
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json)
Hash identifier: 0ApWfkSbGi54eOp9Jsx2ci0p7s0zNmEBahG9HtXVREw=
Subject key identifier: C2:EF:F8:C1:9E:CC:28:72:F3:EE:84:2C:60:70:9D:1B:29:E4:8F:8B
Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Certificate serial: 106C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
Manifest number: 1058
Signing time: Wed 14 Oct 2026 17:29:34 +0000
Manifest this update: Wed 14 Oct 2026 17:29:33 +0000
Manifest next update: Wed 21 Oct 2026 17:29:33 +0000
Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: 3YZT3PMKcbPYBdBh8oNllr3hlEM6HLQVStpu9hsxJ+k=)
2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: bVRUHoyN7g0/Ud6S1Lfm+QQ0GqpNveNCn0i1VnMWX7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 17:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4204 (0x106c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Validity
Not Before: Oct 14 17:29:33 2026 GMT
Not After : Oct 21 17:29:33 2026 GMT
Subject: CN=6acfbbfe-8c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:1b:f9:d0:44:8f:45:71:ad:17:bb:a3:b6:
b5:13:c1:1d:f1:bd:a7:ab:79:b1:a7:4d:53:6c:dd:
56:f4:df:84:5a:e3:37:6a:1d:38:ed:fc:3a:5c:bc:
fd:81:a1:c5:50:be:9e:14:44:c0:46:23:0e:6e:f0:
2e:c4:33:81:87:53:bc:47:a7:68:78:6c:fd:0e:5d:
0b:3c:a9:3b:e9:c8:5b:8d:f8:fc:5f:7d:66:cf:22:
f6:18:af:43:cf:b9:fc:4d:f6:87:c2:ee:e9:6a:86:
28:e1:81:35:02:06:e5:74:7a:ac:d6:3e:97:50:3a:
69:45:f2:dd:d3:8f:9f:64:6e:7e:e8:c6:29:47:54:
4f:a3:1e:a3:03:90:93:e9:b9:d7:fd:62:d3:61:ca:
f7:01:0d:fb:45:0a:9f:2e:a6:ed:40:c9:8c:0b:61:
af:f6:89:3a:56:4a:d6:3c:d2:81:9e:67:3b:42:ab:
a9:25:38:03:6d:ec:70:2a:92:c1:ad:92:d0:75:30:
19:02:6e:c4:53:3c:f8:57:8a:10:89:f5:6d:8b:0e:
f6:e9:c4:70:de:a7:26:dd:64:e5:6f:17:d0:30:0a:
0e:b4:a3:82:3b:a6:1b:be:a8:bd:61:44:0b:c7:2c:
0c:1e:54:d7:a5:66:97:e9:49:1f:6e:42:b7:e7:19:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:F8:C1:9E:CC:28:72:F3:EE:84:2C:60:70:9D:1B:29:E4:8F:8B
X509v3 Authority Key Identifier:
keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:9c:2d:05:7f:8c:63:20:61:31:49:d4:02:c6:05:03:e4:90:
e8:45:f5:b7:17:93:f1:25:b3:80:d4:67:e3:5d:e3:e4:1e:fb:
b5:12:c2:53:55:b8:f7:65:ab:9d:da:2d:3c:7f:90:e1:0f:0c:
b1:f6:ea:2c:73:18:7a:2a:cc:12:9d:e6:4d:84:5c:bb:76:8e:
e4:71:d2:52:30:aa:b7:55:9a:62:aa:c0:ea:02:1c:81:ff:08:
3c:c8:10:47:84:a5:66:82:aa:92:73:d9:6f:5f:30:e5:53:4a:
b5:5f:86:e1:66:de:e5:99:e5:a8:32:dc:e0:e3:1b:0e:16:b7:
9f:92:80:cf:26:1e:39:f8:2a:c2:d3:40:97:a2:4e:d7:a6:3a:
3f:33:eb:93:bb:8c:43:b3:81:21:5c:5e:61:fe:c5:fb:69:ef:
c1:45:44:26:b5:72:77:c3:b4:6a:c2:68:47:a8:35:22:38:65:
e3:d9:cb:a7:99:53:98:b2:09:74:90:e5:9a:9e:0f:5d:04:e9:
6d:80:b6:a8:c8:d0:7b:a1:54:ce:8c:dc:c5:41:59:86:03:e2:
9b:af:d0:84:19:3e:56:88:25:97:2b:4a:f2:ab:47:94:92:d1:
02:d6:ab:49:89:d2:22:02:3e:83:9f:17:09:ea:c0:ee:ce:3a:
66:81:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:07:18 2026 by rpki-client