
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier: u8le3837y3prYRgwPH18VDxv2B8KfsO9od3A5H07F3E=
Subject key identifier: 75:00:EF:CA:38:B0:0B:C4:69:89:FE:53:8F:30:F5:7D:E5:F4:6A:37
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial: 044E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number: 0438
Signing time: Sat 03 Oct 2026 00:35:02 +0000
Manifest this update: Sat 03 Oct 2026 00:35:01 +0000
Manifest next update: Sat 10 Oct 2026 00:35:01 +0000
Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: fw22aOdKWScnebE15OFiffq6UDf1KFEmmI9VWAi0Irk=)
2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: k2Tm+VECAOkqgz18jDdhRYGz/UVnU5T68kA32PJlYJ8=)
3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: SiaKfWh20onDMNEmqxmOZpPd2+52s+o/XbL2Uti7Li8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102 (0x44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Validity
Not Before: Oct 3 00:35:01 2026 GMT
Not After : Oct 10 00:35:01 2026 GMT
Subject: CN=6ac04db6-0af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:63:c3:3e:5e:bf:fa:bf:e1:aa:f8:d8:f6:
5b:6a:ca:40:dc:4d:fc:c7:89:2e:a5:56:6f:d0:d8:
66:63:ea:31:b9:69:2f:47:c4:70:91:e4:48:5a:65:
0d:29:b7:58:4d:7c:39:79:95:2a:e4:e0:2d:8c:9e:
e6:f8:9b:63:b9:93:84:18:5d:c9:0b:2a:0c:b5:41:
66:7c:7b:e6:3d:99:3b:34:74:ea:29:a7:13:ec:ab:
14:9e:96:66:94:f5:f1:dd:f6:4b:60:37:20:4a:bd:
b6:e1:7b:88:53:dd:49:17:93:ff:f9:8c:85:2f:49:
66:c5:fe:ce:c1:7f:fe:c4:c2:57:c1:7e:d0:41:04:
65:79:32:6c:be:bb:1b:2a:8d:6c:7a:fd:f3:f9:2a:
1e:6e:d9:7e:18:a8:a8:1a:15:78:e9:ce:5c:9e:d3:
22:a5:f9:34:17:db:3f:aa:6b:d1:99:86:9b:07:84:
44:5f:97:1a:be:25:24:4a:42:e5:37:05:6d:72:e5:
9c:59:f2:fc:8a:5b:35:22:a8:9c:fb:a1:53:0f:3e:
65:65:e9:56:3c:bd:04:eb:74:b0:47:0f:c7:d8:49:
bf:b8:ed:d4:1b:e1:5d:d5:b3:ea:42:15:f4:f6:53:
61:09:52:3f:46:f7:ff:a6:77:7e:9e:6e:76:43:8e:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:EF:CA:38:B0:0B:C4:69:89:FE:53:8F:30:F5:7D:E5:F4:6A:37
X509v3 Authority Key Identifier:
keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:39:1e:44:ae:1a:0f:ec:34:a5:ab:9b:04:4b:95:12:e5:07:
b1:d2:b0:8a:6b:30:dc:a1:98:21:58:2e:a5:64:a1:ab:1f:7d:
15:84:61:4b:a3:85:0d:d9:3c:f4:00:6d:ae:96:5d:aa:b8:c8:
4b:ae:fb:a0:05:c1:18:f6:93:9e:21:ba:59:df:dd:c2:c8:1a:
e7:86:b4:5d:ab:aa:c8:07:ec:01:81:2f:ae:96:aa:62:88:5c:
45:d3:79:19:81:f2:cd:a8:f7:53:50:c1:e8:dd:16:d8:d1:b9:
8d:f5:0d:29:69:2f:d2:f5:ec:f8:c3:86:45:16:94:04:80:a8:
84:2d:4d:f7:26:9c:28:15:6d:99:ed:5a:08:93:16:dc:ba:6f:
9f:5b:46:48:78:84:df:12:4a:82:58:ac:bb:a9:e1:8e:69:2c:
d9:55:d1:4e:e6:0f:7b:78:60:9f:1e:e6:6d:47:2b:f1:7f:3f:
32:2a:99:11:27:0a:2d:f7:d3:95:d7:57:1c:62:49:9e:e7:83:
64:b0:15:c5:4d:af:a3:5e:9e:95:1b:c2:54:89:bd:6c:66:31:
91:96:43:e6:97:0d:ab:a5:76:94:7a:d1:79:8d:7a:03:af:6f:
29:51:e2:6a:7b:72:dd:0f:ed:93:98:a8:d4:15:3d:19:e0:2b:
e2:ac:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:16:00 2026 by rpki-client