6b:
ca:95:b2:c2:be:80:76:ec:38:af:fe:47:e2:64:7f:2c:f4:0c:
04:db:64:b2:89:96:40:17:79:a1:e7:db:fb:d8:08:7a:55:a7:
c7:37:5e:45:7b:f3:d2:54:4d:f2:86:72:0b:fe:2b:20:ea:f1:
c3:14:bd:1c:0c:e7:a1:fb:08:43:d2:d5:7a:8d:52:03:e1:23:
3c:83:a1:a1:fc:57:60:86:a8:2c:5d:3b:7e:46:14:5b:cd:0a:
4e:2c:b6:a9:ab:91:17:3a:6a:84:53:07:cb:78:c8:c2:81:5d:
da:4d:52:44:a8:a9:bb:87:2a:f6:c6:b0:be:89:df:45:dc:b3:
b5:c5:ac:67:d0:36:fc:6a:ee:25:60:31:2e:2b:d1:d3:59:bd:
6d:6d:b5:a8:f9:e3:0d:3a:56:c3:50:ae:dd:7e:25:55:c9:41:
a4:03:2d:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFCNEMxMTAvBgNVBAUTKEZCQkI2RjM4RjY3MDNEMDJENzI2RURFNDYyMzlCM0JF
RDhBMUYxRTQwHhcNMjYxMDExMDgyMTQ2WhcNMjYxMDE4MDgyMTQ2WjAYMRYwFAYD
VQQDEw02YWNiNDcxYS1jMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslQfLwZSOIp0XegU6PlXDzZVER0P3L8iszsUw9KOmdANioygQaQ7JdcRWMyM
S6zBu9WAkB/8ZEa3LJ1KHRvWu0FFwgH//r5302ZC1lg/BWrxjnISTpRp4i8PDFbg
FWKdZ03TEV5h/4VkZg9Bp554fv1c/Nb1nUuX8dFbaLopOyG25LfBm58JcTvDG4bu
+sK5EA4MwBvtdmMOKvoejLjlp6WtAHoPiPdW0IWF7pYceWMy+ZZOw7pR1ZuAIl5r
sRTy5m7tiel1XKxW+ix8KuAOwp0XIhWV/3iNB/s5mqE8daLD66Yv8YguvIErTHla
33MTMA4Qmp8AQYu2jwRcdvdRSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVPBOmL
MXNYGCzjm8AMrwZdi3JCMB8GA1UdIwQYMBaAFPu7bzj2cD0C1ybt5GI5s77YofHk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUI0Qy9BMEI1NzlCMjA3
RTIxMUYxOEM1NjI1NjkyMTNEOEM2Ny8tN3R2T1Bad1BRTFhKdTNrWWptenZ0aWg4
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy03dHZPUFp3UFFMWEp1M2tZam16dnRpaDhlUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MUI0Qy9BMEI1NzlCMjA3RTIxMUYxOEM1NjI1NjkyMTNEOEM2Ny8tN3R2T1Bad1BR
TFhKdTNrWWptenZ0aWg4ZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc3EFWijd2YAI2BzZbStHZoQCCRwThFKzyPzMxHeXk8NhXVUJF30PBywIr0YB
M7j79s7Ni2RvfxBrSPpnhQ4IzXYEIi2MzNTvVv1MBXOZ8ZxfnYIffgWReS1rypWy
wr6Aduw4r/5H4mR/LPQMBNtksomWQBd5oefb+9gIelWnxzdeRXvz0lRN8oZyC/4r
IOrxwxS9HAznofsIQ9LVeo1SA+EjPIOhofxXYIaoLF07fkYUW80KTiy2qauRFzpq
hFMHy3jIwoFd2k1SRKipu4cq9sawvonfRdyztcWsZ9A2/GruJWAxLivR01m9bW21
qPnjDTpWw1Cu3X4lVclBpAMtkA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:54:49 2026 by rpki-client