
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
File: 7Ubg2mfUm_C8p7L9IOxIu86EepE.mft (raw, json)
Hash identifier: ECcepjFA0vEzIjkXmKYiJ97IVwI98ELU+hAR0EoSazQ=
Subject key identifier: 4E:93:12:82:59:D6:F5:84:30:62:97:4E:0C:62:AF:45:C5:EC:3B:4F
Authority key identifier: ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91
Certificate issuer: /CN=A915E38A/serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
Manifest number: AD
Signing time: Mon 05 Oct 2026 07:33:06 +0000
Manifest this update: Mon 05 Oct 2026 07:33:05 +0000
Manifest next update: Mon 12 Oct 2026 07:33:05 +0000
Files and hashes: 1: 7Ubg2mfUm_C8p7L9IOxIu86EepE.crl (hash: qYs4eJofKN1//Mg4W0pY3AibagTTOLPYOwJtXXtaOBc=)
2: E2D6A7984F5F11F190C0BD46C4833773.roa (hash: DhEdJPW687P63CLaNT2Mz9aPqiwDP3BG1Z3glFSiYO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl
rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E38A, serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
Validity
Not Before: Oct 5 07:33:05 2026 GMT
Not After : Oct 12 07:33:05 2026 GMT
Subject: CN=6ac352b2-bdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:7d:6a:5c:80:a0:47:35:d1:30:fe:9c:60:
04:5c:75:21:ee:77:49:02:b2:2f:6c:a2:6c:d0:f5:
59:7e:f0:40:55:bd:7d:1a:a3:01:7d:6d:a7:f2:9e:
6b:95:fd:0c:77:db:fe:a7:ef:5b:5c:ad:b8:84:67:
68:49:3a:95:80:ba:f7:a1:4d:b2:64:57:0d:9d:6c:
6f:3f:bd:a3:2f:c1:6c:a6:14:24:44:be:0d:af:db:
b2:5b:53:6c:e6:47:76:df:44:e4:43:df:7d:63:ab:
fa:65:1a:a8:c2:12:c9:e8:bb:be:ff:33:59:23:fc:
ad:cd:47:e2:a9:8e:be:93:7a:dc:5f:fd:1f:29:bf:
4c:90:de:2a:1d:ab:36:8b:40:35:89:2f:98:0a:e0:
4b:d7:13:1f:d8:b0:c0:6a:99:88:86:0e:74:b2:c4:
66:ee:2d:ac:39:ec:54:33:16:51:df:33:8d:e0:36:
62:da:8e:fd:0d:c6:28:ea:ce:51:d0:3d:2a:ce:f7:
e0:27:c7:ba:42:a3:06:11:7f:00:9b:67:fa:98:f2:
61:b9:94:1d:08:9b:f2:ef:3e:d6:37:2d:bc:4b:35:
97:99:df:02:6c:da:5b:8a:8a:64:0b:2f:1f:09:9e:
b1:2c:e6:82:d5:1e:65:e5:44:58:f1:bd:a4:d6:6e:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:93:12:82:59:D6:F5:84:30:62:97:4E:0C:62:AF:45:C5:EC:3B:4F
X509v3 Authority Key Identifier:
keyid:ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6e:a3:5b:4d:fc:5d:ed:10:8f:4d:9a:48:30:da:51:b8:d1:
3d:29:62:d6:73:9c:94:3d:ad:bd:b6:af:96:f9:ff:8f:93:79:
5b:db:05:a6:84:f5:e1:79:47:bf:1b:f7:db:01:29:bd:6a:30:
d6:ba:e0:92:29:5f:c2:57:96:0d:d4:d3:dd:d0:e6:ac:47:a1:
c5:c3:99:44:1a:46:1c:c1:1a:71:77:54:d1:f8:1a:ce:f9:e5:
8f:c8:c2:07:e7:e2:18:3c:45:fd:35:3c:48:f4:31:b6:19:35:
3a:eb:60:4b:a9:ed:8b:d2:de:fe:7c:7f:53:92:70:5c:57:9a:
23:ec:83:ee:f5:23:8d:92:aa:a9:9c:35:f1:38:04:ed:8d:d2:
27:32:00:98:b3:7f:44:a5:e0:f5:05:1c:ae:f7:bf:e5:6b:4c:
ec:cc:90:52:77:e2:39:50:8e:57:30:4a:9a:64:e0:17:98:22:
98:e8:5a:1f:83:97:fd:0e:b5:89:22:93:a0:20:55:19:81:04:
1d:6c:43:68:d3:a2:59:3b:7c:eb:ab:9c:1f:68:ae:ff:fc:36:
6b:2b:d8:f6:8b:70:83:8f:31:58:b2:3f:e1:e3:8b:56:3b:00:
5d:25:bd:c5:17:eb:2a:46:76:aa:51:5f:65:c0:38:fb:93:09:
7d:b5:33:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:42:59 2026 by rpki-client