
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File: R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier: fhc3Td/zvtzn/BT491dXcF4KJOCUcJP9ECiYtxbCLFA=
Subject key identifier: 18:A3:6F:B4:9C:77:F3:86:74:0E:72:F2:1E:E4:83:9D:C0:EF:52:2C
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer: /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number: C2
Signing time: Wed 07 Oct 2026 07:22:23 +0000
Manifest this update: Wed 07 Oct 2026 07:22:22 +0000
Manifest next update: Wed 14 Oct 2026 07:22:22 +0000
Files and hashes: 1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: qomX+tGyeQ5D0hNm3ZhWV30njoHZpKV7Rp0A2oBvuyg=)
2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: 1Vca/T8ggjOA5o9QtjoKhFaIwHS9DNFGX+kUo9lU2bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Validity
Not Before: Oct 7 07:22:22 2026 GMT
Not After : Oct 14 07:22:22 2026 GMT
Subject: CN=6ac5f32f-1c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:a6:35:77:9d:85:53:9e:9a:5d:c3:df:57:
b1:d7:ac:66:6b:3d:53:04:52:e9:4b:12:4f:73:17:
32:07:a8:a9:2c:74:a8:32:44:ec:c0:7f:bc:6b:db:
8a:d5:f3:6d:23:35:6c:26:e6:5e:73:56:b7:94:60:
b7:5e:a8:6b:2b:a9:55:12:51:4f:ca:70:d7:2b:8c:
0f:c8:0c:8b:a1:35:40:3b:48:d1:f7:eb:d6:22:6d:
5f:c3:5c:84:25:b5:4b:3a:8f:d3:32:a4:ef:fb:c1:
a3:ad:a8:fb:1c:a5:00:96:d3:61:d1:16:ae:e2:93:
ab:b0:b7:0d:32:54:ba:9f:18:8f:4f:f9:05:b2:c9:
33:ac:ec:a1:f8:fc:42:2f:8a:ac:cd:a9:f0:84:36:
87:47:fa:c8:a0:b9:cb:0d:e4:56:d9:0f:16:de:65:
d1:4a:85:49:e9:3f:73:8b:ca:8b:a1:6b:86:db:dc:
c4:38:e8:ab:6d:f6:77:7e:34:d8:7e:46:c8:64:d6:
b4:5f:24:59:2a:f4:65:93:2f:e9:77:de:ba:9e:81:
15:fe:61:98:91:39:84:c4:4a:e5:87:7c:37:30:4a:
86:84:58:e2:1d:5e:24:b0:1c:10:30:d8:ce:c4:a3:
34:e0:80:73:47:7b:39:82:d9:ce:b3:ec:dc:59:fe:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A3:6F:B4:9C:77:F3:86:74:0E:72:F2:1E:E4:83:9D:C0:EF:52:2C
X509v3 Authority Key Identifier:
keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d7:c7:21:5c:c3:a5:84:36:b9:7d:57:22:c0:6f:a7:25:11:
1f:72:aa:5c:b1:d5:18:16:88:62:cd:c8:82:8a:22:4f:2e:d1:
2d:67:6a:d9:f3:da:fd:67:2c:97:11:0d:dc:bb:67:db:c3:1a:
1d:90:dc:d6:d3:17:ac:26:c7:45:1a:6a:66:c8:9c:92:95:9d:
bd:ea:5c:38:54:74:ce:88:76:96:49:e4:90:8f:1e:71:f4:ac:
c7:76:e3:7e:b5:3c:f1:10:c9:a0:4b:de:a8:49:db:32:8e:3e:
f5:88:91:22:29:92:67:f7:2d:16:8d:76:66:1e:49:ee:9d:ae:
3b:96:32:53:e3:0e:2e:b2:89:70:75:0c:13:d4:04:5e:85:20:
b4:4f:b2:91:9e:86:2b:b6:d1:02:3a:d9:1e:2f:83:55:ff:40:
89:02:68:bc:81:0f:d3:25:8c:bd:54:f0:ff:6e:00:e9:74:55:
21:8f:9d:15:16:73:01:2b:b4:51:41:ec:9b:1e:1b:ac:ec:3f:
4f:dd:e8:a8:5f:d3:20:07:7a:2b:43:72:84:cd:46:da:59:77:
bf:55:d4:ae:d3:0b:dc:e3:90:64:50:cd:fb:e7:57:0c:e3:c9:
8e:62:bb:37:6f:33:33:b9:f8:6f:eb:d7:e1:10:63:4b:36:ea:
da:4c:9e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:38:41 2026 by rpki-client