
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json)
Hash identifier: PxsE3tRC91gGDudt4u3pAdxlVZzOJD/Rrm7ldKGtv3A=
Subject key identifier: 7C:E4:4B:A3:79:D3:BC:32:38:95:E9:9A:F0:7E:FF:C3:75:82:DA:13
Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
Manifest number: 023A
Signing time: Tue 13 Oct 2026 03:04:18 +0000
Manifest this update: Tue 13 Oct 2026 03:04:18 +0000
Manifest next update: Tue 20 Oct 2026 03:04:18 +0000
Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: f6JgEd9D6gMnBagxatah8mJ2ScmXX8hXJF7uQCNDD1s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 03:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Validity
Not Before: Oct 13 03:04:18 2026 GMT
Not After : Oct 20 03:04:18 2026 GMT
Subject: CN=6acd9fb2-c326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:98:78:d7:92:ce:6d:9f:c4:ea:f9:b3:b7:
3d:d2:c2:b1:fb:66:36:ee:47:3a:0a:d4:19:b8:1a:
f7:ee:22:64:1a:83:2f:71:d0:2f:65:97:cf:57:2f:
5a:34:f0:b4:90:e6:69:1e:e1:a2:5d:4f:5a:5b:be:
6c:df:9a:8f:af:c7:19:b2:03:f1:82:0f:5f:d1:9f:
b2:84:b4:ba:ff:bf:34:39:f5:05:2e:3d:c6:31:a5:
0f:ca:27:4f:5c:85:36:60:c4:40:a8:6a:9c:e5:6f:
3b:86:5d:9b:2f:6f:1a:cf:17:b8:2d:dc:eb:5c:ee:
aa:43:07:dc:97:ca:33:1a:3e:4d:0e:21:db:02:58:
30:6a:18:fb:c7:2c:8c:4e:f1:1b:80:1b:db:af:d8:
68:04:8b:45:43:0f:96:4c:55:83:4f:ab:67:ee:e3:
6a:96:f8:87:7b:0b:3e:02:9e:27:ac:94:46:91:20:
02:87:17:3b:e3:27:50:07:47:ac:de:2e:6b:e2:34:
d6:af:17:ec:8d:2e:6e:72:92:ea:da:84:0c:ea:01:
07:9b:f2:65:f5:a4:55:27:2d:f2:64:74:2e:62:02:
78:7b:9b:ef:e4:88:24:2e:fb:70:4b:f7:13:2c:57:
ff:1b:ce:2f:dc:b6:d2:dd:be:94:e8:7c:58:29:27:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E4:4B:A3:79:D3:BC:32:38:95:E9:9A:F0:7E:FF:C3:75:82:DA:13
X509v3 Authority Key Identifier:
keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a7:4a:1c:e6:2f:13:02:01:f4:5e:bf:46:1f:51:91:9a:d0:
1f:29:59:95:a8:c8:6e:e7:f3:3d:59:85:75:44:25:14:ec:af:
af:09:8d:42:4e:29:34:9a:0a:8a:19:16:d6:e8:68:1e:24:30:
d9:62:80:ef:cc:40:f9:e6:6a:a6:2e:ca:d2:2e:bf:ef:6f:51:
19:7a:c1:4c:b6:23:06:2c:92:fe:95:69:91:4d:97:0b:35:ba:
3e:83:55:54:87:5a:7b:7f:70:f4:50:ab:7f:19:52:f0:e8:1a:
10:32:20:8d:ea:71:f2:29:0e:c6:c2:c8:34:2e:7c:1b:5e:be:
88:68:0d:c4:1f:d2:75:1b:47:6a:64:dc:c8:9b:6a:31:e0:57:
97:1b:e1:c9:3d:47:41:fb:84:63:05:8d:69:22:01:29:d7:11:
49:bd:3f:97:03:50:06:a3:b3:7c:09:2a:6d:58:fa:1c:5b:31:
33:f6:e6:1b:85:0e:d6:45:d6:a9:1d:3d:67:56:98:1a:b0:a4:
94:9d:6a:52:74:8f:e4:ad:a1:ee:30:64:f4:ca:09:28:98:fa:
f1:7c:2a:4e:33:74:6e:52:ec:13:f3:70:0d:a9:1c:14:b5:8c:
df:63:4b:15:8c:09:9a:94:65:2a:3f:35:cc:ee:15:a5:34:ae:
7f:d4:57:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 02:44:18 2026 by rpki-client