
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json)
Hash identifier: vDmBAuqKkIetNABK6EWQuoU0r00bxtUZd2mET47SL+I=
Subject key identifier: 2C:DC:FE:E9:26:84:2E:F7:2B:9D:9C:DC:B3:21:41:82:EB:32:6D:CC
Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
Manifest number: 021A
Signing time: Tue 29 Sep 2026 03:17:46 +0000
Manifest this update: Tue 29 Sep 2026 03:17:46 +0000
Manifest next update: Tue 06 Oct 2026 03:17:46 +0000
Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: lwGX4yp18mbqM5CBLj0YeVegLedwn5/eNpZ6+WfSJlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 03:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Validity
Not Before: Sep 29 03:17:46 2026 GMT
Not After : Oct 6 03:17:46 2026 GMT
Subject: CN=6abb2dda-a529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:22:45:55:91:53:02:36:2c:02:21:82:ee:
3b:70:6f:aa:49:cc:40:12:ab:a7:4f:49:f4:d6:68:
e7:10:5f:b4:7a:04:00:08:93:b3:7a:4d:51:3c:fa:
14:3b:14:d3:7c:ce:b4:e3:21:3c:86:52:12:20:2b:
35:fa:58:c6:16:55:96:f6:5d:35:b9:35:1c:0b:04:
56:6a:e2:3d:36:91:29:98:a6:e2:4f:34:d8:35:ec:
db:2c:8f:38:6d:5a:11:d9:af:ba:30:21:68:e5:dd:
f7:75:1f:e6:a0:d8:46:7b:d8:eb:a1:36:bc:7c:93:
4e:d8:07:8e:cf:d4:31:3e:9f:75:f3:0d:86:9e:6b:
ef:3c:e5:76:06:f5:5e:97:29:98:35:d6:9c:33:b4:
ec:d7:86:1d:6c:45:c5:c0:d6:04:7c:f3:5b:0e:22:
93:e2:c2:c8:a8:6e:aa:0d:b0:58:5a:14:64:6c:8d:
14:95:cd:40:be:e2:ad:55:60:2c:2d:cc:86:1b:6a:
5d:e0:dd:74:6f:2a:91:1c:a9:2f:51:88:f3:9f:93:
51:61:79:26:3d:c7:2b:77:d7:85:04:38:6e:83:ad:
4a:5f:47:54:fb:a1:d7:4b:14:4c:fa:03:f3:4c:a6:
ff:95:4f:39:07:56:d5:14:cf:d9:1e:3e:95:ab:b8:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DC:FE:E9:26:84:2E:F7:2B:9D:9C:DC:B3:21:41:82:EB:32:6D:CC
X509v3 Authority Key Identifier:
keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0f:c6:6e:82:f9:ee:54:59:74:2a:5a:64:6a:a8:3c:cc:eb:
56:2f:26:f6:d1:d0:a3:c2:fc:c0:87:ed:e1:11:dd:b4:34:d5:
08:fa:27:20:7c:9a:8b:f5:02:92:e6:08:25:2c:9f:de:33:ce:
98:28:32:02:61:c3:7d:f9:84:93:da:ec:8c:b5:04:8b:40:3f:
11:37:82:76:c9:08:8c:10:64:5a:b0:fa:65:77:f5:dd:a3:03:
98:20:99:79:2d:8c:cc:81:ac:77:70:cc:88:47:bd:79:48:6c:
c9:7f:5b:86:32:76:19:29:94:48:8a:8a:ab:e1:55:1a:b8:d1:
67:c3:c7:37:e6:2a:8b:a2:14:be:21:3f:ac:18:20:c9:03:c5:
4a:88:6b:ad:9f:24:fa:45:3e:5f:95:ce:e2:36:ed:ed:58:40:
a8:93:df:6b:5a:9e:d0:bd:2a:26:34:47:b4:d6:2f:6d:73:fb:
f6:7a:07:0c:fe:f6:1a:05:98:a0:8d:5c:c0:ec:96:e5:eb:71:
bd:f5:36:21:66:78:eb:c8:d7:09:c9:cf:94:2a:e0:aa:4a:2d:
5f:f3:3a:96:e8:70:24:cc:7a:5a:b4:00:0a:14:c8:21:b6:f6:
0b:50:4d:d0:0e:f7:73:92:d4:ba:7b:9a:55:91:1c:3b:d0:d4:
6c:81:6f:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgyRjAxMTAvBgNVBAUTKEVFRTlFMTBDMjkxRTU2QzgyRDc3MDcyMDEwQjBFNTgw
MDgzRkU3MjkwHhcNMjYwOTI5MDMxNzQ2WhcNMjYxMDA2MDMxNzQ2WjAYMRYwFAYD
VQQDEw02YWJiMmRkYS1hNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxfMiRVWRUwI2LAIhgu47cG+qScxAEqunT0n01mjnEF+0egQACJOzek1RPPoU
OxTTfM604yE8hlISICs1+ljGFlWW9l01uTUcCwRWauI9NpEpmKbiTzTYNezbLI84
bVoR2a+6MCFo5d33dR/moNhGe9jroTa8fJNO2AeOz9QxPp918w2GnmvvPOV2BvVe
lymYNdacM7Ts14YdbEXFwNYEfPNbDiKT4sLIqG6qDbBYWhRkbI0Ulc1AvuKtVWAs
LcyGG2pd4N10byqRHKkvUYjzn5NRYXkmPccrd9eFBDhug61KX0dU+6HXSxRM+gPz
TKb/lU85B1bVFM/ZHj6Vq7jHCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzc/ukm
hC73K52c3LMhQYLrMm3MMB8GA1UdIwQYMBaAFO7p4QwpHlbILXcHIBCw5YAIP+cp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJGMC81QzU3RTVDMDgy
ODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZzZ3Rkd2NnRUxEbGdBZ181
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzd1bmhEQ2tlVnNndGR3Y2dFTERsZ0FnXzV5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODJGMC81QzU3RTVDMDgyODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZz
Z3Rkd2NnRUxEbGdBZ181eWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqg/GboL57lRZdCpaZGqoPMzrVi8m9tHQo8L8wIft4RHdtDTVCPonIHyai/UC
kuYIJSyf3jPOmCgyAmHDffmEk9rsjLUEi0A/ETeCdskIjBBkWrD6ZXf13aMDmCCZ
eS2MzIGsd3DMiEe9eUhsyX9bhjJ2GSmUSIqKq+FVGrjRZ8PHN+Yqi6IUviE/rBgg
yQPFSohrrZ8k+kU+X5XO4jbt7VhAqJPfa1qe0L0qJjRHtNYvbXP79noHDP72GgWY
oI1cwOyW5etxvfU2IWZ468jXCcnPlCrgqkotX/M6luhwJMx6WrQAChTIIbb2C1BN
0A73c5LUunuaVZEcO9DUbIFvLg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 07:13:11 2026 by rpki-client