
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
File: R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft (raw, json)
Hash identifier: z03WuTGD/gN/p2u+v8IhjBafjhm2tVk6cbogO/VOgwI=
Subject key identifier: B6:CB:36:A1:57:FA:CF:A4:8E:EB:C0:E0:EB:D2:2C:C7:37:C5:F6:AD
Authority key identifier: 47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
Certificate issuer: /CN=A91676C8/serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Certificate serial: 78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
Manifest number: 67
Signing time: Fri 09 Oct 2026 09:02:04 +0000
Manifest this update: Fri 09 Oct 2026 09:02:04 +0000
Manifest next update: Fri 16 Oct 2026 09:02:04 +0000
Files and hashes: 1: R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl (hash: k9ZJkm/HvsFHkqb+wQE7r2M2QgJwoxuvQj0gKuppet4=)
2: B21C4B5AB8C611F1848EF50A6F11F970.roa (hash: C/essk9fBhB6R4Ida7gjJOJzzVyFaPNRS+6uIpVxF5Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl
rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91676C8, serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Validity
Not Before: Oct 9 09:02:04 2026 GMT
Not After : Oct 16 09:02:04 2026 GMT
Subject: CN=6ac8ad8c-1e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:c9:51:3e:c7:3f:cf:69:57:c9:81:5d:c9:
4a:92:e8:0b:b4:19:07:f4:47:4d:c7:bd:f8:f7:d0:
d6:aa:e0:b4:c7:66:65:1f:d6:ed:05:3e:04:25:e3:
36:55:ce:c5:04:10:30:a3:7d:a2:1d:dd:a9:14:81:
4e:b1:92:8a:00:37:fc:d4:91:3c:a2:fb:77:0a:5f:
c4:f6:6f:52:16:a1:6f:5e:43:6c:9e:cc:15:45:01:
eb:9a:b7:12:c4:9a:11:90:8a:9d:a4:05:b6:ad:c6:
a9:65:7b:d8:9a:a3:ef:2d:74:03:8f:cb:a0:45:b7:
84:84:7a:ee:25:fc:70:15:11:4d:d1:5c:40:91:25:
4c:ee:24:bb:86:bb:11:1f:3a:cb:58:01:86:e3:81:
10:9d:38:43:d6:2b:5a:ed:95:60:5f:5d:07:b8:12:
11:9b:a0:56:7d:34:62:b2:9b:f1:32:27:bd:ea:48:
83:3a:1d:92:22:ae:e7:f9:9e:c3:f4:34:75:7e:75:
ef:fb:77:76:14:08:f2:d5:fa:9b:92:81:5b:0c:83:
4f:dc:24:f2:d0:95:39:39:fe:3e:bf:52:62:08:e0:
1e:99:69:59:ab:5a:b7:fd:10:e9:e6:c1:f2:ab:de:
43:6a:f7:d1:ee:b1:c7:5f:96:03:01:d8:41:a7:89:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:36:A1:57:FA:CF:A4:8E:EB:C0:E0:EB:D2:2C:C7:37:C5:F6:AD
X509v3 Authority Key Identifier:
keyid:47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:0b:fa:f2:01:e2:ae:d2:7f:ba:1b:1f:d6:39:6b:6c:ed:14:
49:c9:7d:5a:86:1c:08:19:bf:4c:90:72:11:b9:b4:fe:fd:5d:
63:90:af:c4:0d:e3:12:3e:bb:d1:6c:a1:86:fd:db:f6:fa:d9:
8d:d6:82:d8:d5:d9:64:5d:6c:17:64:cf:ae:4d:3e:71:de:8e:
59:74:50:76:71:3f:9e:ec:4d:67:18:e3:2d:d8:8c:4f:84:10:
29:bb:da:e8:68:76:8a:a4:99:06:0d:e5:fd:44:73:58:f6:da:
6b:fb:a1:49:99:46:44:56:fa:1c:fe:32:dc:38:d1:3e:51:ce:
7b:11:52:f2:9d:1e:32:c4:6a:f1:eb:de:71:d0:d3:6f:d1:45:
66:6e:b7:fb:4d:37:bc:02:e0:51:1c:32:8f:3f:84:86:ba:b1:
3c:f3:a1:77:2c:89:f8:26:f6:b1:60:b8:0e:d4:22:1a:4c:f8:
23:74:fc:6e:16:fb:91:95:fc:7d:65:f0:f7:bc:75:6f:43:d1:
74:c1:6f:68:ef:e6:93:0e:73:ec:fa:ca:67:61:fb:ef:c5:d9:
e4:79:8e:41:46:7b:8a:ef:21:f1:24:20:35:14:ca:30:c6:75:
ed:90:20:03:c2:43:44:50:63:5e:98:30:50:2a:ad:7b:ad:4e:
b6:7d:31:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:46:20 2026 by rpki-client