
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
File: l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json)
Hash identifier: vRgBOvEgnW05Xp5n0kF83HPmVy2siRlGdTlwxRhQjF8=
Subject key identifier: FC:99:05:44:44:9D:D7:E5:1D:93:65:CC:DC:B1:D1:27:5A:30:14:9B
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Certificate issuer: /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
Manifest number: 82
Signing time: Tue 27 Oct 2026 08:02:15 +0000
Manifest this update: Tue 27 Oct 2026 08:02:14 +0000
Manifest next update: Tue 03 Nov 2026 08:02:14 +0000
Files and hashes: 1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: RdBQkqBJLmzuJsN0LhHf1U4VZquypt6/XNgZ/AmfMYs=)
2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Validity
Not Before: Oct 27 08:02:14 2026 GMT
Not After : Nov 3 08:02:14 2026 GMT
Subject: CN=6ae05a87-d023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a3:c3:bb:bd:1a:4a:b0:fa:bb:2a:c3:9b:0d:
30:bc:59:a4:dd:aa:a2:b0:ca:f4:87:04:b2:2b:ca:
72:6f:52:db:ee:67:70:5f:f5:46:31:8c:a5:fb:23:
c6:5f:b7:91:e5:83:44:95:f8:ae:2b:fd:78:c8:70:
4b:d3:2e:da:f5:e7:aa:63:d4:eb:be:87:30:43:17:
ab:8c:df:b7:fa:fb:d0:72:8d:09:bf:e3:e0:79:8a:
cf:8a:7f:f9:84:06:30:8f:eb:15:c2:d1:e3:97:0b:
c3:8f:08:bc:5c:d7:2d:e0:a5:27:ea:d2:56:c2:71:
99:dd:25:a9:69:fe:ce:3f:e5:0a:56:91:06:9d:d1:
48:25:a9:8b:34:48:ab:02:30:38:9e:01:01:99:c0:
d4:75:48:8a:af:13:18:06:c0:70:a9:e4:dc:67:19:
8f:ed:9c:8a:dd:6e:a7:4d:e7:4f:77:4b:a4:b4:71:
be:52:50:f9:16:76:f4:0e:9a:5f:4d:0b:ff:d5:8f:
18:a6:e6:51:33:e3:86:2d:98:84:15:72:ac:7a:ff:
1e:ff:4b:6b:9b:dd:84:ee:a9:7a:57:09:ea:cb:ae:
91:33:c8:7d:b8:aa:62:a1:5f:ce:6f:4b:c3:69:22:
5a:62:06:53:04:a3:d5:31:d9:76:96:cc:8e:a0:9b:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:05:44:44:9D:D7:E5:1D:93:65:CC:DC:B1:D1:27:5A:30:14:9B
X509v3 Authority Key Identifier:
keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:33:ca:9d:9a:f5:cb:de:68:75:da:b6:50:50:45:ec:86:18:
cf:8a:25:1d:d5:3b:97:4c:8e:37:78:dd:fd:d9:51:ac:9c:7f:
ca:d1:ec:5c:7d:04:94:c0:b2:80:9e:3d:12:e2:5a:b6:2b:de:
54:6a:2b:66:1d:21:b4:eb:d6:6b:ec:2e:17:2d:a7:e4:65:5a:
00:3c:3e:c2:3b:5b:d0:d5:ba:49:f6:f1:e9:57:10:8f:38:3a:
80:4c:c8:ae:71:73:7a:bd:5a:70:b4:e3:ff:28:9e:da:fd:72:
35:95:c5:36:66:f6:cb:fb:dd:2a:c7:4f:54:25:67:9d:04:65:
c9:86:c8:c8:72:de:87:61:42:e6:80:24:78:cf:63:16:d6:b5:
83:e9:f7:36:ab:63:9b:73:ec:7b:ae:0e:25:49:44:7c:10:ff:
38:cb:4c:e1:21:c9:a5:bd:bf:e7:6f:66:36:6c:2e:ee:8e:19:
7c:44:26:03:4c:07:8a:d7:c4:43:f2:82:58:ec:54:dd:55:ec:
d3:f0:28:0f:2c:98:69:e1:55:0c:17:b0:2e:41:92:3b:da:e8:
2e:69:40:2f:30:62:9b:53:3a:f9:5e:8d:2f:68:9f:32:dc:d3:
ee:bf:89:cd:2b:06:b2:f6:83:97:0d:1e:c3:02:66:de:de:9a:
eb:69:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:40:23 2026 by rpki-client