
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier: 8Ej67FDMKUF+gqb/SNZ6pLS1FQ0TKftJmWhmvJGTVQc=
Subject key identifier: CD:50:86:26:86:AD:D3:43:3E:5E:27:B8:A7:AA:CC:5D:0C:11:30:2A
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial: 0448
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number: 0432
Signing time: Mon 21 Sep 2026 00:06:52 +0000
Manifest this update: Mon 21 Sep 2026 00:06:51 +0000
Manifest next update: Mon 28 Sep 2026 00:06:51 +0000
Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: hMjs1nZBFuTFtwenQ4fjj/xJbVM+GE5wncgGeri75Sw=)
2: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: SiaKfWh20onDMNEmqxmOZpPd2+52s+o/XbL2Uti7Li8=)
3: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: k2Tm+VECAOkqgz18jDdhRYGz/UVnU5T68kA32PJlYJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Validity
Not Before: Sep 21 00:06:51 2026 GMT
Not After : Sep 28 00:06:51 2026 GMT
Subject: CN=6ab0751c-2086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:db:f5:fe:49:2c:23:11:c2:20:28:18:ca:
96:07:ed:35:29:28:fd:65:ca:b5:b2:66:db:63:4f:
c8:bd:93:e6:6a:46:2e:80:31:4a:1d:0e:96:41:3d:
62:22:75:cb:bb:c3:e7:80:f5:f0:9a:a5:2e:99:0d:
5f:0c:14:99:99:4f:83:4d:0c:88:a5:d2:4a:47:6a:
07:7a:4a:a2:0c:d1:04:93:16:8f:ea:e5:f4:81:14:
79:98:3f:11:f5:22:2c:38:2f:25:bb:4d:09:cd:16:
e5:60:79:38:34:9c:b9:fb:44:3b:c4:78:91:5d:f7:
8c:41:c4:2e:cc:d4:1b:24:2b:cd:24:5f:d3:bf:63:
08:35:a9:89:00:69:53:de:ec:3d:e9:fc:64:cf:50:
7b:62:33:57:27:28:7f:d0:7d:ab:c3:96:f9:e2:db:
20:14:85:58:1a:fb:36:f5:d2:88:59:cf:06:90:7c:
90:51:8f:89:4d:0f:68:0e:7b:8c:9e:cc:a8:5b:d3:
28:e2:8b:7b:d7:1c:06:f9:84:6e:f6:c6:5b:68:da:
87:7f:91:02:fa:7b:cb:64:5f:08:13:4f:bf:6a:52:
56:6d:de:85:4d:85:00:62:ac:12:f9:0f:f3:9d:6a:
2b:b4:46:cf:d0:52:2d:94:44:56:f7:de:64:76:77:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:86:26:86:AD:D3:43:3E:5E:27:B8:A7:AA:CC:5D:0C:11:30:2A
X509v3 Authority Key Identifier:
keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:59:38:a8:55:b8:1f:42:71:c5:72:00:45:44:9a:24:82:a4:
e2:40:cd:bc:d3:8d:46:ff:c8:a6:e0:29:3f:54:f5:3c:d1:1c:
f7:24:ce:d8:21:25:20:af:cb:3c:7c:f5:51:53:83:0f:b5:7a:
5a:1a:d6:e5:31:97:56:1a:37:cc:c8:76:6d:53:ce:77:74:d5:
00:8c:03:f1:4a:f9:17:9e:7e:85:46:65:f4:06:f8:51:54:58:
8c:a7:28:4d:e2:b3:ff:9b:cc:2f:af:67:37:ea:ff:ca:4c:4c:
dc:92:00:16:d2:09:24:62:71:97:fb:97:85:ae:de:ab:1c:10:
da:d4:0c:8d:cd:25:a3:b7:03:25:67:b5:32:95:c5:46:74:b7:
68:eb:93:74:46:38:fa:bd:ac:bb:14:49:da:e3:be:7a:bb:44:
c2:70:e0:23:7d:b3:45:e5:27:7e:04:64:e4:46:f4:2a:cb:7c:
fa:03:e5:5b:dc:5e:29:51:42:1c:f1:50:5c:d0:1a:45:0c:34:
a6:ba:cf:93:b3:81:38:24:3b:32:ff:b6:00:eb:21:cf:b4:71:
48:43:3a:af:cc:61:81:7b:00:3f:44:d0:37:cf:83:5c:88:80:
5e:90:46:22:32:8b:93:d0:8e:e3:a0:44:b1:47:cd:b0:f8:0b:
68:2b:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:35:14 2026 by rpki-client