
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier: mh74Ho1ySxQKvpGDUolVZY6RjCYguGUXRqd6cZ0ZP9M=
Subject key identifier: 59:C7:EA:77:18:83:F6:7F:78:95:C0:CD:04:5C:0B:7E:B8:9C:52:C8
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial: 07EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number: 07DA
Signing time: Mon 12 Oct 2026 21:29:09 +0000
Manifest this update: Mon 12 Oct 2026 21:29:08 +0000
Manifest next update: Mon 19 Oct 2026 21:29:08 +0000
Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: v7CscJVVjHCzNHbtKN1wfC7lU/qcvQ2QEeDlpvVCpFw=)
2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: ZZOQZPDyiLZTqV8WbUexxdia9It2J3YHCvfk5XQ2eMo=)
3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: +unTxmS/iLt2Dr1BIXJYLku10bUj+HTQ+FfTOg9lpds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 21:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Validity
Not Before: Oct 12 21:29:08 2026 GMT
Not After : Oct 19 21:29:08 2026 GMT
Subject: CN=6acd5125-3353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:a6:2b:e0:55:b3:6b:58:8d:d3:17:07:06:
05:51:69:c6:36:52:44:ca:47:b7:23:9c:ec:84:7d:
7d:2b:35:5e:94:df:1e:78:4f:f8:0a:03:25:19:06:
9e:f0:d6:d1:79:7a:27:3f:5e:28:57:90:f6:d4:a6:
2c:fd:b0:d1:ca:60:1e:06:29:f2:a8:1a:98:04:66:
61:63:49:05:83:ba:23:d6:f9:07:dd:15:15:0a:35:
e1:ab:97:c2:03:93:55:51:38:05:4d:98:7b:fd:9a:
38:67:f3:22:ca:c4:dd:77:80:e6:10:90:3b:7b:0e:
3f:0c:a3:02:e0:61:cb:a6:cc:ad:ed:7d:64:0e:f7:
20:60:14:c5:b7:c4:57:6a:2e:82:da:3f:56:8c:2d:
11:91:c6:2e:ca:e9:8b:b0:f1:7a:7b:d0:4b:a6:51:
3b:0f:2f:6a:18:f0:21:5c:dd:e8:ed:7d:d1:f6:43:
58:56:24:b7:6b:6c:18:d7:5a:d1:12:d8:80:44:fb:
ed:9a:4c:10:d3:1b:23:90:3a:3b:69:3f:3e:44:1f:
89:85:fd:3d:d4:77:76:74:5f:b3:42:a2:a9:37:ad:
e0:a2:ad:69:0c:0a:5c:9b:9a:02:b0:11:8c:83:04:
84:ca:3f:e9:27:ef:f7:0a:d2:37:0a:56:52:00:6f:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:EA:77:18:83:F6:7F:78:95:C0:CD:04:5C:0B:7E:B8:9C:52:C8
X509v3 Authority Key Identifier:
keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:f9:43:ed:e3:70:c4:71:3f:ca:16:92:72:5c:54:22:4b:6a:
93:dc:56:64:f9:4c:28:4e:b7:1b:d6:55:5a:a4:92:a6:9b:94:
ed:b2:02:9f:ca:e6:a5:d4:c8:d9:f8:25:e3:14:93:97:a2:21:
e0:0d:fd:72:59:9b:8e:6d:a9:09:3d:5a:00:5e:b7:67:e3:fb:
a5:5d:67:d5:aa:aa:b7:dd:d1:24:8f:76:91:3a:ca:a6:4d:8a:
62:f6:a7:89:9b:d9:ff:0f:5d:9d:94:b1:07:38:17:6f:c9:24:
e8:78:c4:62:81:0c:96:c0:87:dc:68:4e:a1:31:30:75:33:a0:
11:29:5e:29:73:f1:3a:8e:3e:64:df:77:ec:85:55:a2:cb:4d:
4b:e6:3d:f6:69:f5:89:dd:85:8c:ea:14:ff:ec:78:af:63:da:
29:c5:c7:bd:f0:de:56:56:41:db:8e:0d:f3:bd:21:81:e9:c8:
ef:0e:bf:db:f2:fb:71:57:f8:9e:42:5f:9c:0d:dc:98:4a:87:
73:b0:eb:3f:a7:23:0f:a3:21:3a:5e:e6:1e:21:f7:cc:0c:90:
ae:ab:5e:85:71:c1:e3:bc:68:d0:95:b5:cd:3d:64:73:ee:15:
1a:e9:13:4a:4b:82:83:f6:d6:53:e8:43:bd:e3:44:48:8a:d5:
e7:85:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:52:31 2026 by rpki-client