
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
File: _7jr91F1lPQetjZXPZajVwaXSbk.mft (raw, json)
Hash identifier: 3oUM/ydU5ELXFqcqWiHG5i2CMMbFJMnwADKakuRRWDQ=
Subject key identifier: AE:D1:BF:FE:A9:23:9C:B6:06:72:03:E0:B5:8A:AE:8F:E9:76:43:0B
Authority key identifier: FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
Certificate issuer: /CN=A9191136/serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
Manifest number: CA
Signing time: Wed 21 Oct 2026 07:20:47 +0000
Manifest this update: Wed 21 Oct 2026 07:20:47 +0000
Manifest next update: Wed 28 Oct 2026 07:20:47 +0000
Files and hashes: 1: _7jr91F1lPQetjZXPZajVwaXSbk.crl (hash: K51Lggvmk0vSaMn2y3Q2yA+ZuaDffHbrfNaKSgEp8sk=)
2: 97B512889AA911F08374FE83C4F9AE02.roa (hash: lrVsCGN6vE18SBXjQLOCGLgg3nz8J37VCsU/VIopgQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl
rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191136, serialNumber=FFB8EBF7517594F41EB636573D96A357069749B9
Validity
Not Before: Oct 21 07:20:47 2026 GMT
Not After : Oct 28 07:20:47 2026 GMT
Subject: CN=6ad867cf-346c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:b0:45:cd:5b:63:33:48:23:7a:fb:f3:8d:
2c:24:60:de:c2:b7:ee:3c:8f:8e:cc:16:7b:63:b7:
57:a2:e1:fe:81:94:ad:e0:67:ed:45:30:06:c1:fa:
8f:35:30:d1:b5:47:48:7b:a3:e9:1c:6f:f4:09:f9:
fc:b1:47:42:cf:f8:58:19:b7:ad:e1:9b:59:82:94:
46:dd:bc:3c:d1:0d:20:df:e7:36:79:00:37:47:81:
08:33:97:c9:0b:ca:3f:38:6b:d7:99:fc:92:49:e2:
72:34:f4:65:ee:31:4a:8f:d8:42:de:e2:9b:ab:6d:
33:f2:bd:52:a7:0d:8d:ee:cd:83:d6:a5:88:2c:5b:
86:f5:d4:e4:f1:92:dd:17:56:4c:5a:d1:3f:1a:57:
93:4b:f4:72:5d:6c:9d:22:be:93:f5:c6:3f:a2:ca:
73:c0:8c:19:a4:db:29:e8:ba:db:b6:d1:fc:df:a0:
81:d2:93:89:0b:0f:20:25:34:f4:e1:8e:b2:b2:41:
a2:65:aa:67:29:e7:55:80:9e:07:b7:85:66:64:29:
02:33:af:03:dd:68:43:52:d1:d3:76:ca:e0:02:41:
e3:38:0b:7a:38:8b:e4:4e:b4:78:da:35:37:59:05:
58:40:f0:39:bb:81:ac:d6:69:85:28:43:58:f8:91:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:BF:FE:A9:23:9C:B6:06:72:03:E0:B5:8A:AE:8F:E9:76:43:0B
X509v3 Authority Key Identifier:
keyid:FF:B8:EB:F7:51:75:94:F4:1E:B6:36:57:3D:96:A3:57:06:97:49:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_7jr91F1lPQetjZXPZajVwaXSbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/03C4287A9AA911F095AA0480C4F9AE02/_7jr91F1lPQetjZXPZajVwaXSbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5f:ef:46:a0:03:78:4e:c4:9d:cd:e6:9e:30:86:f2:f2:49:
a8:6b:98:d5:f0:0f:40:22:36:63:f2:b7:6e:c3:8a:17:25:f8:
2b:75:c4:b5:fc:07:00:1b:06:fa:66:9f:0d:3c:4f:df:4b:2a:
dc:42:80:dc:34:aa:d3:18:b9:0f:0b:90:73:ad:34:e3:23:9c:
4b:c2:6e:8e:38:91:b4:f7:4b:32:fc:f5:33:62:84:24:7c:1f:
ac:b5:82:c7:ef:84:d4:d8:1c:24:5e:7c:b8:01:3b:4b:e5:65:
3e:b5:55:11:d4:a5:d0:10:5b:56:d1:27:76:51:05:e3:c8:54:
90:0b:54:53:e9:2f:b6:b9:9d:7c:6c:8e:e1:5c:0a:50:b4:fc:
47:37:85:1e:17:b1:3c:67:78:5e:55:f3:fe:4b:9e:ce:9a:bc:
33:c0:58:79:e2:52:07:a2:6f:16:63:49:dc:37:82:23:b5:48:
50:f1:36:09:c9:9b:d3:45:bb:23:17:a6:bb:0b:ce:0d:63:25:
2d:26:a8:eb:bc:e9:f4:76:66:6f:52:27:49:d4:08:be:31:f2:
70:3e:89:cc:0c:ae:1f:4d:5e:37:6b:c1:16:af:f7:f4:a1:41:
b1:b3:af:e7:96:15:8c:96:18:bf:49:02:80:e7:c8:23:a7:47:
24:30:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:17:47 2026 by rpki-client