
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json)
Hash identifier: 2tEEzCTyxRa+cl/AgSb0dStb3q6B6IStAV3uPEs0Vmk=
Subject key identifier: B2:B1:34:DC:7F:85:90:CB:6E:4D:13:82:2C:9A:CF:A1:DF:4E:20:C6
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial: 0947
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
Manifest number: 0930
Signing time: Sun 20 Sep 2026 20:08:53 +0000
Manifest this update: Sun 20 Sep 2026 20:08:52 +0000
Manifest next update: Sun 27 Sep 2026 20:08:52 +0000
Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: DWsDgT5i7IV9I14z1Ecv5RWLJuW7DoPOfu601PiA96g=)
2: 5EA3F4042E5C11F1A98E57D89B833773.roa (hash: N+uHaG3MJr82cfnEajXUFCCao7Ru1SBdTbuDh04l7Ng=)
3: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: S9P6S3zHGxSIuuK6o8a+ulaM7AA43gLPQGWTZ+ootLs=)
4: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: DCiubbftabSxu91ah+p7CZ1dSt4rSpuPeVIKNRHm1PY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375 (0x947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Validity
Not Before: Sep 20 20:08:52 2026 GMT
Not After : Sep 27 20:08:52 2026 GMT
Subject: CN=6ab03d55-330b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:f6:92:8c:46:91:49:aa:c7:ae:ae:01:b1:
44:f9:9e:28:c2:39:13:a3:d9:fb:4e:83:13:fb:b6:
25:42:f6:d9:38:5e:ef:01:cc:42:ae:05:85:2a:23:
7a:a0:0c:e5:70:f6:b6:1f:47:33:88:29:f1:4d:64:
a5:73:44:7b:d1:03:e7:da:2e:ca:72:5b:58:f0:fe:
fc:12:f2:47:83:f9:51:ba:d3:f5:c5:97:39:fc:9e:
d3:79:95:9e:40:12:c4:d0:76:e3:85:3a:59:5d:2c:
fc:21:af:87:3c:0f:b5:41:e8:c7:f8:cc:f0:e7:33:
7d:56:45:9f:42:e8:9b:e0:ec:4b:33:83:09:30:5a:
6e:64:67:d4:72:e4:15:60:e7:52:08:3f:40:f2:7e:
35:0f:77:af:ca:fc:dd:48:3e:9f:27:c6:b8:8b:f8:
4b:9d:52:e5:91:2a:d0:e7:84:f1:1c:b6:ef:be:35:
14:c4:33:1d:37:6d:d6:8d:e4:52:22:73:5c:a6:45:
50:1d:88:c9:aa:00:a4:02:ff:51:fe:a5:b2:d2:aa:
f9:f0:7f:f9:19:a4:90:cf:f6:b3:b3:82:ba:f6:f8:
d6:d0:50:6a:83:f5:07:46:e9:8a:e6:73:21:88:4f:
09:ae:d8:8e:3a:f1:97:a9:72:12:90:a0:08:07:a5:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B1:34:DC:7F:85:90:CB:6E:4D:13:82:2C:9A:CF:A1:DF:4E:20:C6
X509v3 Authority Key Identifier:
keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:79:c3:fe:81:bc:bc:81:71:af:85:6e:ef:bd:17:1c:a1:fa:
bf:79:4c:66:5f:7f:d8:8d:da:3c:84:f3:88:98:5a:76:8b:74:
41:2a:a4:65:62:7f:df:16:3c:5a:bc:91:c1:9e:3d:d1:39:ca:
1c:c7:e1:3f:af:8c:cb:40:c5:15:2d:05:9c:53:d7:9d:c6:2d:
8f:1c:4c:de:ed:0a:e7:e3:8a:45:1b:ff:1d:96:eb:3d:ee:75:
ae:0d:b5:d1:b3:88:f2:b4:d2:d3:bf:d4:56:56:4d:1e:b8:b5:
51:1f:e6:70:e8:14:8c:9f:6a:e4:4c:85:ca:ad:af:53:22:8e:
7a:84:83:3c:b6:13:6b:ce:0e:5c:01:7c:34:6a:00:cf:04:04:
01:ca:59:f7:72:05:74:1a:54:d3:78:9b:a0:d0:0c:df:28:ba:
12:94:8e:3f:01:93:f8:ae:7e:1b:40:d5:29:9e:27:59:58:ba:
93:73:e2:8a:95:23:3f:d1:e7:7b:fa:cd:07:c2:ed:17:12:73:
2a:7c:89:64:f2:3f:e4:61:cf:f8:66:88:a5:d0:42:8f:b5:c9:
4b:05:25:e8:b1:8f:83:88:a3:49:d7:bf:ef:ae:46:0e:24:04:
06:89:ba:65:10:76:2e:ed:53:3c:8f:b0:16:e6:ef:16:39:72:
cf:67:ca:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE
MDQ4RDA4MUQwHhcNMjYwOTIwMjAwODUyWhcNMjYwOTI3MjAwODUyWjAYMRYwFAYD
VQQDEw02YWIwM2Q1NS0zMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmA32koxGkUmqx66uAbFE+Z4owjkTo9n7ToMT+7YlQvbZOF7vAcxCrgWFKiN6
oAzlcPa2H0cziCnxTWSlc0R70QPn2i7KcltY8P78EvJHg/lRutP1xZc5/J7TeZWe
QBLE0HbjhTpZXSz8Ia+HPA+1QejH+Mzw5zN9VkWfQuib4OxLM4MJMFpuZGfUcuQV
YOdSCD9A8n41D3evyvzdSD6fJ8a4i/hLnVLlkSrQ54TxHLbvvjUUxDMdN23WjeRS
InNcpkVQHYjJqgCkAv9R/qWy0qr58H/5GaSQz/azs4K69vjW0FBqg/UHRumK5nMh
iE8JrtiOOvGXqXISkKAIB6WIzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKxNNx/
hZDLbk0Tgiyaz6HfTiDGMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx
Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D
QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS
M0VsVDJBTFJBdlhRU05DQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG3nD/oG8vIFxr4Vu770XHKH6v3lMZl9/2I3aPITziJhadot0QSqkZWJ/3xY8
WryRwZ490TnKHMfhP6+My0DFFS0FnFPXncYtjxxM3u0K5+OKRRv/HZbrPe51rg21
0bOI8rTS07/UVlZNHri1UR/mcOgUjJ9q5EyFyq2vUyKOeoSDPLYTa84OXAF8NGoA
zwQEAcpZ93IFdBpU03iboNAM3yi6EpSOPwGT+K5+G0DVKZ4nWVi6k3PiipUjP9Hn
e/rNB8LtFxJzKnyJZPI/5GHP+GaIpdBCj7XJSwUl6LGPg4ijSde/765GDiQEBom6
ZRB2Lu1TPI+wFubvFjlyz2fKMg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:32:43 2026 by rpki-client