
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
File: P7ClbiDxlMd0mHnU0iWz-X6evs8.mft (raw, json)
Hash identifier: xi1HKSUqJXGgoGfnJrWetkOiJwm9CQzkwfhqSzoJ6bI=
Subject key identifier: D8:04:EC:F8:7B:EE:01:E0:2B:66:E0:AC:EE:DB:D4:D0:D3:F2:40:DA
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 08BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
Manifest number: 087E
Signing time: Fri 02 Oct 2026 21:24:39 +0000
Manifest this update: Fri 02 Oct 2026 21:24:38 +0000
Manifest next update: Fri 09 Oct 2026 21:24:38 +0000
Files and hashes: 1: P7ClbiDxlMd0mHnU0iWz-X6evs8.crl (hash: p4Z0LhaENWFj95er8R2DZjwTAS3y2zkJsCEyf810B5o=)
2: 4792C69CCB5011F08BC97C80C4F9AE02.roa (hash: koyQjeZeanH/WxX+hG3btxn3WoeYvMUcBqScjdbVX8I=)
3: 60E63A78BBD911F18A390A8F6711F970.roa (hash: G5vAyU6ZeR/rUDK7jMMYdYkLsr667aNDVhldYWxVC6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Oct 2 21:24:38 2026 GMT
Not After : Oct 9 21:24:38 2026 GMT
Subject: CN=6ac02116-5900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e3:52:45:72:16:e7:03:75:06:3b:b3:0c:79:
1a:1f:40:51:e2:46:14:ad:88:f2:b6:eb:2d:99:e4:
6e:09:c4:db:05:bc:86:37:56:cc:5f:c1:e6:da:a0:
31:26:b7:c3:cd:71:b0:a8:24:14:f7:4f:20:dd:40:
f8:02:75:64:79:5d:3c:b8:50:95:46:92:25:b9:a1:
4c:7c:c5:56:32:cb:b0:80:27:ed:e6:91:af:ec:4c:
f7:72:1d:ba:93:6d:20:8a:14:33:72:2d:a6:ac:2c:
af:c7:82:ed:e6:94:c8:69:8f:e2:3b:98:6f:19:e5:
cc:c3:10:86:c5:f6:c3:76:cb:62:bc:58:a4:88:ce:
4f:74:10:e2:92:3b:b2:cc:3f:2e:45:b7:b7:61:01:
86:3c:54:b9:59:0f:0d:0b:5e:32:0b:58:49:70:be:
02:52:02:6c:ce:df:81:5b:9c:5f:fe:a8:34:34:34:
5f:c7:99:03:25:06:c9:39:62:df:c5:c2:36:5e:55:
0c:dc:c9:3a:af:08:af:55:b9:ea:a1:d5:59:67:f7:
fb:f6:e8:52:6f:d8:01:83:42:b5:a6:8d:6e:48:4e:
f7:9e:f1:09:7a:de:08:c4:50:41:d7:a0:78:01:30:
8d:03:15:08:a9:05:9f:69:eb:45:28:ad:95:06:ad:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:04:EC:F8:7B:EE:01:E0:2B:66:E0:AC:EE:DB:D4:D0:D3:F2:40:DA
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:e9:c3:aa:7f:95:db:df:10:56:30:a0:2f:1f:f3:f7:09:3c:
48:ad:84:ea:19:4e:b9:ad:41:f8:ad:fc:51:75:c8:ff:da:b1:
33:6a:97:8d:19:e8:8a:84:bf:77:5f:b7:82:82:f2:fc:3c:f9:
02:24:34:c3:cb:83:a4:64:5a:59:ff:2c:ae:4d:00:92:69:c0:
20:9e:7e:2d:b7:b2:03:57:4c:6e:75:68:e7:94:38:8b:15:1d:
ce:20:0b:ce:16:cc:c1:83:ef:3c:c7:0b:1e:19:a9:24:cf:78:
16:b4:b3:01:20:4d:01:3a:53:fb:de:34:c8:b9:8d:ff:0f:06:
36:ed:51:95:7c:c6:f9:d8:96:f1:ea:00:db:b3:12:1c:b3:8e:
56:32:c4:5b:4b:42:35:4c:bc:88:14:e2:01:05:e2:9b:d1:12:
42:6b:8d:c1:35:47:61:53:ca:ee:11:cf:db:fc:b8:10:b2:9c:
71:cc:e5:3a:c4:a3:c0:53:fe:db:29:fc:33:f7:52:79:4d:04:
c1:f5:77:67:35:51:2a:70:87:53:a0:80:59:b9:d5:17:dd:ac:
33:9b:29:d1:4a:ab:53:64:71:b4:2e:0e:c8:f0:47:e4:69:a8:
9d:8b:dd:0e:0a:93:ea:2d:f9:f6:0e:1b:93:1f:8f:12:7a:87:
08:5e:63:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:10:25 2026 by rpki-client