
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
File: P7b20GZYOGwje40UDa0VsoOLtco.mft (raw, json)
Hash identifier: 6cjMMtSOv+l5Hew3X2Fa6UGLi8RfNWdhUdmcnFKXLBM=
Subject key identifier: 2D:6B:F5:45:45:66:8B:34:66:4E:B7:63:43:7C:4A:45:0B:21:4E:45
Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA
Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
Certificate serial: 0C33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
Manifest number: 0C1D
Signing time: Mon 28 Sep 2026 18:56:17 +0000
Manifest this update: Mon 28 Sep 2026 18:56:16 +0000
Manifest next update: Mon 05 Oct 2026 18:56:16 +0000
Files and hashes: 1: P7b20GZYOGwje40UDa0VsoOLtco.crl (hash: hKZGhBpbeiZluurHij4trkXpywdpqK8iC3fvL4ciIn8=)
2: 2F5ED8E43E1711EA9A272644C4F9AE02.roa (hash: gAMdjI5mIfvZtW4F3eUxK2+GKNg4B9+2Q4/MQrVn71E=)
3: 9F9FD574758811EA93AADD3FC4F9AE02.roa (hash: GEB80SqU3sP5ypcIzsLatSzdHoLdJvAt9D+o7kbYRAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl
rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 18:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3123 (0xc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B171C, serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA
Validity
Not Before: Sep 28 18:56:16 2026 GMT
Not After : Oct 5 18:56:16 2026 GMT
Subject: CN=6abab851-d73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:5c:1a:d1:78:f1:e0:51:5a:f8:d2:ec:36:
e6:a9:3f:9d:23:82:98:9c:38:cf:67:2d:87:c5:32:
43:44:f8:9d:bb:6d:34:5a:97:45:6d:39:ff:db:f9:
21:67:76:4c:7f:c4:37:7c:af:ed:df:8c:cb:28:86:
1d:3a:09:9d:a6:48:81:36:37:f1:6f:f5:f8:a4:44:
da:da:ae:01:1a:be:34:33:9d:56:5b:ab:ff:3c:50:
3f:b6:63:7b:49:a9:81:f4:41:6d:9c:c2:fc:af:24:
66:9f:c7:c1:21:fc:b6:55:ab:c4:84:66:62:8c:0e:
4e:d7:d1:94:b5:22:f6:13:b2:dd:e1:68:26:80:b9:
0f:49:c8:68:d2:3f:f0:ec:73:50:7f:87:0e:33:96:
94:1e:03:86:b9:8a:27:9c:fe:97:5f:07:65:f1:3c:
cd:60:5d:e6:42:d4:af:2f:0b:33:cf:68:d4:25:fb:
69:e6:75:d7:a3:39:e0:b6:b0:8b:9b:9f:5c:3a:a0:
71:fb:81:21:19:65:d2:9c:03:1d:3b:bc:23:15:ef:
99:bb:c8:45:f4:d9:d0:a1:3e:38:7c:d6:e2:3b:bb:
02:31:0c:a6:b4:4b:5b:06:00:12:c4:20:d0:e9:a3:
d6:20:80:46:33:36:6e:09:21:34:df:a1:a3:ef:31:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6B:F5:45:45:66:8B:34:66:4E:B7:63:43:7C:4A:45:0B:21:4E:45
X509v3 Authority Key Identifier:
keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:39:30:02:8d:12:fb:74:20:ea:f6:fa:00:fd:54:ce:51:7e:
08:65:6e:6d:52:db:c0:b5:4b:ad:2a:78:69:43:d7:a5:8b:31:
f3:1f:25:85:7a:c0:f6:f3:cf:ee:7a:92:f6:d5:36:ef:ad:2d:
c6:dc:6c:51:ea:0b:6a:4a:27:f8:b3:1d:36:f0:bf:01:92:23:
85:f9:5e:0c:69:ef:d5:01:de:ea:97:d4:14:69:cc:6d:b5:d8:
2c:3c:20:62:f9:a3:22:7a:cf:ef:6a:77:ef:b9:be:0c:2b:fa:
1c:cc:52:7a:f9:c2:8e:85:7d:51:e7:16:e9:35:8e:8b:6b:ba:
70:c6:dd:03:b8:64:99:1d:b9:1e:1e:d4:6d:12:0e:a5:34:98:
a6:99:d8:03:4a:ea:84:f8:c6:4e:79:91:e1:ed:3c:87:0f:68:
00:75:c1:d1:f1:d3:36:fc:0c:a3:06:3c:03:55:3e:85:1f:2c:
54:7d:f8:da:9b:5e:59:82:aa:4e:47:a8:c6:9b:0f:6d:4d:ee:
98:6f:93:aa:ad:cd:50:a8:98:3c:5c:14:43:b7:30:10:c0:a7:
73:0d:66:99:5c:4e:38:be:70:2d:5d:ab:1d:ef:23:0f:ff:3e:
4f:12:a6:30:1d:f5:97:96:47:f9:c8:69:73:4b:9e:14:6d:ce:
cb:a4:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:53:15 2026 by rpki-client