
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
File: U7k_pg5FC4jfnLdgztYlltomSAY.mft (raw, json)
Hash identifier: chMH3MTB5KLOpBPWspYGC/4xQedTfiFs4xTWpNtSprg=
Subject key identifier: DA:6F:E9:96:EB:60:17:AA:96:8A:72:7F:3A:6A:61:07:80:97:5F:98
Authority key identifier: 53:B9:3F:A6:0E:45:0B:88:DF:9C:B7:60:CE:D6:25:96:DA:26:48:06
Certificate issuer: /CN=A91927A0/serialNumber=53B93FA60E450B88DF9CB760CED62596DA264806
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7k_pg5FC4jfnLdgztYlltomSAY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
Manifest number: 08
Signing time: Mon 05 Oct 2026 09:43:58 +0000
Manifest this update: Mon 05 Oct 2026 09:43:57 +0000
Manifest next update: Mon 12 Oct 2026 09:43:57 +0000
Files and hashes: 1: U7k_pg5FC4jfnLdgztYlltomSAY.crl (hash: vyvfgez6nQxoAdhb47texNmxnfHJyWfH65W/PIfQI6I=)
2: 073A991CB7C211F1A276FF195F11F970.roa (hash: ESHniOIE6hjdTnh19HGi7Rold0meXeAIjgAAbP+FVrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.crl
rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7k_pg5FC4jfnLdgztYlltomSAY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91927A0, serialNumber=53B93FA60E450B88DF9CB760CED62596DA264806
Validity
Not Before: Oct 5 09:43:57 2026 GMT
Not After : Oct 12 09:43:57 2026 GMT
Subject: CN=6ac3715d-2c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:48:20:c8:ac:1e:96:78:fc:07:f7:9e:e1:
18:3e:22:4e:eb:d5:55:63:5a:69:27:c3:0d:09:6e:
c9:c5:3b:fd:d6:28:00:fa:6a:ce:30:bb:bc:9a:b3:
5d:f6:ee:9c:35:93:1d:06:a6:9a:14:0d:5f:f3:8b:
b6:0d:dd:57:59:da:a5:1c:2c:6e:ba:d6:af:27:47:
9c:9b:0e:cf:ef:43:e7:1e:95:b0:2d:e5:09:52:e4:
c4:79:dd:b9:51:86:14:bb:71:99:94:b9:08:32:ee:
6e:61:6a:c2:4e:ab:4d:1c:09:ea:34:4f:a1:fe:dd:
1a:cb:ec:84:6c:a3:7e:2c:f8:18:74:3a:65:88:9e:
73:0d:9c:44:02:32:e1:e5:d8:6d:5f:5f:64:d3:24:
36:00:b3:07:bb:2c:4f:aa:d5:89:d3:10:5b:ce:79:
b6:e6:87:b3:31:4c:31:1e:3d:70:1a:00:23:d8:15:
32:fb:06:69:cd:e1:a4:bf:82:83:8b:ff:02:95:7b:
30:00:75:82:1d:1f:91:b6:78:84:60:af:df:a0:c0:
b4:87:0a:70:7b:ca:b7:d9:8f:ed:d4:2c:5c:ca:94:
03:7b:c7:b1:85:6f:1b:9e:cc:5c:21:f2:03:16:08:
f2:a4:2b:4f:af:d5:59:f9:e0:40:11:d1:be:61:8c:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:E9:96:EB:60:17:AA:96:8A:72:7F:3A:6A:61:07:80:97:5F:98
X509v3 Authority Key Identifier:
keyid:53:B9:3F:A6:0E:45:0B:88:DF:9C:B7:60:CE:D6:25:96:DA:26:48:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7k_pg5FC4jfnLdgztYlltomSAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:72:8b:21:70:0a:c3:d0:91:2c:44:4b:58:92:1f:5a:c6:05:
27:29:3c:8b:24:c2:27:ac:16:b1:6e:ac:9b:ab:5d:da:c0:60:
ad:1b:cd:66:dd:24:dc:34:c2:aa:7e:ff:1f:05:fa:82:e6:84:
de:28:61:1d:c2:fd:97:e7:b2:12:46:a6:8a:80:71:6e:8b:fb:
55:ee:2b:a9:a7:f2:f6:3e:73:24:0b:30:5d:ff:b5:b4:97:69:
1c:9b:a3:e9:db:9e:97:ae:6c:3a:84:dd:36:57:b6:e4:bb:98:
e4:bd:5d:92:f5:5d:c5:be:d0:ac:b1:03:f8:cc:d8:03:76:a0:
69:73:a1:f3:13:e9:58:08:4f:f3:3b:25:93:09:73:80:c2:b5:
1a:27:3a:59:7a:ca:37:f1:d4:2b:86:da:e9:20:a3:96:89:2c:
7b:65:f6:4c:25:63:7b:5c:fa:fc:3c:f7:b4:ba:0f:5f:ce:b0:
72:fb:7c:8e:67:cd:5c:e9:6b:b5:94:a6:1b:00:b5:12:cd:76:
e0:fa:b6:05:26:2e:7d:d3:55:dd:fb:27:f4:cf:88:4d:f9:88:
be:ab:af:b9:f0:71:c7:32:fe:75:78:7d:fb:54:16:d7:55:de:
17:61:ab:d3:9b:e4:73:d7:99:67:b6:e1:b7:75:c5:f1:be:e6:
03:f9:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:05:14 2026 by rpki-client