
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
File: P7ClbiDxlMd0mHnU0iWz-X6evs8.mft (raw, json)
Hash identifier: 3Cx718wm8P8wR8De7xlBrgMQNoBNAPXm1cL5DKKzQpA=
Subject key identifier: 96:DA:FA:9B:6C:68:84:64:AC:60:B0:2F:C8:EB:8A:E5:70:34:18:36
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 08D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
Manifest number: 0893
Signing time: Sat 31 Oct 2026 21:35:44 +0000
Manifest this update: Sat 31 Oct 2026 21:35:44 +0000
Manifest next update: Sat 07 Nov 2026 21:35:44 +0000
Files and hashes: 1: P7ClbiDxlMd0mHnU0iWz-X6evs8.crl (hash: 0xfbq5rjMgS+Wp2MNk5s/H0rs6bh8YKnivrkSWBL7Ks=)
2: 4792C69CCB5011F08BC97C80C4F9AE02.roa (hash: Hut3dLVFqixwpjRF23D53VjzBGUJieF0ukHdTR/68dQ=)
3: 60E63A78BBD911F18A390A8F6711F970.roa (hash: msFzeRSuqSeYrNi2/j14CuGye75/W1Ojn6all4m6j8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 21:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Oct 31 21:35:44 2026 GMT
Not After : Nov 7 21:35:44 2026 GMT
Subject: CN=6ae65f30-5b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:ad:4e:a7:72:24:e1:28:2a:dd:fd:fa:74:
7f:91:1e:23:7d:6c:33:0b:a1:ad:d2:ea:57:40:b8:
3d:b0:7a:d6:c9:9a:d7:0c:6b:6c:ce:ca:75:1f:2c:
90:bd:81:b8:05:6d:c9:82:90:25:e4:d1:b4:8e:62:
94:c6:ff:8b:40:28:0b:00:13:45:ba:ff:89:ff:85:
61:07:7f:01:59:63:6e:75:b5:90:b0:a1:81:c2:39:
fa:b1:81:7e:5d:4e:68:09:f6:c2:81:58:3a:f4:22:
9b:4f:57:25:4b:4a:bd:6f:42:f7:e6:a3:d9:78:92:
7f:39:12:a2:cc:26:b7:03:02:7b:3e:34:e0:00:2c:
e8:2e:88:9c:cd:a8:db:81:6c:db:26:e5:dc:9e:f1:
98:43:e2:74:e8:83:c0:d0:71:2c:50:09:57:7c:98:
dc:06:17:00:5c:67:0f:bc:f2:73:05:0d:bc:b0:a9:
26:7d:5b:25:54:79:8c:9b:db:1d:67:79:71:eb:95:
df:51:c3:2e:02:7a:e6:01:62:4b:14:99:75:93:59:
9a:8c:3a:de:ef:8d:4b:ed:f7:a7:13:2e:33:3d:99:
09:a5:62:be:a1:f3:5f:24:66:f7:12:d5:3d:04:dc:
98:c0:a9:85:f2:d2:05:43:b0:16:51:6b:00:81:8c:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DA:FA:9B:6C:68:84:64:AC:60:B0:2F:C8:EB:8A:E5:70:34:18:36
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:44:f6:03:7d:a9:50:aa:dc:73:b0:da:2b:cb:0a:b4:f8:69:
93:04:7f:a6:0a:8d:fa:dc:6d:c6:7a:41:e4:fc:10:8f:64:05:
13:45:86:69:55:74:41:36:e1:0b:25:a7:e6:d7:74:6d:67:f6:
fc:eb:10:5d:12:28:02:bb:9e:6b:24:2f:93:b1:b5:46:6e:de:
d7:e1:1b:ed:fc:45:56:72:eb:d4:8b:36:c6:3e:a7:d6:70:53:
ed:f6:b9:bd:77:22:14:3e:07:a7:3e:c6:cb:00:41:94:57:d9:
87:65:e2:cd:45:1d:91:3b:03:a3:53:3a:e4:7a:b3:7a:a5:a0:
96:3e:24:20:1a:e4:2b:ea:5b:5e:40:2b:fa:9d:44:d1:4f:56:
a5:d9:49:53:a6:83:c6:7c:2f:3f:84:7a:89:6c:71:b3:41:a9:
4b:f3:95:c2:47:9b:bc:db:54:3c:d1:49:25:fb:61:53:da:70:
b1:2b:21:be:96:24:40:e1:1d:c6:c5:0d:d7:be:d5:95:35:71:
5c:c3:97:60:a6:f2:b2:8f:b7:61:f5:ad:39:30:20:70:b2:e9:
c8:6a:e0:48:d1:a1:6f:db:00:35:98:5e:f2:df:a0:62:20:14:
db:96:76:39:ef:b9:e3:f3:cb:95:ff:16:40:eb:e9:50:15:4e:
f0:08:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:53:10 2026 by rpki-client