
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json)
Hash identifier: pcojLAU48lpfvahdypw0iIBrU9eEbgwSkM1q/BD66qc=
Subject key identifier: 8D:6C:5C:CB:EF:2C:8F:FC:AD:F5:D4:DB:D2:C6:6B:75:8D:5D:07:56
Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Certificate serial: 143C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
Manifest number: 1421
Signing time: Sun 20 Sep 2026 16:52:44 +0000
Manifest this update: Sun 20 Sep 2026 16:52:43 +0000
Manifest next update: Sun 27 Sep 2026 16:52:43 +0000
Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: uGPu0/KuwgVRr6o8v+mofagUWyvGqfMavyBjC2IxzZ0=)
2: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=)
3: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5180 (0x143c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561
Validity
Not Before: Sep 20 16:52:43 2026 GMT
Not After : Sep 27 16:52:43 2026 GMT
Subject: CN=6ab00f5c-1e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:bd:f3:fe:7c:6a:8f:89:ce:35:16:b5:a0:
be:86:02:ef:45:50:34:fb:3f:a4:1c:4b:6e:71:1c:
f6:db:23:5f:16:0c:b5:cf:ec:da:5d:8b:f7:81:8f:
40:c1:74:a9:66:d3:f7:bb:9b:8c:b9:b3:14:7c:95:
f2:e0:94:37:36:39:d0:00:7f:2a:47:fa:56:fe:bc:
97:44:45:44:97:99:cb:9e:aa:9c:07:bf:65:3a:b2:
de:2c:94:3a:fb:2f:be:8d:4e:5c:9a:a4:0c:9c:a8:
d1:59:4b:69:28:36:5e:6e:c5:91:54:8d:76:6a:e3:
d8:1d:87:bf:10:c4:a4:ff:ea:e1:39:25:e0:97:64:
04:9d:9c:21:73:30:f2:b7:99:86:35:11:a5:91:e3:
9c:09:66:6b:a2:9d:61:e4:99:a3:13:be:18:3f:c9:
c6:aa:77:72:12:fb:46:77:80:79:03:80:b9:df:c8:
32:ab:a5:09:1c:b4:c9:2d:7e:af:5f:f1:ee:1e:3c:
6a:32:d4:da:ce:bc:52:b2:a9:05:ca:33:1e:66:86:
07:1d:eb:2d:80:99:58:3c:63:e0:e5:88:00:d8:b1:
9c:9f:39:bd:c3:00:59:be:64:a4:19:6b:ba:74:4a:
e7:1f:01:54:45:f9:cc:df:29:f8:22:ab:4f:8a:30:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:5C:CB:EF:2C:8F:FC:AD:F5:D4:DB:D2:C6:6B:75:8D:5D:07:56
X509v3 Authority Key Identifier:
keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1a:d4:00:e2:31:23:f7:08:a5:08:e0:3f:4f:3a:a8:83:7c:
2b:2c:b0:25:10:4f:54:80:e7:a8:6b:23:ce:1d:f1:e2:63:2e:
16:09:4f:59:2e:93:8c:ec:75:56:d4:15:e7:74:2d:f1:90:27:
8e:f5:36:e9:c8:05:f7:57:d8:1a:e1:3f:50:09:7e:ca:20:55:
ff:0c:a4:f4:b3:cf:47:0f:88:3a:a6:bc:ea:95:32:44:23:f2:
76:af:1e:02:10:dc:b3:86:f0:e3:1c:3b:09:b2:60:68:91:4d:
4f:ab:6d:44:90:a9:03:01:b0:50:c1:7c:19:9b:b8:0a:29:e0:
85:af:34:98:79:3c:93:2d:11:2f:5c:7e:fb:61:e7:81:b9:55:
74:86:e3:bf:c4:07:d1:20:fc:35:7c:97:91:e9:8b:f6:11:1a:
f8:47:7f:d7:37:b4:a5:84:aa:90:83:82:04:2d:eb:60:7d:4d:
cb:f2:c5:73:f1:b8:8d:13:67:1d:33:cb:28:f1:98:ee:40:e6:
56:31:25:84:75:56:25:a8:7d:81:53:4b:e3:c1:62:58:a2:b8:
e2:ae:80:2d:6d:b7:25:2a:26:11:c9:52:0d:90:97:cc:7e:56:
36:0d:6e:cd:e1:1f:eb:75:7f:b3:61:53:ad:13:a1:1d:b7:48:
e8:7b:ef:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:32:25 2026 by rpki-client