
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
File: 7DwKarkc4TMW0oQzDDgovv4qNBM.mft (raw, json)
Hash identifier: UdgNxeWSwu1bSXSQ+cbLoPcIdUmB4oMUotmfiR9Iabc=
Subject key identifier: 80:72:07:1C:D6:20:78:66:55:93:EC:E1:C3:49:FC:05:65:1D:D1:FB
Authority key identifier: EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13
Certificate issuer: /CN=A91988EB/serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
Manifest number: 94
Signing time: Sun 27 Sep 2026 08:04:29 +0000
Manifest this update: Sun 27 Sep 2026 08:04:29 +0000
Manifest next update: Sun 04 Oct 2026 08:04:29 +0000
Files and hashes: 1: 7DwKarkc4TMW0oQzDDgovv4qNBM.crl (hash: 3micDCATXR1a8km7BpuVhBEBGRRnK/fEwiEd2Y9Znfg=)
2: 8FB3AD6AE58611F0A2F174BA446F56BC.roa (hash: sTktGN5NFdYq+gsUaHWLCXYe1rpci+mF34P/YuXEE0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl
rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91988EB, serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
Validity
Not Before: Sep 27 08:04:29 2026 GMT
Not After : Oct 4 08:04:29 2026 GMT
Subject: CN=6ab8ce0d-8e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:c9:d3:3b:a3:5e:e8:69:2a:19:23:9a:b3:
64:4f:75:ab:95:80:14:d7:19:ff:fd:69:d7:fc:14:
9b:10:10:30:90:5d:02:0d:26:c7:c5:d6:5b:54:49:
57:ea:a2:94:f3:58:08:69:0e:c6:5e:e4:1a:c3:c5:
f3:6e:bf:73:f3:46:7d:ba:69:a2:10:94:da:4e:98:
07:a2:4f:51:a1:85:75:77:a3:a1:ba:d8:32:8b:9b:
6c:99:5f:41:f8:18:dc:a6:3c:38:e4:b7:5c:29:bb:
80:66:e9:c8:4d:bf:9d:32:c2:c9:3c:29:4f:45:15:
f9:d2:9d:cf:6e:19:2a:b3:07:af:2a:72:c8:3a:3a:
1d:83:16:94:62:6f:67:58:8a:59:a6:e7:bd:b1:b8:
67:fd:ea:e1:07:91:1e:7e:43:dd:eb:e6:9c:d2:6d:
cc:0a:1b:e9:29:ef:bd:ae:fb:66:1b:59:ba:1b:81:
c6:08:bd:88:35:c4:91:ff:aa:c4:46:f0:93:9f:c2:
4b:1a:d0:fa:0d:c5:d7:bc:76:88:5e:0c:0a:01:90:
24:3a:65:88:40:d8:ce:86:6e:8f:92:81:46:d8:15:
44:98:57:9a:5f:9c:05:fa:bf:55:9a:81:05:31:4c:
b5:4d:17:a8:d5:a1:97:09:54:a7:cc:14:a3:89:08:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:72:07:1C:D6:20:78:66:55:93:EC:E1:C3:49:FC:05:65:1D:D1:FB
X509v3 Authority Key Identifier:
keyid:EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:24:07:ef:33:74:b6:0d:c8:e6:79:47:a0:a4:51:5a:11:f2:
de:a2:f7:fe:87:93:a9:53:a0:af:66:d2:d1:65:56:90:bf:31:
43:a8:20:d8:6f:4a:5a:98:11:d3:1e:9f:e6:df:29:ab:6e:ef:
76:6e:34:1b:7a:a8:ab:12:d2:0b:49:68:bf:fd:36:35:cd:97:
b8:c3:d3:6b:45:a9:be:6b:ee:81:44:9b:a2:2a:47:78:ec:b5:
b9:c6:35:68:e4:13:39:35:32:22:2b:3c:d3:75:13:96:1c:92:
37:3d:3c:27:43:cb:bd:31:55:5c:6f:a0:1d:79:36:b1:0d:e8:
d5:6a:f3:88:15:5f:64:b0:50:42:bd:91:37:41:04:0e:84:84:
8d:a6:7a:02:1f:c2:8a:a6:bb:04:e3:a9:ba:b6:55:6f:08:02:
92:84:92:72:a9:06:10:bf:95:b9:a5:4c:16:58:ea:a5:7d:8a:
1f:65:a1:44:5d:be:8d:00:67:8c:24:15:3d:51:ed:0b:eb:87:
8a:29:a0:9e:11:87:f5:59:53:87:51:72:fb:e1:b5:b6:7f:07:
11:63:f5:6d:e7:f9:dc:61:e7:b9:71:22:8a:d1:26:3c:1c:9f:
f3:21:0f:c6:0b:62:d5:14:a3:84:bf:74:a3:c7:d0:3a:62:38:
b0:9c:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:32:49 2026 by rpki-client