
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json)
Hash identifier: hpspMlPohWHNWxHpLQiviWxVehtr/OTQ0pOHC6GZdzM=
Subject key identifier: 85:46:CD:A9:AF:31:EC:0D:6F:CD:C7:65:F7:AC:31:48:7F:7D:BB:AE
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial: 1583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
Manifest number: 155F
Signing time: Sat 26 Sep 2026 16:51:14 +0000
Manifest this update: Sat 26 Sep 2026 16:51:14 +0000
Manifest next update: Sat 03 Oct 2026 16:51:14 +0000
Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: 83AWy9lSO7nOJWV+Lfz3E3JIlajXWlsMNOUzfRKD5L4=)
2: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: 9thasJHdgQQ3RXCs+BHPjiNfWZD4NYRuTQ+ayukgtLg=)
3: A0375A56964511EF9481CA74C4F9AE02.roa (hash: iHRpBY8mTgfogKkV6RLUH1pT9Rubnqiw6gX0z2kYfjk=)
4: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: UOD9amObCmIqDiXfNM0JkH+AqrUmQZuay9hIXFnISTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 16:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5507 (0x1583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Validity
Not Before: Sep 26 16:51:14 2026 GMT
Not After : Oct 3 16:51:14 2026 GMT
Subject: CN=6ab7f802-0408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:77:97:ae:66:83:8b:18:1d:84:00:0e:30:
c0:19:52:d8:3f:a5:09:65:85:fe:77:0f:8b:24:5b:
62:1f:9e:16:f8:58:ce:ec:12:82:a7:8f:95:53:58:
80:35:f6:db:4d:3e:de:cd:95:cd:0c:3b:2c:f6:01:
d4:da:e1:6e:c8:4b:fc:75:e9:0c:69:1e:9b:57:b3:
77:34:0b:0d:1f:96:dd:3c:6b:cf:0b:45:db:50:94:
15:16:41:9c:36:89:05:35:e7:73:8f:ac:95:e4:97:
60:e3:69:f3:b9:d2:94:aa:3d:c2:08:25:d4:8b:ea:
42:c8:97:be:2b:7f:58:99:28:03:a1:91:29:8b:16:
f2:be:e7:95:3e:50:68:43:a8:14:6d:9e:7a:21:00:
c6:9c:b1:f0:33:4d:6f:b5:b7:42:a5:25:f3:87:21:
cb:bf:16:b9:56:be:53:51:71:bc:59:bf:d4:ce:aa:
0c:1e:2a:6b:08:1c:35:07:cd:6d:f9:aa:72:88:a3:
8c:57:af:45:1b:34:0f:73:c8:5e:ca:ac:11:6f:b3:
89:f1:63:5e:39:a3:ce:17:b4:55:d5:90:6e:bb:57:
75:75:0d:ae:9e:d3:47:db:5d:7f:c1:14:c3:9a:9d:
5e:a1:9a:66:74:d0:16:ce:f4:09:01:16:4a:5f:b0:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:CD:A9:AF:31:EC:0D:6F:CD:C7:65:F7:AC:31:48:7F:7D:BB:AE
X509v3 Authority Key Identifier:
keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5d:72:f5:5f:80:3a:44:c0:8d:3b:d8:7f:4c:bf:e2:d0:e2:
bc:0e:fb:25:cd:87:40:ef:a6:2d:d3:ab:fa:17:86:46:3a:26:
db:36:a6:ba:18:5b:f1:ee:b2:3c:cf:3c:c6:6f:b2:23:3b:68:
c8:9b:75:50:f1:a3:85:2f:d4:f0:ae:b6:a4:89:26:25:24:af:
45:24:f2:72:28:93:57:2b:55:de:aa:ae:18:b9:79:46:24:f3:
d1:d4:b0:7b:41:8e:5c:b9:97:3a:81:65:8e:3a:ce:a0:e5:c4:
51:7f:d7:d8:2c:9f:4d:9a:0d:87:ca:2d:1b:14:cf:a5:01:c3:
82:d9:7a:25:02:31:97:a3:43:be:37:64:72:55:99:6e:4d:90:
be:3f:b9:5f:17:a3:98:a4:ee:66:ae:95:bf:32:32:51:b0:3e:
b3:46:8e:3f:d3:56:a9:00:be:ea:2e:c3:6e:61:5a:a9:16:b8:
c3:8f:bf:d6:9f:f0:28:16:93:f9:ba:09:ed:3f:08:fa:3d:45:
8c:5d:60:2b:79:5d:be:7b:3e:f0:f2:34:14:57:ca:53:ca:16:
a7:f0:da:5a:69:29:ee:6d:ec:59:e4:c9:ec:51:4a:e0:1c:30:
4f:e0:49:06:96:73:15:b4:29:cb:8a:bd:99:e7:1f:14:aa:8d:
ab:43:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:32:14 2026 by rpki-client