
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
File: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft (raw, json)
Hash identifier: Hs6cvOULezaeLt7diPx4/FO3FVZhH/dXmWyAhBEqzcQ=
Subject key identifier: 78:4E:F0:28:1B:AE:80:6D:9B:C3:D6:E0:CF:AD:85:C2:89:B3:F3:B8
Authority key identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
Certificate issuer: /CN=A91652B5/serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
Manifest number: 9F
Signing time: Mon 21 Sep 2026 07:18:03 +0000
Manifest this update: Mon 21 Sep 2026 07:18:02 +0000
Manifest next update: Mon 28 Sep 2026 07:18:02 +0000
Files and hashes: 1: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl (hash: w4azJIsXI9JVwNmzvZSIKlg7riDTjVuXFuJ9AVxCyc0=)
2: 53D55B1CD1AF11F0AD05C10CC4F9AE02.roa (hash: m0+z5eRLT8pv0TnouBrk5fUb2HbYM2GEY2LCpA+SYWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652B5, serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Validity
Not Before: Sep 21 07:18:02 2026 GMT
Not After : Sep 28 07:18:02 2026 GMT
Subject: CN=6ab0da2a-3c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:61:ff:f1:53:a8:8e:1a:fc:80:2c:f7:2e:93:
9d:94:e5:d9:54:b4:fb:69:d8:ac:e6:32:f7:8d:cd:
e2:f9:6d:81:21:a0:9c:01:53:5f:39:34:5c:01:23:
3a:f5:29:c6:11:ec:46:f2:ab:ef:59:42:88:f5:c4:
32:65:d9:e6:07:56:c4:ad:3f:31:f3:8f:ae:5c:c9:
82:00:30:28:4c:3e:67:12:62:d5:99:4d:c3:98:59:
5a:c5:96:cc:58:7b:4b:fe:00:bf:49:ef:ba:4f:43:
59:6f:75:ba:79:8f:9e:dd:0d:a5:f3:a3:ab:7f:84:
f8:30:84:76:10:aa:a7:68:77:90:91:05:2c:1a:0c:
91:a7:fe:c7:5d:61:65:ae:d6:6c:46:41:6a:4b:7f:
f4:fd:8a:84:7f:ca:b4:8e:4d:52:08:95:7b:bc:f2:
ac:ff:3d:51:0b:58:03:d6:05:92:2e:75:29:af:d4:
bb:99:e9:d7:14:94:4c:22:45:56:67:81:70:15:92:
1d:a1:43:d6:59:cb:fb:5f:24:b2:04:da:b3:b5:51:
d7:14:ea:7b:2f:8a:62:45:6c:2e:49:df:37:96:f0:
d2:6c:c2:5f:7a:05:69:ad:64:ab:aa:f7:fb:27:0a:
32:c1:9c:6c:22:9c:61:f8:b6:86:0d:23:80:66:b2:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:F0:28:1B:AE:80:6D:9B:C3:D6:E0:CF:AD:85:C2:89:B3:F3:B8
X509v3 Authority Key Identifier:
keyid:ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:68:65:1e:08:ec:14:ff:8a:73:8e:b7:e2:a5:f6:bc:bf:0f:
4f:1d:35:dc:a7:33:8b:c9:23:76:51:d4:32:26:41:c4:10:f4:
83:f8:87:8c:71:23:eb:45:20:59:d6:a0:1d:9d:87:a4:d7:34:
e9:12:dc:f5:eb:54:f4:04:f2:e0:d3:f5:fd:e1:b5:34:1e:1d:
25:75:5d:5b:c6:72:d2:0c:b3:87:bd:98:e8:41:a9:a7:79:4b:
26:c9:15:b4:8c:22:7f:b1:9e:93:62:f2:ca:a3:38:42:74:a4:
53:fb:42:ae:cc:3b:9b:cd:6f:54:2e:6f:7b:75:dd:c8:6c:11:
71:2e:de:ce:71:97:df:1b:6a:82:5b:fb:36:8a:95:71:4b:62:
6c:41:49:62:9d:86:76:79:26:f6:9f:cb:91:9a:43:3c:1e:8e:
6e:f2:91:ad:76:73:01:7d:96:05:d9:63:d6:ec:5e:22:51:3d:
a8:e7:da:64:d3:a9:4c:d4:bc:fa:07:e2:4b:bc:3d:63:1f:8e:
ec:3b:ff:1e:2d:27:3b:c1:2f:5f:83:4b:90:20:ed:49:78:64:
21:b8:93:65:3d:45:95:81:48:f0:d3:7e:56:2c:46:82:65:29:
bf:18:99:b2:5d:98:fe:a7:1e:34:7b:9e:a9:b0:9b:64:33:a7:
db:52:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:16:17 2026 by rpki-client