
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json)
Hash identifier: KIkl/PJqn3ZbA8HSF6F4mbv4twtknd7EzKjYfMAIpH8=
Subject key identifier: 87:54:5F:AD:63:40:56:46:D3:17:19:55:9D:24:BD:8A:58:4B:CC:BB
Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
Certificate issuer: /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Certificate serial: 0D53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
Manifest number: 164A
Signing time: Tue 06 Oct 2026 18:09:38 +0000
Manifest this update: Tue 06 Oct 2026 18:09:37 +0000
Manifest next update: Tue 13 Oct 2026 18:09:37 +0000
Files and hashes: 1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: U32AXrTxcMHuQucwvlNAT4plV4t5j+YFOKbC5XQx6mg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3411 (0xd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137
Validity
Not Before: Oct 6 18:09:37 2026 GMT
Not After : Oct 13 18:09:37 2026 GMT
Subject: CN=6ac53961-99e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:cf:e9:32:e8:5d:c8:35:dc:25:e7:b1:78:
97:f1:6f:b0:5c:df:58:2e:be:a6:8b:d8:2b:14:fb:
31:21:b6:1a:ec:c6:89:71:c2:df:e8:f7:e2:be:b2:
ba:d9:62:ef:14:b5:e0:83:3a:f4:84:16:88:7b:68:
8a:32:17:6d:eb:3a:2f:50:f1:e6:93:e5:8d:a7:4b:
b5:08:e8:2f:11:44:b4:68:29:ba:1c:52:44:84:4b:
38:c6:0c:ad:74:b7:11:f7:2e:86:81:ea:1a:90:23:
38:a3:be:94:5b:94:6c:de:33:53:97:ab:f2:72:8f:
46:91:7b:dd:52:40:9c:c9:1f:4e:8d:4f:e9:b7:c9:
53:2c:3f:c9:d2:38:72:2a:52:5c:0f:1a:a0:ee:ea:
e5:29:0f:0a:02:25:e0:1d:9e:e2:66:5f:e3:68:ad:
3d:7a:da:95:40:cf:3f:c1:45:4b:0c:63:2f:cb:18:
8c:b0:85:c4:9d:09:ee:84:0d:aa:83:72:61:4d:72:
24:68:5a:64:62:c7:3f:17:1c:7f:7c:f7:5f:0c:ca:
b8:25:e1:4f:75:1e:1b:69:49:5f:a1:36:b1:90:4e:
12:f6:fb:35:e5:1c:0b:c5:ba:c3:51:ca:bd:97:87:
70:bf:26:d9:6b:54:18:d4:f3:18:44:53:6a:8b:92:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:5F:AD:63:40:56:46:D3:17:19:55:9D:24:BD:8A:58:4B:CC:BB
X509v3 Authority Key Identifier:
keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:a8:9e:76:7d:2a:72:88:84:28:e1:68:2e:38:79:d7:62:1a:
00:4e:ad:a8:45:d9:f5:9c:e6:35:fe:80:b2:ae:23:31:e7:d8:
85:f8:1a:94:9d:e9:7e:2e:ad:d5:4c:26:ea:06:bc:a0:64:4f:
b1:9f:b6:06:77:a0:b0:f6:28:2a:4d:82:fd:ea:cd:79:61:9b:
e1:95:93:66:29:3e:14:fc:bd:7c:05:f9:d7:e1:4b:d6:09:26:
f9:83:ea:de:46:1d:bd:12:2b:c1:fd:df:cf:d0:ea:9e:9e:86:
e5:60:76:e6:e3:dd:5a:ca:b7:5e:1a:f5:40:23:4a:10:2a:f0:
ce:28:54:c2:f5:ef:c1:a0:ac:6b:79:17:79:a8:82:61:b8:56:
e5:77:1d:05:7e:04:f1:87:5c:1b:c1:ad:c1:2a:99:04:5f:df:
d2:c7:7f:4c:79:79:19:05:90:63:92:0b:1b:3f:f5:8a:11:3a:
12:16:e8:b6:63:04:cb:0d:9a:f3:9d:07:c9:bb:b0:bb:fd:50:
a4:7f:c9:30:90:6c:a0:46:fa:ad:af:24:e2:41:ce:0e:4b:1b:
ee:6d:52:73:ee:c2:8c:f6:43:ba:dd:bf:92:f0:06:22:72:89:
40:13:74:1a:60:bb:c3:dd:8b:ce:d4:c4:a4:09:45:2b:0b:16:
79:56:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:56:54 2026 by rpki-client