
$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json)
Hash identifier: 6Y8bgGRp39phwD6WxQS3+kIvVA3sji12iI42dHIys4w=
Subject key identifier: 6E:78:4D:74:01:22:6A:80:E0:C0:79:61:DC:B7:09:B6:A0:DD:54:03
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial: 1142
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
Manifest number: 112E
Signing time: Tue 18 Aug 2026 17:27:30 +0000
Manifest this update: Tue 18 Aug 2026 17:27:29 +0000
Manifest next update: Tue 25 Aug 2026 17:27:29 +0000
Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: RaT5SckIxfyhMqDAnVl8mhJUn3tB+SXIPkh+rnnvUcg=)
2: BFD9F81CFFEB11F085398A1A766F56BC.roa (hash: COcewJwinDbkxeEAlt0aEDN3t7qgwxUzyHis29aNdTw=)
3: C0D0F162FFEB11F085398A1A766F56BC.roa (hash: bB2TgHBXpBSWMFo/NWTJDUu8mZcJxhOZBaZbScA7lZM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4418 (0x1142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Validity
Not Before: Aug 18 17:27:29 2026 GMT
Not After : Aug 25 17:27:29 2026 GMT
Subject: CN=6a849602-9d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:81:0d:90:af:95:e1:55:f1:7e:e3:00:39:
a8:16:97:0f:07:ff:dc:1d:55:11:de:72:7a:63:37:
9c:75:b6:d3:00:56:2f:14:66:fc:39:9d:da:ba:ca:
3e:a3:19:35:69:d8:e5:e2:4f:cf:b7:61:de:69:0a:
e3:8e:1f:d2:88:ba:39:fc:79:b3:9f:c7:6a:48:11:
2e:39:4b:a5:aa:d8:17:77:38:7d:0d:c4:56:d8:cc:
1e:b8:e6:29:db:49:f8:19:aa:d1:bc:a7:d0:46:e5:
78:e8:ca:69:46:f3:a9:fe:c6:d7:79:49:c6:28:fa:
fb:68:91:df:aa:15:d6:7a:a1:fc:ee:e8:b3:94:9d:
51:f9:df:fb:17:7a:a0:5c:28:aa:a8:3a:92:47:cc:
47:ff:1e:3d:5b:c8:1d:41:26:17:0e:53:60:81:a2:
90:0f:38:7c:df:40:be:39:de:ac:7e:b7:0f:cf:12:
c0:d4:2c:2b:89:ba:f1:95:7b:ed:3e:12:c6:42:05:
7d:29:25:eb:01:a4:fc:53:75:bd:ab:a8:6d:4a:32:
4f:56:ad:36:6c:c4:6b:af:8a:3f:49:a0:50:c7:36:
9f:e9:c4:91:39:00:48:fc:7e:92:34:4b:68:8f:ed:
c4:58:4d:cb:f5:cc:da:25:7c:8b:b8:67:81:df:ac:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:4D:74:01:22:6A:80:E0:C0:79:61:DC:B7:09:B6:A0:DD:54:03
X509v3 Authority Key Identifier:
keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:9f:bb:4d:84:93:7d:a7:a0:c9:1a:de:e3:1e:fa:ce:fe:fc:
5b:a9:e3:d2:0f:cb:6f:76:87:b2:88:14:c3:ae:9b:6c:b8:14:
f5:cf:5d:bc:a0:e5:49:20:df:59:05:16:1b:1f:3c:f2:a5:d7:
89:17:3f:64:ec:72:0c:43:02:00:cc:91:18:57:8c:63:89:39:
3e:02:04:f5:2f:a2:fa:94:8e:4b:bc:c7:f4:18:82:c6:d2:93:
34:0f:c5:9f:5c:eb:6c:ad:f9:f7:e3:25:65:b1:17:4f:33:33:
08:21:3c:46:a0:fe:a7:05:f7:b7:ff:60:c0:4d:be:c4:ef:3a:
8b:83:01:3c:38:d2:74:d4:d9:9c:dc:5b:41:dd:19:76:0c:ef:
3e:aa:9c:9a:4f:8d:fa:6e:aa:69:c9:ce:51:48:b2:4e:df:c0:
31:96:8f:76:10:27:60:a4:52:ef:26:42:bf:fb:a1:54:98:73:
e4:7b:13:f0:b6:08:4a:cc:df:a9:d7:e6:d0:45:f0:a6:34:af:
2e:09:63:e7:b0:ce:1d:d2:11:57:06:98:60:cb:9b:93:dd:1b:
f7:f6:a0:f7:2c:d4:94:d6:2c:88:35:b8:90:98:ec:db:58:cc:
c8:8f:de:e8:fd:92:77:04:6d:0b:1c:cd:e5:53:fb:d6:d6:f0:
35:2e:cc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:54 2026 by rpki-client