
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json)
Hash identifier: 29Enxrgh3KUzP/rXNJbEl3Eg+QXBUcVOTmlZISoTu3U=
Subject key identifier: F5:02:EA:44:A6:E7:E6:DD:2E:02:76:1D:B8:DD:DF:27:D6:FD:F8:65
Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Certificate serial: 0D6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
Manifest number: 0D3E
Signing time: Tue 06 Oct 2026 18:27:46 +0000
Manifest this update: Tue 06 Oct 2026 18:27:46 +0000
Manifest next update: Tue 13 Oct 2026 18:27:46 +0000
Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: H8R4k47VXhquGnL72a1v9Wd/BM6lKQSw7iEKlJgMoS8=)
2: CB737E28422611F1882323FB8F833773.roa (hash: Sas3K0pNeR22zRvDEW+/zPRH6R1LCgFXxVnXBhEToJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3436 (0xd6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1D5, serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Validity
Not Before: Oct 6 18:27:46 2026 GMT
Not After : Oct 13 18:27:46 2026 GMT
Subject: CN=6ac53da2-7983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:2a:89:bf:a0:6a:0f:f8:31:2c:a8:60:7c:
6f:83:cf:f9:7e:25:40:fc:d1:a2:cb:8d:a0:63:98:
38:a5:b6:f3:2d:fc:a9:49:a9:cc:0d:71:e0:f6:38:
a8:b5:43:b4:67:7a:4c:23:89:66:5b:af:b8:d9:a9:
be:e4:29:a8:83:83:c2:84:94:6d:a7:51:70:78:c5:
ed:23:12:23:06:8b:23:d5:9a:cd:65:1a:15:47:6b:
2f:19:fa:f5:04:e9:38:ec:e9:21:89:fa:31:89:ce:
0e:06:73:2c:3a:b0:c4:ab:74:73:56:42:ca:96:e2:
7c:db:68:82:4f:cd:0d:8d:ee:71:72:d2:4b:ed:c6:
b4:92:4b:45:cb:64:a2:21:45:fb:ec:7d:c5:f9:59:
f5:e5:1d:31:26:af:e6:3c:ba:a8:f6:04:84:b2:7e:
dc:ba:54:92:e3:68:a3:b7:a3:fa:98:08:19:9c:1f:
19:da:5d:63:d1:ab:e3:89:82:22:84:8b:34:4f:8c:
cb:0c:54:36:f3:8b:3e:a8:cc:fe:a9:fa:99:86:38:
67:67:2c:a7:99:32:3b:28:65:64:92:ba:9f:6c:6f:
c5:aa:41:54:7f:a5:5f:70:f1:bf:0e:d1:92:bb:b6:
05:1b:e8:ba:fc:97:ce:fc:4c:dc:d4:42:f4:df:6f:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:02:EA:44:A6:E7:E6:DD:2E:02:76:1D:B8:DD:DF:27:D6:FD:F8:65
X509v3 Authority Key Identifier:
keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:f1:8c:42:3a:ff:29:c3:55:a3:1c:92:ae:b2:13:e6:09:86:
23:4a:b2:01:73:15:5c:36:b4:d6:3f:59:f0:55:80:c1:bc:4e:
c0:71:c4:0b:85:88:02:df:61:b7:56:4d:fa:ea:71:2e:a4:e5:
b7:b6:9a:a3:a8:1b:33:72:99:b4:84:04:a7:18:98:ce:a1:b0:
e9:e9:96:ff:ca:e6:ef:9f:6f:45:97:c7:6d:c5:15:02:13:e5:
21:d0:ab:62:2f:ab:6a:a2:c9:7c:a5:4c:37:30:4d:66:11:26:
33:5d:29:4e:92:5e:a7:3d:9a:af:b4:10:18:b6:80:af:6b:bf:
96:4f:f2:d8:90:a9:41:12:1e:d5:4e:df:a9:d2:c2:f7:42:7a:
e7:64:57:9a:a1:7e:16:48:a3:89:76:23:b1:0b:7c:73:e2:2f:
2c:c3:eb:77:20:10:f9:87:9b:1a:f5:00:bc:a2:35:0c:dd:c2:
b9:6b:d8:3b:1f:f0:18:fe:da:81:7f:69:3e:c1:96:5c:25:15:
cc:f2:8c:c9:12:be:a6:88:57:1f:7f:f4:1e:62:6e:a0:f3:dd:
cb:6a:25:73:42:26:9f:6e:ee:a9:13:6e:76:74:d7:ca:08:20:
21:bc:96:ff:ad:3e:df:d9:ec:8b:18:39:5b:d4:87:65:75:ac:
39:e3:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:06:24 2026 by rpki-client