
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json)
Hash identifier: Y9wmgFKTzEz3B3afOvOOGQPOA61FOgwUVQHOozhiM1M=
Subject key identifier: BD:9A:25:C7:A0:AE:D2:E8:87:99:97:C7:34:AF:E3:CD:F9:B8:38:D7
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial: 093F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
Manifest number: 0929
Signing time: Tue 08 Sep 2026 20:20:11 +0000
Manifest this update: Tue 08 Sep 2026 20:20:11 +0000
Manifest next update: Tue 15 Sep 2026 20:20:11 +0000
Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: fHx88WN9sdf7b6JYtkRMHh/UVou6F/e3zyWohWBrTw0=)
2: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: MQNSvoYV4eFWRModrHsE7m0lVQjCWatu+5u0O/QhmVI=)
3: 5EA3F4042E5C11F1A98E57D89B833773.roa (hash: N+uHaG3MJr82cfnEajXUFCCao7Ru1SBdTbuDh04l7Ng=)
4: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: DCiubbftabSxu91ah+p7CZ1dSt4rSpuPeVIKNRHm1PY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Validity
Not Before: Sep 8 20:20:11 2026 GMT
Not After : Sep 15 20:20:11 2026 GMT
Subject: CN=6aa06dfb-ee04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:b5:75:53:88:7e:f9:f1:cc:dd:59:73:a2:
77:f8:b6:0f:cf:de:79:b7:9f:83:23:7b:9d:6b:47:
76:89:de:79:04:ae:b6:be:42:34:ea:0a:2b:3b:89:
38:84:92:1c:04:00:95:52:38:00:38:5d:24:78:a9:
47:97:92:28:55:f2:97:a6:6e:06:3b:c2:10:1a:4c:
71:c0:cb:75:11:4a:fe:f7:1d:c9:3a:46:07:4a:e5:
2c:da:62:e4:6a:96:e1:2d:8b:50:03:5d:80:5f:c7:
b3:92:b4:1f:52:85:6b:a7:d9:97:fe:2b:49:24:f5:
ca:9f:b0:20:0f:00:1c:37:c3:00:c9:2d:7e:68:01:
54:5f:02:ed:12:30:90:78:01:ef:00:22:9a:9f:3e:
a5:d1:8b:e7:4a:ae:b8:e3:f2:47:40:44:10:c0:4f:
3f:f5:17:f2:25:1b:51:bb:3e:19:43:5a:ff:3b:77:
24:9f:4a:60:02:8b:2b:77:97:92:85:f2:88:ec:89:
14:8f:53:81:7c:62:80:f6:41:f8:3a:01:3a:0d:d7:
7b:11:90:bd:4d:1a:83:8b:4b:2a:29:bf:aa:dc:d5:
b0:45:f8:9c:80:23:6a:71:cb:91:8f:15:d2:1d:b0:
ee:88:a4:37:6d:dc:cd:da:32:dc:95:e4:ef:84:7b:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9A:25:C7:A0:AE:D2:E8:87:99:97:C7:34:AF:E3:CD:F9:B8:38:D7
X509v3 Authority Key Identifier:
keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:3d:72:07:54:de:ff:e6:ee:d5:fd:29:98:f3:4c:0b:77:
55:c5:79:ee:78:2f:22:75:da:a7:64:0c:00:69:37:5f:f4:e8:
29:75:29:07:ec:ba:53:c5:00:f1:21:06:b8:d2:08:cf:b1:3f:
b4:f6:02:66:76:3b:58:1a:db:47:d8:6c:a7:42:37:51:90:8d:
b6:cf:fd:30:1c:8a:36:29:b7:97:de:13:8b:36:50:51:1f:74:
33:7d:83:d3:39:92:bd:e9:47:72:4e:cc:f2:2f:57:d5:e1:2f:
1e:a8:c2:db:7f:18:60:9d:97:af:41:4c:df:d4:ff:90:ec:06:
02:96:2e:a8:2d:aa:b5:a0:18:8a:12:95:a6:0f:46:ff:00:e7:
18:12:44:6f:36:db:77:d0:fe:0c:bc:9b:5e:f6:7e:1a:7f:5a:
19:1b:16:4d:d8:9a:9e:11:66:93:04:0d:dd:27:87:e6:54:b2:
74:0a:64:dc:57:35:30:79:51:c0:8d:91:69:02:df:5b:ff:71:
23:93:31:19:a5:bd:3f:72:0b:87:c4:38:05:9c:19:67:40:e3:
c9:6c:9b:b3:89:d1:7b:e9:d5:13:77:da:92:35:32:3b:80:e0:
5c:3a:c7:95:d0:35:10:71:7c:40:d4:30:73:c7:7f:ec:3a:1f:
05:3f:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:55:05 2026 by rpki-client