
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json)
Hash identifier: 0V/56IQZHDwCnZWl5FslRPbeCgpFHZkoRnRN5RHrnSE=
Subject key identifier: EB:D4:B3:1A:74:9C:AB:FD:1E:85:19:AD:6A:45:1B:3E:6E:7A:76:2C
Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
Manifest number: 01EB
Signing time: Mon 21 Sep 2026 03:26:26 +0000
Manifest this update: Mon 21 Sep 2026 03:26:26 +0000
Manifest next update: Mon 28 Sep 2026 03:26:26 +0000
Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: 3Y6Y2mgNAHFu+i61I6PKnvQARkeLzF24EALIdQH+WxE=)
2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: yPDy0xgT7qOMVChc0IeYdh84zKZ/Q4OPSOxME4uNSX8=)
3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: MtMRVhbm/GKcyIVSZCGW9MQoyNNx6WEtE4Sni66kFt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D
Validity
Not Before: Sep 21 03:26:26 2026 GMT
Not After : Sep 28 03:26:26 2026 GMT
Subject: CN=6ab0a3e2-ab75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:14:48:da:04:11:54:ee:35:77:5d:e7:21:
63:44:cc:38:5c:e7:8c:b6:df:e9:4b:97:de:95:7d:
e6:02:f3:42:cf:67:7f:b8:5b:94:83:14:4c:f1:ff:
0c:ae:cd:30:68:b9:e9:54:16:cd:c1:cf:6f:a7:3d:
7f:b5:52:05:0e:eb:08:59:3e:f1:80:52:b7:0b:61:
cb:3b:94:68:99:cc:7e:c5:91:1c:03:bc:11:fb:25:
a3:b2:8a:83:85:3d:8a:99:f1:64:7c:ef:51:c3:e0:
53:6b:0e:a2:2f:46:7c:94:4b:87:c5:f2:5a:55:b7:
3f:3b:6a:ee:f8:51:e6:53:5b:32:59:be:0a:cf:03:
3d:cd:a5:a5:f2:05:9a:e7:63:b5:cc:3c:79:24:0e:
39:0f:ba:c4:86:84:5d:21:f6:8d:4a:60:da:b1:6f:
7e:68:d2:d8:7a:a1:1a:3a:f9:14:ab:12:74:4e:90:
62:3d:1f:e5:d3:c8:eb:ef:fc:1d:ce:3d:7b:29:c3:
1a:e0:34:b5:5f:80:a4:a5:12:28:87:e5:5a:13:66:
4e:3a:cc:42:03:07:22:0b:1d:f1:03:d2:eb:7f:29:
c7:14:54:91:e0:4f:d9:e3:5b:01:57:80:bb:e9:4d:
90:42:a1:92:e4:fc:5e:26:82:d5:90:2f:27:3c:43:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D4:B3:1A:74:9C:AB:FD:1E:85:19:AD:6A:45:1B:3E:6E:7A:76:2C
X509v3 Authority Key Identifier:
keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:68:b3:91:fe:b3:50:e3:27:43:09:9d:cb:e3:94:e4:3a:c6:
74:e2:d7:f6:90:42:62:15:ff:52:f9:31:84:da:d6:21:10:73:
74:70:55:72:4a:14:90:43:5f:06:0f:f6:85:3d:ea:11:97:6f:
18:26:03:73:3e:e3:a3:ca:75:52:ed:64:1e:d9:03:d5:86:52:
4e:6a:73:41:d3:86:c8:bd:bb:5a:63:b9:38:ee:42:de:15:ad:
d0:d2:ec:49:51:b2:af:17:59:45:4d:f4:cf:35:0b:ef:4c:70:
cf:5d:d3:9f:21:b3:06:ff:ba:1d:7c:e9:81:5b:59:d7:04:a3:
83:85:02:40:94:ec:d3:9e:27:05:d3:57:8c:98:7b:9b:c5:6b:
74:82:51:91:3b:ac:50:c8:93:32:5f:7b:9f:31:38:dd:3d:d8:
55:7e:b8:56:53:4c:5c:31:a2:7a:5c:c2:1d:1e:4a:fa:43:d5:
87:c3:d3:d7:46:2c:d0:22:0c:a2:33:25:c7:07:47:7b:31:ee:
88:72:f2:45:de:dc:25:5c:ff:57:3e:fd:02:e4:f3:fa:f0:c9:
0a:37:ef:22:a4:e2:3e:e2:73:59:62:37:60:fb:9f:1a:19:f1:
e8:2f:ba:ea:a6:31:5f:69:d4:2b:c0:fb:1e:ed:8f:c2:31:12:
91:40:fd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:59:48 2026 by rpki-client