
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json)
Hash identifier: vipLBUG2df8vgxBqJW06vNJshsEsxLgI6aL1mxvWqhg=
Subject key identifier: 8F:CA:8F:07:50:D5:80:C1:64:71:C7:A9:82:F8:2A:8E:29:97:C9:D3
Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Certificate serial: 3583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
Manifest number: 3583
Signing time: Sun 20 Sep 2026 15:09:17 +0000
Manifest this update: Sun 20 Sep 2026 15:09:17 +0000
Manifest next update: Sun 27 Sep 2026 15:09:17 +0000
Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: T8SkoNn59zrkLBTPrwNp0PMQzzLYII7whMXY1badr/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13699 (0x3583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B
Validity
Not Before: Sep 20 15:09:17 2026 GMT
Not After : Sep 27 15:09:17 2026 GMT
Subject: CN=6aaff71d-8d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:3e:c8:b6:c1:87:84:4d:cc:0f:9f:74:06:
68:00:1f:59:ba:28:95:0f:22:43:75:4a:e1:c7:1e:
4e:cd:fb:72:59:3f:3b:b1:67:05:89:e9:34:69:5a:
42:2a:3b:ff:a8:97:9c:91:ff:1a:a1:19:50:43:45:
8b:16:ae:d0:29:e7:0b:d1:8f:7b:bd:30:39:90:17:
e8:2c:ee:28:a8:90:8c:5b:f5:be:84:b2:c6:ff:b7:
81:74:c2:20:40:5d:70:41:9b:ab:f3:6a:52:ce:e3:
1f:88:df:e3:c3:f1:26:30:74:76:fa:f2:f0:e4:fd:
1f:2c:f2:af:1d:46:63:9a:f3:85:71:13:59:6b:ce:
f1:e0:ba:fb:37:a3:70:ec:04:e0:5a:60:0d:3d:46:
49:fe:e1:9a:d0:1a:61:c5:28:00:bf:12:42:e8:0a:
75:ec:28:54:90:39:38:5b:ad:53:09:0a:0f:a6:9c:
56:4e:17:31:a9:31:c9:32:f9:5c:5f:84:97:0c:7d:
e5:c3:1b:24:88:44:72:49:4b:28:cb:8f:1f:84:b7:
7c:7e:0d:15:a0:ee:04:15:a3:e6:f9:8e:7c:3f:58:
3d:08:c0:20:72:0a:c9:27:68:4a:92:9d:c5:99:ff:
20:34:83:c4:de:b6:ac:cf:f7:a0:e0:7d:4c:91:84:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CA:8F:07:50:D5:80:C1:64:71:C7:A9:82:F8:2A:8E:29:97:C9:D3
X509v3 Authority Key Identifier:
keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fd:9a:3c:fe:c5:8b:dc:c3:c6:c8:55:95:73:ca:25:7d:9a:
01:c6:f2:11:e0:66:63:a1:48:da:71:a0:81:56:c0:af:ca:63:
00:bf:e6:4a:03:6c:93:c9:73:6e:31:04:b6:38:46:f8:23:af:
d6:18:e3:de:f4:0e:26:17:dd:aa:db:b9:2d:52:7e:24:3e:53:
05:eb:eb:05:42:b0:cd:51:9a:c2:ed:01:34:1d:19:9b:e7:bd:
68:cc:52:e1:63:b7:4b:7f:a8:49:d1:cd:80:6a:59:bc:a0:88:
36:f5:6d:5a:3c:ae:d9:72:3d:6b:57:0d:48:ca:a8:a0:e9:30:
45:c6:6a:ee:53:66:15:de:cf:8a:cd:19:08:5d:9d:7a:69:ae:
ba:d4:5d:4d:a9:10:57:1d:2a:57:10:87:f8:12:8f:d7:32:81:
db:76:9f:db:80:4c:84:12:41:b3:57:51:7e:b7:7a:f7:11:be:
42:76:27:8f:5f:df:95:bc:d2:6b:cb:91:10:3b:3a:e7:7b:d5:
20:c2:5e:e8:36:2e:21:97:41:2e:67:4b:4a:bb:53:9f:a5:e4:
12:65:03:b3:cd:a5:9c:93:07:88:6f:bf:c0:6e:1f:e3:70:ff:
41:5b:43:4f:df:ef:8a:36:aa:64:47:58:46:a8:8a:ab:fb:1b:
e3:3e:69:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:26:30 2026 by rpki-client