
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
File: l7RGIWN5hXcArWW5-v7sfJIsItg.mft (raw, json)
Hash identifier: DOOGnT/Jeqlo/HqvIgmr1uYv8FvSBye9lQQpZIacGO8=
Subject key identifier: 5D:48:D8:0F:4D:5D:B0:A5:DA:A9:8B:29:96:44:D4:BD:19:E1:E4:3E
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Certificate issuer: /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
Manifest number: 67
Signing time: Thu 03 Sep 2026 08:17:49 +0000
Manifest this update: Thu 03 Sep 2026 08:17:48 +0000
Manifest next update: Thu 10 Sep 2026 08:17:48 +0000
Files and hashes: 1: l7RGIWN5hXcArWW5-v7sfJIsItg.crl (hash: +ZmoZ/SrSgsy92x9AtAbsJdefic9vwKMSa/LxMwZIjE=)
2: ECF1FD7E129011F18378F4EA3A3D8C67.roa (hash: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Validity
Not Before: Sep 3 08:17:48 2026 GMT
Not After : Sep 10 08:17:48 2026 GMT
Subject: CN=6a992d2c-3d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:57:17:19:3d:56:4f:90:64:83:1f:c0:0a:
0a:88:0f:77:03:e8:7e:3d:89:6b:89:7b:ae:e7:62:
37:b5:7a:b5:5d:62:77:d9:11:23:09:1b:a9:0a:6e:
5f:f6:54:2d:03:45:79:5b:85:78:36:b7:17:5f:f4:
7e:d3:e8:d5:68:43:aa:e1:0f:e4:f1:d9:94:11:2d:
ff:2d:a4:d1:fe:83:46:92:9f:76:df:58:8a:6a:b9:
03:0f:49:83:22:cd:65:07:0a:3a:71:10:e2:d5:93:
9c:b1:16:d7:ac:a5:02:ea:36:bb:60:db:a1:d6:99:
9c:5d:8c:dc:87:62:1c:75:38:a9:05:b2:83:2e:5e:
46:43:4b:5c:52:df:db:cc:09:0b:71:b9:2e:4f:8b:
39:bf:30:48:7f:e1:d5:5a:b5:65:8e:37:b3:d6:80:
09:f7:64:ea:df:85:9f:7f:2c:3e:81:cc:98:e2:40:
b5:b6:3e:1c:f0:c4:19:91:73:1b:ef:ba:cd:10:64:
f1:6f:e3:ae:d9:3e:8f:00:f7:76:d4:5b:4f:fe:fd:
e6:47:a1:f8:53:0b:e9:75:3f:7f:3f:4f:b6:88:bf:
98:83:94:92:fb:0c:fc:68:5a:db:79:78:bd:4e:e0:
42:db:d7:92:4e:a7:2b:81:5f:d7:48:7e:94:8e:08:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:48:D8:0F:4D:5D:B0:A5:DA:A9:8B:29:96:44:D4:BD:19:E1:E4:3E
X509v3 Authority Key Identifier:
keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e4:d5:9c:85:99:03:99:d8:66:c3:46:40:7a:83:8b:cd:8b:
57:aa:ee:31:dc:25:23:22:1d:4f:86:7c:51:d9:cd:98:03:60:
79:93:09:67:31:ef:30:66:9d:3f:93:e6:38:9d:3a:34:b7:f7:
03:f8:48:5c:b7:8a:c6:b7:bb:6f:19:31:43:c2:28:29:1a:71:
c0:49:1c:00:a0:82:c1:dc:8b:e9:d6:1e:f7:61:2b:4f:84:da:
c5:00:de:db:93:d5:85:1c:b0:8b:37:38:99:b2:40:33:2f:1d:
b2:74:6a:9a:b8:6f:b2:35:2b:5f:e0:5e:05:e8:56:f7:7f:ed:
3b:40:c4:29:de:5f:f9:45:d8:79:44:6c:51:98:d1:fa:88:93:
66:e8:a7:24:74:c4:6b:bc:73:ba:d5:23:09:dd:74:88:c7:7f:
8e:1e:44:01:62:54:88:34:d0:b7:60:07:d6:49:3e:fb:20:32:
c9:65:c5:3b:62:4b:e2:df:12:e5:d7:ac:90:c2:bf:78:6b:4e:
cc:c5:cd:61:be:e0:d5:61:8c:74:43:eb:fd:a1:cc:d6:7c:78:
3b:83:25:14:57:d1:c5:82:cc:42:02:5a:e6:ba:45:3c:49:04:
0b:e2:cf:ab:51:9f:c0:79:fd:02:3f:4e:a9:40:8d:8e:42:7f:
2a:67:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:53:38 2026 by rpki-client