
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json)
Hash identifier: n832g2+1lrkCw5fWeik16SLbB6L+FftDHkBt55Y+lmU=
Subject key identifier: 45:E3:2C:08:81:83:4B:CF:A9:03:08:F9:0E:0E:22:0E:BD:4D:62:C2
Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
Certificate serial: 08F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
Manifest number: 162E
Signing time: Wed 04 Nov 2026 18:18:44 +0000
Manifest this update: Wed 04 Nov 2026 18:18:43 +0000
Manifest next update: Wed 11 Nov 2026 18:18:43 +0000
Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: j7JYBXEouKNyUbJaOKfYUGXVCJ3E8AhazvsKI1rdgUA=)
2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: zTGTx7/ZH11Scl6xxtt6/6AQ3HI9XkZHLbDnCzFKfFY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl
rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 18:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59
Validity
Not Before: Nov 4 18:18:43 2026 GMT
Not After : Nov 11 18:18:43 2026 GMT
Subject: CN=6aeb7703-7867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:04:6b:a0:1a:13:9f:22:a2:b9:56:10:17:
e1:cb:dd:66:64:28:71:ca:91:17:45:16:14:75:ff:
45:b5:77:05:5f:1f:e6:ea:34:69:53:ed:37:fb:70:
85:e4:19:52:38:ec:23:6a:5e:20:02:29:61:11:15:
a4:a7:97:8e:34:c3:26:96:cc:66:fb:35:3b:d9:73:
3b:6f:ea:d2:08:ef:ec:dc:e2:79:20:22:1c:ce:2e:
83:16:63:ea:81:18:90:1c:a4:45:bd:bb:9c:24:d2:
d3:7d:2a:d9:70:4b:06:78:a2:1f:cd:b9:85:72:a3:
e6:0b:fc:f2:f6:ca:f9:65:c6:2b:9e:56:b7:41:4b:
e8:ac:17:38:67:fd:75:33:0c:a1:07:a4:18:98:47:
12:40:d5:38:c4:b7:0d:71:b7:3e:e5:37:ac:dc:35:
2f:94:1f:cc:ec:27:9f:47:15:8d:5b:46:87:50:be:
f7:45:b5:0d:52:b3:07:0e:13:c0:9b:9e:ce:68:8f:
03:02:49:51:85:af:50:bd:e0:e5:fd:fe:7e:48:54:
79:3e:63:71:69:14:70:55:d4:2f:02:f0:02:34:d3:
02:1f:2c:4c:5c:95:9b:1b:7a:aa:e0:f6:e3:c2:8f:
86:fc:1b:34:a4:b9:fc:de:0f:d9:a4:d8:22:4e:e7:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:2C:08:81:83:4B:CF:A9:03:08:F9:0E:0E:22:0E:BD:4D:62:C2
X509v3 Authority Key Identifier:
keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:0c:f9:e6:0e:49:d6:77:c8:e3:06:03:ad:d7:45:36:f5:d8:
b9:bf:58:27:4c:15:0e:ee:9b:15:32:85:5d:78:bf:fa:1d:03:
8e:8d:55:ca:40:a9:7f:b5:0a:2e:2e:b5:5d:1d:24:ab:57:30:
cd:7e:42:0e:60:1c:2b:8a:ab:83:d7:10:a4:58:80:26:c5:3b:
4c:ee:c5:8f:33:4f:b3:c2:a0:5b:f9:ff:4c:52:14:60:a3:96:
91:24:e6:e7:24:6d:70:2e:52:a8:8a:58:26:3f:07:b3:42:a3:
f1:9e:66:65:65:bc:60:ec:2d:4f:e0:09:19:af:86:3f:f5:92:
ee:bd:d8:87:02:ab:87:37:64:b0:f4:0d:2f:dc:4f:d9:3c:20:
57:ca:8b:9b:3b:41:4e:3b:4e:87:dc:32:86:ab:c0:ad:79:c1:
f6:55:bd:04:1d:43:08:d3:54:28:0b:fe:23:46:e1:10:df:e8:
d5:05:14:57:59:e9:49:d9:24:41:4d:57:2b:9a:a3:ca:10:55:
14:95:48:42:48:df:a6:76:6f:56:28:65:bf:43:21:89:39:fb:
2c:ed:b9:af:c6:cc:29:45:ba:fc:d7:8d:ab:f5:ee:91:35:ca:
d2:d3:58:86:a2:ef:3e:69:df:d9:d0:5f:19:22:d0:bb:68:23:
4f:bf:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:41:27 2026 by rpki-client