
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
File: s-7PFnJWFEpGodq0i4CA15DSBDw.mft (raw, json)
Hash identifier: vtMjBuJ05EyqenFyrNRHXkWJnD+uWiXJkaruvQssRmA=
Subject key identifier: B5:FC:90:96:00:ED:49:13:02:88:C7:E3:7B:D8:59:94:C3:FC:97:10
Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C
Certificate issuer: /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
Manifest number: 0103
Signing time: Tue 29 Sep 2026 06:40:59 +0000
Manifest this update: Tue 29 Sep 2026 06:40:59 +0000
Manifest next update: Tue 06 Oct 2026 06:40:59 +0000
Files and hashes: 1: s-7PFnJWFEpGodq0i4CA15DSBDw.crl (hash: QX/2ANANYE/p4/HWRcEfGDAtbak+AEkmpDVGHgJ4aAU=)
2: 0IKIb2mx42LyrM7CVy9TVbI7mQ8.asa (hash: MhPB3SU2pkSQoUZ/DtmHH4nqFvDTkvSrSDEv/zO7m0M=)
3: E32B7E6E348811F0ABE70D36C4F9AE02.roa (hash: bpsElpWAfttAlw1MU5HfRRt7txL5XI5CkjdzcBwhBVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl
rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 06:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C
Validity
Not Before: Sep 29 06:40:59 2026 GMT
Not After : Oct 6 06:40:59 2026 GMT
Subject: CN=6abb5d7b-aecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:1b:3e:b2:27:f9:da:9d:b4:13:7e:28:22:
8e:d5:e1:8d:43:93:fa:74:05:64:44:1a:0b:39:b1:
66:c4:57:38:c0:20:7f:3c:71:49:d9:bd:bf:41:74:
ca:71:62:b2:5d:77:ba:a7:fc:41:1f:a0:96:25:51:
80:e2:26:79:6e:e3:ee:a3:2b:aa:ab:59:dd:25:10:
b2:81:95:87:e0:e5:1e:e2:48:d7:c8:50:9b:ee:48:
b4:74:e6:00:82:45:7c:e3:da:43:70:c6:14:0e:5e:
45:0a:96:85:f9:f2:6f:42:ed:5f:a1:97:ad:ed:9b:
ce:49:a3:66:8a:81:19:19:b3:0e:39:5c:1c:11:9f:
bd:5b:a1:6d:ca:38:5b:bd:2f:a8:99:67:4e:57:a3:
5c:c4:be:f7:ca:d3:5e:05:d4:12:00:46:23:6f:5e:
f2:ea:c2:66:3b:fb:27:48:4c:ed:12:20:35:c9:dc:
35:33:fc:b4:e7:f9:88:f0:5a:62:5e:ad:6e:8b:48:
b3:41:38:41:ab:32:68:ad:dd:19:e1:b9:4d:e2:7f:
37:92:38:91:87:50:91:9b:fa:4b:69:68:ea:cb:ce:
db:c9:89:fa:57:18:4c:9b:4a:73:27:2e:b0:ab:8f:
87:c2:eb:48:60:13:7c:29:7d:2f:8d:9b:65:95:86:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FC:90:96:00:ED:49:13:02:88:C7:E3:7B:D8:59:94:C3:FC:97:10
X509v3 Authority Key Identifier:
keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:8d:82:6d:5b:df:98:3e:9f:a4:cd:3a:4a:3a:7d:32:41:
88:44:3b:84:34:e7:34:83:c3:7d:6a:4f:45:84:a1:22:ed:8f:
7c:2c:52:bd:74:b8:96:bb:ea:62:2b:22:42:cd:29:b4:d6:74:
90:2d:e1:30:e5:f7:6e:a9:a3:98:2a:c9:9d:aa:c3:da:5e:fc:
ec:cb:c5:1b:a8:5a:36:9d:90:84:8f:16:f5:d6:e1:2d:d9:c1:
6e:a5:33:be:25:4f:1e:5b:19:0d:d6:8f:51:7c:58:44:a8:99:
d9:71:70:ff:2b:23:05:d8:72:aa:51:ef:0b:b7:fc:ab:c1:88:
e9:01:d2:19:19:96:3a:f8:11:2a:cb:10:8d:a3:91:91:61:13:
94:30:32:ac:41:10:8b:17:fb:b1:5c:f8:05:b8:eb:e2:ea:ac:
08:6c:6a:cb:84:93:76:7e:62:5c:31:f4:14:f1:ad:58:6b:ac:
26:e6:20:df:d9:49:49:18:c8:54:f0:b2:b6:b1:2d:c6:65:33:
c8:10:8f:1f:6c:3e:b3:06:41:dc:96:d0:25:b1:90:9e:c2:dd:
23:70:1a:25:4b:90:07:ea:ca:10:fe:89:26:82:ca:01:57:ec:
15:23:53:57:fe:c1:19:a2:63:e2:24:8a:58:80:a8:8e:3a:9b:
19:1a:1a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 23:17:44 2026 by rpki-client