
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
File: 7LIDs03q4KEdAVCjDvK0opkdepg.mft (raw, json)
Hash identifier: jaw7rp7/0zMGszD5R9BMuz7PD/d7FpZFrak44dg1OnY=
Subject key identifier: 59:91:AF:DE:BD:0E:C1:B6:68:74:40:93:38:D9:F8:1F:26:0B:0D:E1
Authority key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98
Certificate issuer: /CN=A9189529/serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98
Certificate serial: 1AC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
Manifest number: 1AC8
Signing time: Sun 04 Oct 2026 16:19:36 +0000
Manifest this update: Sun 04 Oct 2026 16:19:36 +0000
Manifest next update: Sun 11 Oct 2026 16:19:36 +0000
Files and hashes: 1: 7LIDs03q4KEdAVCjDvK0opkdepg.crl (hash: ZTNFLsvVM15j/Eb9HtHLDN35A9mttLZPX9/D0f/DelI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl
rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6856 (0x1ac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189529, serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98
Validity
Not Before: Oct 4 16:19:36 2026 GMT
Not After : Oct 11 16:19:36 2026 GMT
Subject: CN=6ac27c98-7111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:31:e8:49:6e:74:43:ec:21:4f:a1:ec:7a:
b0:c2:90:4c:c9:19:ce:8d:f3:39:9e:af:6d:62:63:
ff:7f:a9:67:5e:51:46:59:4d:59:84:ca:08:b2:cd:
23:d0:c8:28:2b:9c:f8:8b:cc:47:ee:4d:a7:cd:67:
d1:e3:f6:25:2e:f5:44:d1:85:33:e0:62:ff:4a:6e:
55:c6:9a:e0:59:00:eb:08:7b:d7:88:42:4c:e9:74:
2e:92:4b:b4:c7:a9:e6:b1:99:f1:e7:bc:f2:4d:bd:
66:b1:ec:d7:6f:2c:ec:e3:47:66:fd:7f:f7:e9:00:
3f:5d:42:27:6a:ab:2f:0a:4b:90:c3:45:b4:a5:46:
e3:5e:e6:ec:30:31:74:9b:5b:fd:f8:6c:30:5f:f5:
88:c7:a9:c6:37:3e:d2:3d:9a:53:48:94:80:f3:36:
c9:a7:ef:16:8b:40:82:6d:8f:20:5f:87:a4:02:f2:
b2:3d:9e:cb:57:c2:e2:c8:48:cc:20:7e:df:be:4d:
46:af:83:12:40:bc:a9:33:12:97:b7:74:a4:79:67:
05:ab:f8:b5:3f:4d:ed:f3:c0:fa:05:1f:87:d6:b2:
f6:4e:7b:dc:f4:c0:38:aa:86:c1:72:0c:74:7f:8a:
25:c7:b2:ba:f1:23:38:e8:3f:52:bb:af:0d:38:61:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:91:AF:DE:BD:0E:C1:B6:68:74:40:93:38:D9:F8:1F:26:0B:0D:E1
X509v3 Authority Key Identifier:
keyid:EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:10:2e:f2:b3:da:98:f6:e0:40:6a:30:64:69:29:31:72:8e:
ab:3c:0f:9b:46:de:9b:fa:c3:25:02:8e:78:79:db:47:70:1f:
d1:25:25:ff:45:4c:66:94:d2:34:f7:02:24:32:2b:d8:0f:57:
8b:6d:68:fd:23:7f:59:7f:02:d2:3c:92:33:38:75:2a:0e:9d:
df:7e:80:66:28:5f:ea:a4:6c:9a:95:bc:18:9c:e4:03:b2:e9:
84:f2:ac:a7:77:d7:eb:10:9a:93:4c:76:1c:e9:00:5e:36:2e:
dd:d9:5b:2a:51:04:bf:4c:54:fc:77:2b:16:e2:ff:d7:15:66:
65:c4:92:b2:94:33:3b:76:42:f4:a8:1b:18:71:dc:60:f2:93:
2d:b7:ef:0f:ad:c9:ff:57:9b:19:46:75:59:b7:a8:59:d4:72:
ec:d0:cf:a3:a4:a5:e1:8e:fb:34:56:af:0f:c8:51:21:6c:2b:
4b:73:fc:25:d8:04:2b:ca:fc:22:6c:df:6a:9c:e5:ea:c8:b1:
1b:22:c2:30:01:44:c5:68:87:f9:28:1a:f4:ff:02:0a:95:e1:
60:54:be:c3:19:86:17:74:58:18:32:8c:f1:02:11:31:67:a4:
29:eb:e2:d5:0a:ba:ab:f1:7b:d5:ba:a3:1e:9e:0d:2b:9c:60:
c7:de:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:50:20 2026 by rpki-client