
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
File: 7LW7UwpypAlWiey7FY8q5e_pElU.mft (raw, json)
Hash identifier: 7Bi8j+PisUuODiHPCCerDVhv/8WRVaBfgZvd0SwzPfs=
Subject key identifier: E8:90:0A:E4:EC:64:A4:B1:28:E5:CC:65:23:0B:E8:82:DA:F1:76:49
Authority key identifier: EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55
Certificate issuer: /CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
Certificate serial: 357D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
Manifest number: 3579
Signing time: Tue 22 Sep 2026 15:05:32 +0000
Manifest this update: Tue 22 Sep 2026 15:05:31 +0000
Manifest next update: Tue 29 Sep 2026 15:05:31 +0000
Files and hashes: 1: 7LW7UwpypAlWiey7FY8q5e_pElU.crl (hash: 7mSW9O6U0lWdRJixP3/yVFpriQeuKbLDTWSHJ5+Bn1U=)
2: 56929F3A948D11F1AE18FA4A6611F970.roa (hash: PbTtA8TcQhv6+ggsOF9mf81T8e6tyt2mjKGu8rIUdWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl
rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13693 (0x357d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9FB9, serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255
Validity
Not Before: Sep 22 15:05:31 2026 GMT
Not After : Sep 29 15:05:31 2026 GMT
Subject: CN=6ab2993b-82f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:64:00:81:05:57:c0:49:8e:c2:3d:2f:44:
e4:71:76:c9:cf:33:f2:3f:c7:4e:a8:82:f6:ee:89:
f4:25:af:d5:ca:5d:c1:8f:8f:36:ac:a2:25:b3:0a:
bb:71:d5:da:9d:c6:fb:6f:cc:32:ce:6c:00:e1:1f:
4b:b1:13:b6:6f:f5:9b:40:6c:71:6e:e5:02:a8:70:
c5:7c:12:aa:33:6f:e6:30:16:4c:01:2c:1b:b2:38:
51:ea:3b:1f:f0:47:84:b5:6b:97:35:da:f0:a3:d5:
70:46:a0:45:3f:ef:bd:e1:ac:18:37:7c:8b:26:3a:
5b:cd:cc:b1:76:49:fa:f9:fd:6d:8e:ef:b0:e9:3b:
04:e4:7c:7e:60:3f:12:fa:e8:e1:6f:be:0c:60:15:
0d:52:0d:f5:65:3a:8d:f7:a9:cf:24:71:c1:2e:0c:
e9:11:a1:32:11:6d:bb:e1:fe:c2:1a:f1:62:ff:cd:
58:3a:48:4a:67:5b:23:a5:d2:f8:df:03:0b:e6:d5:
66:71:31:c0:fd:35:3e:8f:54:45:0e:ea:59:c5:54:
75:93:88:41:66:4a:97:5c:76:64:3d:8a:9b:47:27:
1d:39:3c:8c:b4:8d:bd:33:57:22:e9:df:20:30:33:
e9:24:c7:58:88:f4:45:70:4a:77:e7:04:2d:c1:e0:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:90:0A:E4:EC:64:A4:B1:28:E5:CC:65:23:0B:E8:82:DA:F1:76:49
X509v3 Authority Key Identifier:
keyid:EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:da:fd:9c:98:d1:77:6d:ee:64:ee:3a:78:da:e4:e2:f4:d8:
64:0c:43:c7:6d:3e:13:93:5d:5e:c5:2c:a4:b0:0f:d0:bd:7f:
ff:c5:71:b7:48:a0:60:cf:6a:8d:ed:f3:28:2f:fe:b4:72:4e:
9f:d7:e9:9a:0a:57:58:d2:f0:e5:86:85:25:9f:54:bb:62:b5:
49:32:20:f2:cb:67:e7:ab:a9:ee:2b:92:f7:0a:f3:25:74:cb:
db:cb:c1:df:bd:38:95:ce:81:d4:ea:c7:8c:ec:44:06:05:6c:
dc:e8:6a:1a:08:26:9c:25:b9:ed:8e:29:c9:b9:e9:1a:be:52:
34:50:2b:28:b6:63:69:2b:91:cf:b7:a9:86:3b:73:5a:7d:c4:
0e:fe:23:fc:8d:8a:5d:af:f4:c0:28:a6:d8:95:a7:bb:aa:74:
13:9b:0e:7b:c8:53:54:2d:47:7b:70:b3:fe:18:62:c2:66:41:
fb:0a:11:d1:79:fb:be:9d:fb:1d:7f:95:3e:8c:3e:87:87:ff:
3a:4e:fa:f5:34:df:5b:09:dc:55:54:6c:89:da:69:fa:de:8c:
76:56:85:8e:dd:85:22:c1:c7:c0:37:dd:f6:9d:41:c4:bb:bd:
83:43:b4:be:9f:75:09:ca:6b:b3:b2:1a:50:9c:73:58:38:3c:
14:f1:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:56:07 2026 by rpki-client