
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
File: 7v_N3U7qvWZtJL3wLGR32Fqd29g.mft (raw, json)
Hash identifier: Dns2kQVdVFIUkqrxa8y4pXhG9MEuStMKHZfBu+Dy1QA=
Subject key identifier: BA:13:4D:B6:48:FF:C1:5C:13:A4:DF:0F:2C:0D:CA:1F:1D:4B:D4:0E
Authority key identifier: EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8
Certificate issuer: /CN=A9167307/serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8
Certificate serial: 0C56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
Manifest number: 0C52
Signing time: Sun 04 Oct 2026 18:46:38 +0000
Manifest this update: Sun 04 Oct 2026 18:46:37 +0000
Manifest next update: Sun 11 Oct 2026 18:46:37 +0000
Files and hashes: 1: 7v_N3U7qvWZtJL3wLGR32Fqd29g.crl (hash: 021gfzYtLGGfUhM1c/K2czEeETQQmLSU6ADTPplvZyQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl
rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3158 (0xc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167307, serialNumber=EEFFCDDD4EEABD666D24BDF02C6477D85A9DDBD8
Validity
Not Before: Oct 4 18:46:37 2026 GMT
Not After : Oct 11 18:46:37 2026 GMT
Subject: CN=6ac29f0e-6d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:12:eb:0e:c3:93:c1:21:08:b1:e5:e4:a7:
f6:7b:c6:68:01:17:54:16:04:95:b8:31:67:1a:65:
a0:af:28:c4:75:db:d5:96:62:31:00:b3:1a:d8:99:
e0:9c:0e:d4:47:f6:79:f9:7d:71:fb:69:7e:70:ae:
88:2d:c2:57:f0:3a:94:eb:a4:a3:e0:67:f2:39:0a:
79:91:ff:3f:0f:2f:c0:e7:2c:10:fa:cd:1d:46:72:
09:ff:a9:52:d6:72:0c:28:2c:8d:49:ef:18:e5:dd:
52:47:57:8f:ee:11:3f:02:37:32:6b:92:d2:9a:9d:
cd:70:ac:9a:4d:14:94:52:63:92:11:0a:11:b7:a9:
4a:77:86:82:61:63:6d:13:88:0d:54:42:a3:f3:28:
d3:2e:cb:39:1d:89:cb:87:bc:3a:89:70:e9:fe:a9:
d1:43:03:cb:de:38:50:09:4d:b9:3e:2c:f5:3d:0f:
e1:9e:29:66:d4:60:b2:09:be:82:b6:09:6a:97:0d:
32:18:9b:25:04:b3:16:22:c1:6c:e9:9b:bf:d0:4f:
6c:94:78:64:df:4a:8c:13:f2:e1:82:d3:a5:b2:67:
66:cf:5f:91:71:95:d7:dc:4b:d2:d9:6e:93:ad:52:
02:c1:55:ac:63:a5:aa:8f:9f:a2:8a:f7:d2:5f:7f:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:4D:B6:48:FF:C1:5C:13:A4:DF:0F:2C:0D:CA:1F:1D:4B:D4:0E
X509v3 Authority Key Identifier:
keyid:EE:FF:CD:DD:4E:EA:BD:66:6D:24:BD:F0:2C:64:77:D8:5A:9D:DB:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v_N3U7qvWZtJL3wLGR32Fqd29g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167307/DBBC8B6433BC11EAB51FA00CC4F9AE02/7v_N3U7qvWZtJL3wLGR32Fqd29g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:85:24:9b:34:c7:71:9f:b1:00:38:d5:f3:73:64:54:9f:70:
64:4f:50:2a:c8:76:af:fc:0f:d2:c5:10:75:50:dc:ca:ff:b8:
54:ac:35:f1:ee:f1:0e:a7:e1:c4:7e:c0:74:da:8f:40:32:2d:
de:b5:a2:69:03:db:ca:85:58:8f:aa:d1:0e:a6:2a:f2:d3:90:
48:6d:42:c3:a8:d8:3a:f2:5e:42:62:0e:3e:21:ac:49:97:7e:
1d:0a:f7:79:1e:48:9e:7b:76:a6:fc:9a:8a:62:0a:54:3d:56:
0a:17:06:38:a0:f6:3a:a5:dc:55:7b:4a:a1:e0:08:1a:9c:85:
0f:99:68:a6:48:64:b0:a5:18:44:36:12:9a:6e:09:67:67:e2:
16:13:a4:06:da:9a:90:eb:64:87:e7:d5:4f:69:4c:ed:2a:a0:
19:07:16:98:6e:f2:d1:39:f5:a4:35:af:46:0c:e9:4d:6a:17:
e9:3a:38:d7:13:9b:dc:8d:f2:1a:ab:6c:64:0c:20:9f:37:19:
2a:11:31:5b:93:3c:9c:40:b7:b8:1a:b6:a9:4d:6c:67:8c:c2:
80:3d:cf:49:00:0a:42:d0:7a:c2:fa:a3:2e:81:19:ee:ad:03:
b6:39:7c:2d:71:d9:ca:7a:13:ed:97:3b:d5:89:1f:d6:9f:d1:
67:05:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:42:45 2026 by rpki-client