
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
File: 7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json)
Hash identifier: 2GA55Saa1RsTwZ1d4pxMn4Fu4hQ1p2JIHb3EDxFmPWQ=
Subject key identifier: 23:CB:BF:BB:DB:ED:C5:86:D5:9C:5A:D3:F3:70:DB:FC:FB:A8:D5:AB
Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40
Certificate issuer: /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
Certificate serial: 02D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
Manifest number: 02CB
Signing time: Mon 21 Sep 2026 01:20:40 +0000
Manifest this update: Mon 21 Sep 2026 01:20:39 +0000
Manifest next update: Mon 28 Sep 2026 01:20:39 +0000
Files and hashes: 1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: hB8yR38xHBl/M1KsDzLeo24JHp63vfjQOSgFSOZHXU0=)
2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: 05qrx5y7Td7SV3Ez+kyc5rGnUR1hyfqb/ezkRc89p2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl
rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140
Validity
Not Before: Sep 21 01:20:39 2026 GMT
Not After : Sep 28 01:20:39 2026 GMT
Subject: CN=6ab08668-42c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:37:3c:f4:7a:46:47:5f:75:e6:55:7d:17:
33:78:8d:73:39:81:23:26:cf:2d:0b:5a:40:df:1a:
ad:40:fc:00:5b:24:fa:d6:9c:cd:6a:ee:11:2a:ee:
35:db:06:ba:02:39:c6:f6:7a:65:02:8f:36:0f:f9:
9e:da:ae:ac:a4:06:49:95:1f:c1:cb:9a:da:e8:6a:
bc:87:7d:ea:98:a6:22:3b:6c:9d:47:f5:5e:73:21:
da:1a:68:c7:b3:74:d0:87:96:73:7c:35:1d:25:1d:
9e:f1:bd:81:a5:0a:56:c1:ca:44:51:23:63:4f:14:
0f:4a:e3:44:2e:23:47:93:b7:c2:b7:a0:2a:42:4d:
21:e1:08:10:3f:b2:ef:d9:4a:9c:5a:a5:f0:ac:07:
fa:cf:f6:7e:7b:79:b8:ac:14:3e:00:d5:2e:88:b6:
79:81:09:63:7c:98:90:b7:89:07:43:4e:7a:ab:cf:
ce:81:a7:8b:20:e3:b6:1d:d4:85:16:59:c6:6a:08:
6f:ae:bc:fe:b2:94:76:d6:f2:12:66:b3:2b:4f:5f:
06:52:cf:f3:68:00:58:43:a4:59:2d:30:d0:9c:2a:
37:85:ae:23:bd:0e:15:cd:ad:bd:b3:6d:ef:36:35:
c4:d5:c9:a5:0b:74:94:9e:fe:32:a8:d7:2b:78:45:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CB:BF:BB:DB:ED:C5:86:D5:9C:5A:D3:F3:70:DB:FC:FB:A8:D5:AB
X509v3 Authority Key Identifier:
keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4b:e7:40:fc:a3:01:7c:08:f1:c7:5b:a6:7f:cc:a5:3d:0d:
a4:9c:00:c7:24:d8:1b:0b:60:41:f3:ea:6c:05:f4:80:e7:c4:
e4:16:a6:28:aa:38:61:48:af:88:31:c2:4e:a6:3d:51:f3:4e:
b4:33:be:d7:88:8f:41:84:9f:60:16:70:2f:f7:e9:4f:87:31:
7c:c7:d9:ef:ec:fd:c5:94:c4:f9:0a:86:0c:72:21:2b:80:9a:
ed:c5:7d:79:11:6c:fa:aa:f0:a0:d6:0a:fc:a5:51:fe:00:91:
b3:1d:9a:8c:83:b2:74:3d:bb:27:33:23:92:b9:bf:c6:3a:9e:
90:7a:fb:2c:ef:a0:0b:a1:eb:c6:8e:0f:ca:7c:8b:f5:8f:ac:
f2:b9:31:43:24:7a:11:81:d9:27:fe:c4:61:25:74:a4:6e:d4:
bb:3a:6d:c3:71:a3:b1:8b:e9:ef:f9:ca:99:7c:b7:05:de:a1:
2b:75:f6:40:22:01:21:f4:c5:0d:0e:6a:54:d9:ad:90:4a:c8:
bc:a4:17:14:eb:f8:65:b9:8e:a6:99:58:6a:43:f3:5f:e0:46:
c2:f5:d2:c2:60:b3:80:91:55:a1:bd:8b:6b:e7:b5:5b:db:c7:
66:5c:0c:97:05:1c:cf:b5:02:ea:55:33:16:84:02:ea:07:4a:
da:1a:ea:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc2OTExMTAvBgNVBAUTKEVDMEM5QTU4Q0IwQUNENDI3M0I0NUUxQjkxODEzQkZG
RkZEMDgxNDAwHhcNMjYwOTIxMDEyMDM5WhcNMjYwOTI4MDEyMDM5WjAYMRYwFAYD
VQQDEw02YWIwODY2OC00MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoFc3PPR6RkdfdeZVfRczeI1zOYEjJs8tC1pA3xqtQPwAWyT61pzNau4RKu41
2wa6AjnG9nplAo82D/me2q6spAZJlR/By5ra6Gq8h33qmKYiO2ydR/VecyHaGmjH
s3TQh5ZzfDUdJR2e8b2BpQpWwcpEUSNjTxQPSuNELiNHk7fCt6AqQk0h4QgQP7Lv
2UqcWqXwrAf6z/Z+e3m4rBQ+ANUuiLZ5gQljfJiQt4kHQ056q8/OgaeLIOO2HdSF
FlnGaghvrrz+spR21vISZrMrT18GUs/zaABYQ6RZLTDQnCo3ha4jvQ4Vza29s23v
NjXE1cmlC3SUnv4yqNcreEXdAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPLv7vb
7cWG1Zxa0/Nw2/z7qNWrMB8GA1UdIwQYMBaAFOwMmljLCs1Cc7ReG5GBO///0IFA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzY5MS84MjE2NEQwNDdE
NTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pVSnp0RjRia1lFN19fX1Fn
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdBeWFXTXNLelVKenRGNGJrWUU3X19fUWdVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzY5MS84MjE2NEQwNDdENTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pV
Snp0RjRia1lFN19fX1FnVUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtEvnQPyjAXwI8cdbpn/MpT0NpJwAxyTYGwtgQfPqbAX0gOfE5BamKKo4YUiv
iDHCTqY9UfNOtDO+14iPQYSfYBZwL/fpT4cxfMfZ7+z9xZTE+QqGDHIhK4Ca7cV9
eRFs+qrwoNYK/KVR/gCRsx2ajIOydD27JzMjkrm/xjqekHr7LO+gC6Hrxo4PynyL
9Y+s8rkxQyR6EYHZJ/7EYSV0pG7Uuzptw3GjsYvp7/nKmXy3Bd6hK3X2QCIBIfTF
DQ5qVNmtkErIvKQXFOv4ZbmOpplYakPzX+BGwvXSwmCzgJFVob2La+e1W9vHZlwM
lwUcz7UC6lUzFoQC6gdK2hrq1A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:53:38 2026 by rpki-client