
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json)
Hash identifier: wa2r8zwXJdiZcvbopP/7N0WAe04O0S3KNyIZBqqnd2w=
Subject key identifier: 4F:54:AE:77:6A:D5:B4:9E:1F:6F:5F:B6:55:0B:F4:03:21:F4:30:43
Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Certificate serial: 0C2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
Manifest number: 0C22
Signing time: Tue 22 Sep 2026 18:40:10 +0000
Manifest this update: Tue 22 Sep 2026 18:40:10 +0000
Manifest next update: Tue 29 Sep 2026 18:40:10 +0000
Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: /HOLBGRiUKr/TjFuUnNWCa8QXVc6ynjPiYuf9J/FzDM=)
2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: oSu7opmD3HBYoBwJbIsmMaGXMM1R4NMeIhfp2irZM0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3119 (0xc2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Validity
Not Before: Sep 22 18:40:10 2026 GMT
Not After : Sep 29 18:40:10 2026 GMT
Subject: CN=6ab2cb8a-4e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:45:1c:ae:c1:0b:0f:a2:ab:0e:d4:f7:ce:88:
df:46:70:94:7e:3f:1c:49:9e:98:e0:07:c8:78:48:
9b:a7:b3:6f:c6:4e:f6:20:2e:80:7e:a7:22:5d:37:
e2:ac:82:9b:8e:2a:e9:55:8b:49:1f:64:f8:36:93:
c0:49:08:01:2c:c7:d5:0f:29:ee:e1:1b:89:18:2d:
e2:74:78:e8:05:7a:a1:52:dc:7e:17:a4:fe:0a:b8:
fc:80:85:d2:d6:0f:47:d5:ce:09:c5:fa:b0:fa:cb:
04:8a:16:04:95:08:0a:e7:c8:d8:07:45:c4:29:8d:
34:9d:fe:ce:18:2c:ed:f2:55:7b:0f:39:fa:da:e2:
e9:1e:be:b8:86:87:11:3f:11:4e:1f:c5:8c:ee:1d:
c3:30:64:be:7e:ed:61:2d:1b:2e:94:de:6e:c3:01:
6b:cb:b8:a4:ad:f9:cf:50:51:30:10:ea:5c:fb:19:
51:74:d1:e8:37:f8:e8:ca:0d:e2:19:db:ef:1a:66:
33:f0:7f:02:b6:fa:11:b8:a6:59:27:e7:3f:a5:5d:
4a:a2:86:7b:1b:1f:34:4c:e6:97:29:ce:ee:97:c7:
c8:47:64:38:cf:13:39:a8:6a:27:2b:36:d5:0b:1a:
9e:da:bf:b7:c1:4c:f2:05:f9:35:09:37:0e:89:18:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:54:AE:77:6A:D5:B4:9E:1F:6F:5F:B6:55:0B:F4:03:21:F4:30:43
X509v3 Authority Key Identifier:
keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:3e:57:4a:7d:e6:c3:e4:f1:9e:3a:c2:12:29:37:8b:61:f8:
08:63:48:fa:a7:f3:f1:ec:48:70:b2:61:95:f8:07:64:c7:ad:
ff:5a:34:7c:02:47:be:e1:99:0c:a6:5d:6e:04:b9:3c:89:a0:
d7:f4:23:2e:10:b1:3e:49:5b:48:8d:86:86:13:81:19:d5:42:
1b:1e:7d:b4:da:30:c4:d2:ce:01:94:7a:ef:39:4e:16:aa:30:
a1:52:3c:83:17:96:97:a9:53:82:ca:4f:2a:10:35:cf:83:a5:
27:76:f1:29:1a:21:ba:41:6a:25:6a:8c:7b:be:20:44:30:44:
ef:68:42:be:db:f6:e0:9e:02:85:c0:b5:cc:04:e9:d2:35:51:
45:72:b2:26:ab:e0:68:61:4e:c2:6e:38:93:68:83:fe:53:ec:
ca:9b:38:8a:32:9b:d6:da:53:ec:8a:e7:9f:12:72:98:6c:a7:
f9:e4:b2:fd:a4:1e:33:d5:1a:47:dd:23:6f:c6:00:61:08:d4:
a7:84:02:6a:e8:bb:a6:67:ae:93:02:db:25:3b:6e:2c:c9:e7:
b1:d7:4e:bf:38:ad:f5:99:80:32:00:4e:1a:d9:88:66:03:46:
11:21:0c:dc:e9:34:85:e1:ed:05:d3:4e:1e:60:2a:07:7a:3f:
7f:ff:a6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:48:03 2026 by rpki-client