
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
File: 7tKAkYf96vxUeKw6tWpqtPnBvUY.mft (raw, json)
Hash identifier: CVgtQEZ5a68ayleT7/EHtfnCczqwLZq3eZ/sAEBkTbs=
Subject key identifier: 90:75:3F:9D:DC:B1:55:C8:10:E7:D0:1C:9C:C2:28:84:42:F6:DD:13
Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46
Certificate issuer: /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
Manifest number: 81
Signing time: Mon 21 Sep 2026 07:42:33 +0000
Manifest this update: Mon 21 Sep 2026 07:42:33 +0000
Manifest next update: Mon 28 Sep 2026 07:42:33 +0000
Files and hashes: 1: 7tKAkYf96vxUeKw6tWpqtPnBvUY.crl (hash: CimeR7rK5Fw7tfBOP3VBElCYDdMupuxsgqXk+lPIiZs=)
2: 856BB842F51811F093E49DB5586F56BC.roa (hash: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl
rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46
Validity
Not Before: Sep 21 07:42:33 2026 GMT
Not After : Sep 28 07:42:33 2026 GMT
Subject: CN=6ab0dfe9-718f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:8a:74:cc:7c:11:32:5c:b1:aa:da:cc:3a:
fa:87:2d:d6:0e:d6:39:9e:9a:f8:19:d3:68:5f:95:
4c:4a:8f:be:0f:58:6a:ca:28:10:77:15:bb:e5:85:
7f:00:08:6a:b3:64:ee:91:03:a6:4c:71:40:8d:bb:
1a:de:1f:96:9e:49:0d:ab:cf:dd:67:89:9c:de:ee:
73:65:50:72:71:a3:c1:8c:63:be:32:a9:fb:b5:64:
64:57:e1:87:ae:7c:01:3b:80:67:0a:91:20:66:ad:
71:af:83:fc:cf:13:16:7f:31:97:e9:a5:d3:f7:81:
05:4d:3f:aa:36:7a:5d:18:23:e3:a6:f2:fc:0e:ec:
29:cb:f3:cc:e9:82:5f:15:a6:e9:b4:47:c5:0b:5a:
10:93:08:0d:8a:66:8f:cc:78:6b:c8:03:54:41:02:
3e:1b:17:f8:ec:9a:df:87:f3:cc:6b:55:d5:b2:df:
be:a6:a1:01:25:b3:b3:bf:e1:e4:f7:5d:22:b0:62:
8f:37:f4:1c:57:d4:74:e1:5c:06:be:23:ec:a8:0f:
ad:ec:1e:88:f7:30:00:53:b8:33:19:01:fa:59:c6:
1e:a3:7d:fe:d2:48:46:36:2a:36:c3:31:c5:4d:de:
eb:5b:7d:a5:07:32:20:b8:ff:2c:c5:ff:b9:ec:c8:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:75:3F:9D:DC:B1:55:C8:10:E7:D0:1C:9C:C2:28:84:42:F6:DD:13
X509v3 Authority Key Identifier:
keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d8:b0:5a:e1:16:52:86:45:94:89:0b:65:46:e1:9d:ed:6f:
45:87:ad:98:f6:74:ef:fd:23:2b:d0:8b:de:aa:22:25:36:38:
28:b8:a2:ee:27:9e:a7:49:da:5f:eb:26:e8:d5:8f:7d:08:22:
d2:78:64:fb:9d:eb:3d:c7:97:95:a8:15:68:9e:b1:28:68:ef:
1f:e7:e6:34:3e:88:30:c0:99:05:09:e4:5a:e4:78:cf:4c:09:
f5:25:da:9c:f4:83:fb:8b:fb:10:e6:81:13:7c:8a:08:b7:55:
48:5a:cb:58:b5:5c:50:4a:36:73:df:11:5a:1f:22:e2:9f:a7:
98:75:05:be:59:b6:41:e6:a0:f4:b2:53:b7:59:2a:51:41:5b:
28:57:1b:42:ae:73:9e:fe:d1:13:6f:d6:83:b2:ed:3b:ff:4c:
63:5c:cb:de:04:ae:c3:f2:c2:fd:dc:40:7e:1c:03:19:fd:53:
20:70:ef:9f:04:49:33:60:49:7d:59:7d:69:d7:a2:fb:f8:73:
dc:91:0b:51:19:36:5e:d9:f7:f0:d3:49:c6:94:eb:df:c2:6a:
fc:43:aa:41:13:4e:5e:c7:69:10:a5:bb:4a:33:c6:66:ff:31:
ba:26:26:fa:85:4e:c3:d4:8f:39:9a:b8:23:f7:d4:bf:60:fb:
0e:f5:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:18:28 2026 by rpki-client