
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
File: 7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json)
Hash identifier: lSTeBKA34gOTZKKODTGrNTa3/FxLpJGWiPMal2XDhYA=
Subject key identifier: 6B:D2:64:A1:C4:62:4C:59:B3:E9:B8:59:52:71:1B:54:3C:7E:D5:A0
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial: 361C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
Manifest number: 35CC
Signing time: Mon 26 Oct 2026 14:50:37 +0000
Manifest this update: Mon 26 Oct 2026 14:50:36 +0000
Manifest next update: Mon 02 Nov 2026 14:50:36 +0000
Files and hashes: 1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: Eux4ZYmnLN6bzDR78CFzF28BDx3IoYSZ0TsIUarZgVQ=)
2: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: XMDinqojg8A6VfOUYX1iK27264aRErFSa0yq2TM1+Qo=)
3: 4502F6FC898911F181677A9E3411F970.roa (hash: DV9flv0sK24RVrPl6tLWy4gJnamvUt4xz+f3P0icutI=)
4: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: RNuWwl4ucRlwsOZtGnFpFuiswJzOcCNas2gxr3gm8mE=)
5: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: dvlRe6H3F8B2GwYIE840UeTvVO5dQ86LFZ7LGPZOm2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13852 (0x361c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Validity
Not Before: Oct 26 14:50:36 2026 GMT
Not After : Nov 2 14:50:36 2026 GMT
Subject: CN=6adf68bc-828e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:ca:52:24:a2:4d:6d:d0:12:32:13:d7:87:
e1:71:85:45:c2:d8:4e:fa:c4:8a:76:6a:53:a6:f5:
7b:cb:e9:ed:57:78:b6:d6:52:33:7b:82:28:f2:88:
56:da:e5:c8:ba:1f:53:fe:f3:2f:64:2e:51:db:03:
86:fc:ea:14:4f:4d:6f:d3:4d:d8:29:67:47:8d:5e:
b3:6e:32:98:b0:a2:40:36:08:cc:2b:b8:1f:da:aa:
6d:61:f6:b1:03:59:1a:78:7c:de:7b:09:5c:04:ea:
3e:0b:65:ee:46:f1:e4:9d:37:1c:74:5b:1a:d0:5a:
20:74:8f:be:e6:80:32:4d:76:ff:4a:69:38:eb:96:
cf:97:6e:eb:e0:b5:af:59:be:46:22:5d:a4:ac:31:
f9:a6:78:bf:e4:a4:7e:e8:d1:36:53:73:63:83:5f:
d3:be:51:59:df:d8:d6:1c:04:2d:49:25:a5:6d:28:
2b:47:c6:0b:fa:b9:63:05:ed:69:f9:a4:4e:7a:09:
08:94:d0:74:cd:61:12:14:3c:fd:22:f6:a8:55:93:
8c:6a:0b:f4:0c:af:d3:6c:c0:d9:c2:42:09:5f:97:
9b:3e:d3:eb:59:1c:00:8c:8e:d5:c2:02:ea:bb:29:
fe:3d:a9:ce:6a:7c:51:a9:3c:f3:8b:4f:35:53:69:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D2:64:A1:C4:62:4C:59:B3:E9:B8:59:52:71:1B:54:3C:7E:D5:A0
X509v3 Authority Key Identifier:
keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:81:ff:ca:77:80:54:b9:8d:b1:fd:20:c9:c2:6d:20:86:b3:
c5:6e:ed:13:d2:26:10:b9:e9:71:a5:77:04:5e:7b:9b:08:e6:
83:34:94:76:5a:f5:a1:f8:01:4f:88:8b:2f:81:ed:7f:84:3a:
89:d9:9e:82:bc:4c:69:5f:0c:1f:c2:b6:98:0e:7d:51:c7:6e:
ec:f9:fe:43:50:72:46:64:4e:32:6b:c7:5d:59:85:bd:dc:fd:
5e:4a:c8:f1:d6:05:2e:86:98:2d:a4:57:6f:90:ea:d6:71:92:
c9:e9:47:06:9d:57:3f:fe:fc:2c:ec:28:77:93:f5:54:ff:98:
90:57:4c:a0:43:b8:3d:04:2d:c8:29:22:ac:fe:3f:54:1b:20:
89:8c:f8:a6:1e:c0:5d:eb:de:12:62:a3:ea:1d:90:aa:88:7e:
80:c5:f6:a5:65:18:99:70:02:f8:b0:e2:74:b2:34:df:4f:c9:
01:0b:47:ed:d7:f7:07:37:3d:e3:13:27:71:b8:b0:dd:b0:28:
67:91:ce:09:1a:ef:dd:91:eb:2f:72:f2:47:08:e8:49:5c:a4:
e0:88:0d:9d:a6:49:66:89:31:85:81:6c:91:60:49:80:e8:d7:
eb:47:8e:1f:27:29:52:d4:19:06:9e:6a:e6:a7:70:9b:b9:55:
01:14:90:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:25 2026 by rpki-client