
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json)
Hash identifier: WcYeLnHu6BiYqS9bRG7wHymUO4ewgp2fQU67ElUz7xk=
Subject key identifier: DE:52:3A:CD:BE:7B:FD:14:AD:E4:32:B0:CB:EC:C2:2D:CA:95:21:0C
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial: 1153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
Manifest number: 113F
Signing time: Sun 20 Sep 2026 17:13:28 +0000
Manifest this update: Sun 20 Sep 2026 17:13:27 +0000
Manifest next update: Sun 27 Sep 2026 17:13:27 +0000
Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: K0Y9rFyEWnv02Q8Dp+/prz5uAQZTWLplJbbiqNdlOV0=)
2: BFD9F81CFFEB11F085398A1A766F56BC.roa (hash: COcewJwinDbkxeEAlt0aEDN3t7qgwxUzyHis29aNdTw=)
3: C0D0F162FFEB11F085398A1A766F56BC.roa (hash: bB2TgHBXpBSWMFo/NWTJDUu8mZcJxhOZBaZbScA7lZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4435 (0x1153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Validity
Not Before: Sep 20 17:13:27 2026 GMT
Not After : Sep 27 17:13:27 2026 GMT
Subject: CN=6ab01438-7f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:26:0c:d7:c3:3d:8d:d2:92:7a:2f:6c:c7:
d8:6e:03:32:37:70:89:a1:0f:e0:ca:f2:2e:e9:2c:
0c:62:e3:84:55:a0:c4:e6:1c:c3:19:f0:17:93:19:
90:36:27:f9:9b:9f:b5:e7:01:02:8b:b0:59:43:5d:
90:cf:3a:32:e7:de:16:aa:8f:b8:f0:93:f5:4c:bb:
8c:75:fa:32:d7:42:a9:20:72:e1:31:65:ff:a2:32:
e1:20:bc:d5:94:fc:13:fa:dc:47:b3:1b:5f:29:e1:
35:90:38:89:50:c3:01:90:20:4e:cb:1f:a2:b9:e4:
bc:22:c5:99:79:ce:5b:b7:bf:5b:e8:20:9b:a2:38:
b5:af:53:32:12:c9:6f:e0:41:b2:4b:eb:15:c4:07:
83:86:35:8a:b7:91:9b:fa:36:ff:d4:94:1c:e2:22:
e6:7d:81:49:cd:ed:69:45:08:d3:64:5b:b5:ce:13:
d6:95:91:44:57:ce:6e:4f:ab:27:3e:32:2b:ed:d0:
bd:9f:07:18:32:2d:55:27:12:36:67:0c:72:0f:26:
ed:31:a7:32:28:a1:76:c0:a9:52:4c:57:07:5e:15:
d7:88:5c:bd:5d:0d:c9:4e:09:74:f9:08:be:54:e5:
92:ac:29:4a:0f:a7:cf:e0:75:99:45:21:ea:c3:d1:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:52:3A:CD:BE:7B:FD:14:AD:E4:32:B0:CB:EC:C2:2D:CA:95:21:0C
X509v3 Authority Key Identifier:
keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a7:82:c6:fb:d2:d7:94:97:9c:01:fa:6a:c6:3a:18:88:09:
3e:9d:ea:d3:a5:7d:ce:ed:5f:69:8a:4f:ef:60:a6:f8:27:6a:
6d:49:45:2d:bf:64:70:e1:b1:16:46:af:db:e7:9b:c9:e9:b4:
98:d8:b7:73:f9:b8:9b:b4:9e:2b:17:fd:36:f5:f1:93:11:68:
ee:ad:dc:bd:bf:56:24:5e:cb:8e:3c:8a:c0:48:68:29:47:ae:
67:12:bb:5f:a3:0d:6e:b8:c0:e2:ae:14:5c:c3:f4:6e:b4:86:
c8:f9:52:d7:06:d9:d6:50:15:7a:be:70:91:b9:f2:10:90:26:
0a:cc:17:19:61:79:f0:4f:58:1b:6d:42:6b:cc:86:51:90:18:
85:5b:81:d0:67:f1:06:e1:26:6c:fe:29:50:2e:be:ef:d8:51:
27:85:c9:8c:92:13:0c:48:0b:74:1f:61:97:f8:62:16:59:63:
9d:f5:61:c4:18:26:24:d5:d8:b7:06:24:33:18:a1:7d:c2:1f:
87:1f:5a:31:01:4f:eb:e6:1c:20:ac:98:c4:9e:20:f0:57:bd:
ac:ee:a6:1d:6f:6a:29:9e:63:47:87:18:99:45:2a:9d:19:d6:
d6:2e:58:60:ed:d6:85:c1:d9:a3:08:aa:48:d9:6a:15:88:af:
5f:a3:75:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF
QTlERDQ1NzIwHhcNMjYwOTIwMTcxMzI3WhcNMjYwOTI3MTcxMzI3WjAYMRYwFAYD
VQQDEw02YWIwMTQzOC03ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZwmDNfDPY3SknovbMfYbgMyN3CJoQ/gyvIu6SwMYuOEVaDE5hzDGfAXkxmQ
Nif5m5+15wECi7BZQ12Qzzoy594Wqo+48JP1TLuMdfoy10KpIHLhMWX/ojLhILzV
lPwT+txHsxtfKeE1kDiJUMMBkCBOyx+iueS8IsWZec5bt79b6CCboji1r1MyEslv
4EGyS+sVxAeDhjWKt5Gb+jb/1JQc4iLmfYFJze1pRQjTZFu1zhPWlZFEV85uT6sn
PjIr7dC9nwcYMi1VJxI2ZwxyDybtMacyKKF2wKlSTFcHXhXXiFy9XQ3JTgl0+Qi+
VOWSrClKD6fP4HWZRSHqw9EmpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5SOs2+
e/0UreQysMvswi3KlSEMMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB
REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV
VWFMMW01N2lNa0xxbmRSWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH6eCxvvS15SXnAH6asY6GIgJPp3q06V9zu1faYpP72Cm+CdqbUlFLb9kcOGx
Fkav2+ebyem0mNi3c/m4m7SeKxf9NvXxkxFo7q3cvb9WJF7LjjyKwEhoKUeuZxK7
X6MNbrjA4q4UXMP0brSGyPlS1wbZ1lAVer5wkbnyEJAmCswXGWF58E9YG21Ca8yG
UZAYhVuB0GfxBuEmbP4pUC6+79hRJ4XJjJITDEgLdB9hl/hiFlljnfVhxBgmJNXY
twYkMxihfcIfhx9aMQFP6+YcIKyYxJ4g8Fe9rO6mHW9qKZ5jR4cYmUUqnRnW1i5Y
YO3WhcHZowiqSNlqFYivX6N14Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:16:45 2026 by rpki-client