
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json)
Hash identifier: Cj0VdXwh09hBch0E294Km0zU3zBmwR47lEpUxtwhZYc=
Subject key identifier: 1F:2B:31:CC:84:2A:C3:90:6F:79:B9:FA:56:85:3D:3C:3F:9C:8A:1A
Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91
Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
Manifest number: 0291
Signing time: Sat 17 Oct 2026 02:19:58 +0000
Manifest this update: Sat 17 Oct 2026 02:19:57 +0000
Manifest next update: Sat 24 Oct 2026 02:19:57 +0000
Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: 67m6x1fFr32iAI8aPVq85Az/3+wnTcu1vyttyvpnsG8=)
2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: svMZS7DV5TwUD82GBLvLWWlNJprDspcc73VDjKYI3GY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl
rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 02:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
Validity
Not Before: Oct 17 02:19:57 2026 GMT
Not After : Oct 24 02:19:57 2026 GMT
Subject: CN=6ad2db4e-9180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:0b:3b:26:0e:5d:9e:42:b7:7d:f1:63:f8:
4b:94:35:ef:82:61:b6:b9:b7:95:ad:ba:48:b3:39:
4c:2d:c7:8a:fa:07:92:19:e1:dd:ac:de:1d:a1:b4:
6f:b2:63:e4:06:aa:d4:64:35:67:ec:b2:44:1d:4f:
be:dd:1e:cf:90:40:74:73:b7:39:67:93:45:60:a0:
cf:af:6e:8f:5b:19:db:1d:ce:bf:ef:86:9d:1f:e1:
0d:4b:aa:14:d9:41:c2:1d:02:b5:86:e1:99:54:86:
6b:00:91:b7:f9:4f:49:69:90:4f:d1:77:32:f4:da:
56:13:6f:dc:04:8a:e5:67:d9:8b:99:34:84:a0:b4:
68:59:d5:55:fc:c2:e1:37:cc:c7:79:47:d2:02:16:
c5:49:3b:b4:dc:1a:26:09:9c:23:70:11:e6:04:f6:
d1:83:75:58:0b:cb:bc:3c:86:11:c5:e2:0b:78:75:
98:fb:c9:31:b6:88:e7:bb:27:a0:d2:17:0c:63:25:
10:42:28:fb:d6:ad:91:6f:78:fe:ed:fa:2b:d8:77:
ed:83:f3:dc:3a:2c:6b:94:53:73:14:88:65:e1:57:
c9:5f:97:9d:4f:1e:5e:1f:87:8d:51:0f:63:f6:9a:
9b:82:5e:3c:e1:13:86:52:07:6d:ef:09:93:12:62:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:31:CC:84:2A:C3:90:6F:79:B9:FA:56:85:3D:3C:3F:9C:8A:1A
X509v3 Authority Key Identifier:
keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:77:f0:66:57:c4:7f:22:ee:62:2a:12:73:3f:06:29:00:a9:
7f:de:32:eb:48:10:ad:83:f9:6c:1f:6a:fd:13:85:bb:c2:bd:
95:91:f3:b0:f9:f2:47:1f:b3:e8:3f:3f:bf:ab:75:22:11:bb:
04:50:ab:43:1e:08:84:d0:e1:36:16:60:60:6e:39:93:08:bd:
ce:ae:41:0d:56:ee:e7:4c:e1:81:e4:63:8c:0e:a9:37:c5:f2:
67:f3:84:c5:1b:0b:fe:d1:1e:74:13:fa:24:0a:a0:0f:f7:9f:
2d:2b:d4:b5:07:8f:a4:1b:98:83:71:cc:c2:e6:b3:33:27:6b:
52:63:ae:4a:84:6a:77:68:44:7a:92:d9:d9:b0:ba:94:f3:fa:
8f:9d:d5:32:c3:71:d3:75:46:f9:f4:79:ca:a1:1c:73:d7:a9:
0a:2a:69:ac:21:ee:da:9a:2d:cf:74:80:ef:71:b5:b3:29:ad:
f7:aa:f3:28:aa:01:bf:84:d7:fe:99:a7:3b:22:19:fd:15:4c:
45:c6:f3:44:50:e3:29:37:bc:3c:d9:38:d5:25:ef:02:18:dc:
3c:46:b3:32:08:a9:89:f3:c7:64:2d:39:39:8a:bf:d5:66:25:
21:3d:7c:fc:e2:16:38:39:ba:b0:b8:f7:e6:a3:5b:d8:50:22:
37:be:28:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:51:29 2026 by rpki-client