
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
File: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft (raw, json)
Hash identifier: /KDq1XW5JHSepoxMZzqJSLvUDxyn8x8SvvnJ4hNbYhw=
Subject key identifier: 13:76:76:83:EC:F0:80:0C:94:2F:CE:CE:F1:0F:C8:E9:EE:94:72:82
Authority key identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
Certificate issuer: /CN=A91A1D8C/serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
Manifest number: 9A
Signing time: Mon 21 Sep 2026 07:25:34 +0000
Manifest this update: Mon 21 Sep 2026 07:25:33 +0000
Manifest next update: Mon 28 Sep 2026 07:25:33 +0000
Files and hashes: 1: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl (hash: Haxbb+EjyR9pxeLq3FfqLBlFv+MzfEp2qlHjUe8o48c=)
2: C50D496ED01711F09F944781C4F9AE02.roa (hash: uFv39uSSaT436HVJNG6HonRgD8h69dX/W5dSzZ3uUCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D8C, serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Validity
Not Before: Sep 21 07:25:33 2026 GMT
Not After : Sep 28 07:25:33 2026 GMT
Subject: CN=6ab0dbee-4cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:99:c0:d8:76:1f:8d:d5:08:3b:87:e8:fb:
35:ca:74:e0:59:98:81:28:a9:49:a8:4b:f5:e5:9d:
2f:e0:03:47:cf:5b:57:75:07:0a:08:67:b1:79:f4:
e0:8b:69:6c:3f:d4:71:de:f0:b6:dd:13:56:b7:55:
ef:55:62:b7:bc:92:84:fe:61:04:63:ba:52:c9:cb:
0f:df:b8:86:43:41:72:6e:20:cd:9e:6a:8e:90:ad:
40:6c:04:86:62:99:bc:7d:03:76:5c:e7:97:51:5d:
f0:36:e0:ad:18:2e:4f:7a:9a:96:ac:b4:7e:87:3e:
6a:05:07:8c:aa:45:b2:03:78:e8:aa:28:ea:00:de:
cd:d1:23:2d:5f:88:73:6a:dd:0d:fa:c6:f5:23:ca:
39:17:dc:ce:8b:a5:98:b4:47:f0:ad:e0:fa:c0:b7:
92:1e:52:d8:4e:88:8c:08:ec:38:19:42:5d:42:06:
89:b8:34:22:e0:ef:6f:be:c0:dc:22:3b:7b:62:63:
af:1e:bb:7d:f4:fc:fa:d0:53:96:d8:f7:45:dd:9e:
d8:7e:3c:95:fa:2e:d0:89:13:d5:84:70:85:1a:72:
05:c6:b4:3d:a2:e1:0d:a0:9b:6b:af:38:b6:c0:43:
1f:d6:fa:71:c6:6e:76:77:2a:f0:2e:76:f8:af:3e:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:76:83:EC:F0:80:0C:94:2F:CE:CE:F1:0F:C8:E9:EE:94:72:82
X509v3 Authority Key Identifier:
keyid:EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e0:e7:1d:ee:3e:b4:72:14:ff:7b:97:5b:00:d1:7c:97:20:
41:df:25:de:9b:57:89:79:ce:45:88:1e:59:63:8a:fc:e1:bd:
a2:dc:3d:2a:f0:4d:d9:b5:f8:0d:b1:71:fb:f2:2e:c2:99:c2:
db:f8:30:3b:a9:56:69:2e:80:fb:cc:ed:96:b5:73:c5:78:23:
2c:33:f0:02:57:1e:1c:a3:88:66:fb:22:64:f2:cc:8b:da:ca:
46:54:fd:f5:0d:03:c4:10:41:9b:16:d1:6c:80:01:ca:90:10:
b6:c4:1d:d8:c6:c1:22:ec:03:54:f0:a7:b4:7c:3e:62:bf:5d:
b2:29:66:ee:94:64:50:74:95:76:a3:f2:e4:58:f5:fe:bc:d7:
08:10:18:b5:c0:6b:b5:69:15:e5:6e:f9:a9:05:9a:5d:6e:a3:
2a:66:cc:f9:99:cd:dd:e7:ca:4a:c0:45:b1:d1:07:a6:15:0d:
96:f7:5b:73:cf:05:32:c5:7a:d3:d4:6d:68:02:2c:d2:71:82:
49:be:6d:92:ba:fe:46:85:8f:25:ab:a9:d2:cc:cb:d5:7c:1d:
11:d3:3d:32:f5:e0:b8:26:ee:43:82:48:ae:8f:c3:0b:ca:a8:
37:a7:07:28:44:60:1e:85:f4:4f:84:75:82:68:31:21:4d:09:
ba:76:a6:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFEOEMxMTAvBgNVBAUTKEVFMzIzMUQ1QUE1NjVGNDA1MjQxOTc5MkFCODJDNDI3
ODg0QkMyRUMwHhcNMjYwOTIxMDcyNTMzWhcNMjYwOTI4MDcyNTMzWjAYMRYwFAYD
VQQDEw02YWIwZGJlZS00Y2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnKmZwNh2H43VCDuH6Ps1ynTgWZiBKKlJqEv15Z0v4ANHz1tXdQcKCGexefTg
i2lsP9Rx3vC23RNWt1XvVWK3vJKE/mEEY7pSycsP37iGQ0FybiDNnmqOkK1AbASG
Ypm8fQN2XOeXUV3wNuCtGC5PepqWrLR+hz5qBQeMqkWyA3joqijqAN7N0SMtX4hz
at0N+sb1I8o5F9zOi6WYtEfwreD6wLeSHlLYToiMCOw4GUJdQgaJuDQi4O9vvsDc
Ijt7YmOvHrt99Pz60FOW2PdF3Z7YfjyV+i7QiRPVhHCFGnIFxrQ9ouENoJtrrzi2
wEMf1vpxxm52dyrwLnb4rz4G9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBN2doPs
8IAMlC/OzvEPyOnulHKCMB8GA1UdIwQYMBaAFO4yMdWqVl9AUkGXkquCxCeIS8Ls
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ4Qy85NzU0REEzOEQw
MTYxMUYwQTY1NDdBN0VDNEY5QUUwMi83akl4MWFwV1gwQlNRWmVTcTRMRUo0aEx3
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdqSXgxYXBXWDBCU1FaZVNxNExFSjRoTHd1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUQ4Qy85NzU0REEzOEQwMTYxMUYwQTY1NDdBN0VDNEY5QUUwMi83akl4MWFwV1gw
QlNRWmVTcTRMRUo0aEx3dXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATeDnHe4+tHIU/3uXWwDRfJcgQd8l3ptXiXnORYgeWWOK/OG9otw9KvBN2bX4
DbFx+/IuwpnC2/gwO6lWaS6A+8ztlrVzxXgjLDPwAlceHKOIZvsiZPLMi9rKRlT9
9Q0DxBBBmxbRbIABypAQtsQd2MbBIuwDVPCntHw+Yr9dsilm7pRkUHSVdqPy5Fj1
/rzXCBAYtcBrtWkV5W75qQWaXW6jKmbM+ZnN3efKSsBFsdEHphUNlvdbc88FMsV6
09RtaAIs0nGCSb5tkrr+RoWPJaup0szL1XwdEdM9MvXguCbuQ4JIro/DC8qoN6cH
KERgHoX0T4R1gmgxIU0JunamLw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:19:50 2026 by rpki-client