
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
File: f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json)
Hash identifier: 55iJIvyR6qY0iMyCtnwyY9jzGG7JxYdU3m+A/5qdV9g=
Subject key identifier: AC:45:5E:90:26:53:26:56:34:85:4E:A7:D7:60:83:C2:9A:A7:30:7E
Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
Certificate issuer: /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Certificate serial: 0297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
Manifest number: 0291
Signing time: Mon 21 Sep 2026 01:45:00 +0000
Manifest this update: Mon 21 Sep 2026 01:45:00 +0000
Manifest next update: Mon 28 Sep 2026 01:45:00 +0000
Files and hashes: 1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: FDkFToYRMJO0XMdyIX3RMzcCC4Z8B3zLOk8uHp7p7DM=)
2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: UmgIXHzfkXMqKWVff6849jzy9LFm+7q1hZgvaLwPQ/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Validity
Not Before: Sep 21 01:45:00 2026 GMT
Not After : Sep 28 01:45:00 2026 GMT
Subject: CN=6ab08c1c-33e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:9b:87:e0:74:92:98:14:b7:9f:bc:71:51:
e8:96:22:69:ba:54:67:f0:f4:27:6f:6b:47:4b:c9:
a6:21:3f:21:fb:3a:b3:fb:29:85:38:f8:52:b2:94:
62:d7:30:46:1b:ed:00:f5:2e:62:06:20:56:a3:96:
8c:12:b7:74:d3:05:ff:d5:c5:a6:b7:93:d3:f8:2b:
b2:0f:2f:04:0e:41:0a:a5:92:b7:0e:1d:1f:5d:a6:
c5:fb:15:64:99:e8:fd:7e:f0:24:63:28:78:c0:fe:
f4:bb:eb:d6:43:a6:0a:67:e7:4d:4a:f7:8c:47:2f:
9d:92:50:54:f5:06:c6:b3:67:78:53:c4:1d:cc:39:
11:81:5d:ca:43:64:c1:5a:55:37:61:73:ab:a2:90:
3f:80:5d:e5:a2:4f:f2:36:00:fd:f5:d7:57:5f:0f:
b1:ef:ed:cf:d5:ad:d2:d3:4b:05:c3:54:c0:3e:57:
6e:b2:84:e0:e6:44:5c:8e:a0:59:b4:f1:d0:4f:37:
cb:c0:1d:9f:44:d7:09:48:f6:f2:ed:a9:7d:c8:4e:
0b:17:43:3a:d5:67:07:7c:86:5d:1c:e4:76:1d:87:
ad:4b:b1:b3:d7:41:ab:6e:43:24:57:e0:0e:05:e4:
8e:51:f5:7f:95:b5:70:be:20:6d:ea:31:45:32:bd:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:45:5E:90:26:53:26:56:34:85:4E:A7:D7:60:83:C2:9A:A7:30:7E
X509v3 Authority Key Identifier:
keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:dd:cb:ab:f9:c4:84:f4:05:22:d3:1e:8c:f6:9b:eb:d5:cc:
05:31:3e:01:6a:ef:8d:e2:31:16:1a:47:1b:63:31:3a:89:18:
e5:90:c1:67:9a:a1:95:96:da:42:c3:65:52:13:4f:71:18:2c:
a0:22:40:5f:74:a1:a7:8c:0e:38:56:3c:05:21:64:46:26:da:
6f:54:6b:2a:1e:20:9f:3c:55:86:72:a7:de:6f:38:60:09:61:
c8:00:eb:64:8a:7c:9e:b6:c0:e7:05:c9:5a:1d:8e:23:99:5d:
4c:1b:b8:54:af:7f:44:88:4e:a0:48:1a:75:b6:5e:13:ef:13:
44:af:97:51:66:a2:da:e6:b5:7d:cc:e3:83:6d:48:ca:d6:bf:
fd:72:84:55:a9:6a:1d:89:82:8a:27:37:63:e0:71:5a:c6:1d:
0d:d7:82:9d:3d:0d:1b:8f:26:cd:18:8a:99:51:f3:e4:6b:02:
47:c9:40:98:91:e1:6b:a8:f1:d4:5f:3e:f9:4c:cc:58:e4:42:
7a:90:5c:ef:21:25:b8:df:a9:a5:7d:37:25:70:6b:d8:0e:c9:
2c:5a:1f:ff:0c:04:57:37:16:bd:20:c8:79:be:cd:e2:15:71:
95:a3:a9:fc:b0:8b:f0:9c:e8:3f:e9:27:c9:41:fd:d5:b7:18:
79:b6:ee:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:38:04 2026 by rpki-client