
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json)
Hash identifier: SGXq2J2JKPRvs68F+v36oGbblUgLXox63yKy78OTUzE=
Subject key identifier: 14:43:39:3C:24:BD:3D:AA:3B:D9:58:5E:58:9E:62:C5:B7:8F:68:95
Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Certificate serial: 138F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
Manifest number: 1382
Signing time: Thu 08 Oct 2026 17:01:34 +0000
Manifest this update: Thu 08 Oct 2026 17:01:34 +0000
Manifest next update: Thu 15 Oct 2026 17:01:34 +0000
Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: codztR1cDlHl3hkSsMnlxjWZZjnjONr8QNXvQ/lD7lw=)
2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: o60MWP+DlNCHL5TPTYVqrO/Lu4kM0QYf6Eyv0LamcPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5007 (0x138f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B
Validity
Not Before: Oct 8 17:01:34 2026 GMT
Not After : Oct 15 17:01:34 2026 GMT
Subject: CN=6ac7cc6e-f533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:62:b2:44:45:7d:fb:be:e8:ef:25:4c:49:75:
f8:92:c3:3b:da:a0:2c:77:ed:fd:b1:8e:af:3c:98:
d9:a1:f3:54:8c:a3:9b:8c:2a:85:75:13:16:d1:c3:
bc:fd:83:88:23:f8:b3:8e:b9:60:00:d5:c9:2f:7d:
77:c5:49:8d:bc:79:38:a0:8d:bf:35:2c:28:31:ba:
72:ab:ce:b2:03:95:36:6a:dd:56:b3:08:f8:5f:c3:
03:51:ef:f4:ec:ca:b3:d3:d4:89:40:7c:b8:b0:37:
67:5e:a0:54:8c:52:15:62:7c:14:9a:13:c1:f6:4a:
28:2a:92:57:f3:04:c3:8a:f0:26:91:6b:47:e8:e4:
11:f8:86:9a:ff:48:8e:4c:ab:89:6f:d8:85:fb:65:
d4:1d:0f:d3:fb:40:3f:df:f3:62:86:d9:b6:c7:ca:
7c:4d:45:47:bc:d1:48:4a:d0:92:2c:1f:f7:c8:07:
82:ab:0f:70:aa:66:32:56:e8:48:e3:6d:4f:94:e1:
4e:08:f7:9b:9a:db:84:ad:b2:38:06:de:cc:c8:c6:
cc:08:fa:cc:a5:fc:d7:ba:3b:cf:73:8f:ce:03:ad:
b8:9d:02:41:7c:e5:2f:b0:1e:48:c5:da:a6:18:00:
7b:77:72:53:ad:be:f7:52:8c:45:ec:1f:a6:dd:a3:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:39:3C:24:BD:3D:AA:3B:D9:58:5E:58:9E:62:C5:B7:8F:68:95
X509v3 Authority Key Identifier:
keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:46:b7:6e:45:5b:5e:8a:6c:84:d5:20:01:d5:ce:6e:e5:3a:
72:01:48:d3:76:5d:e4:56:10:60:20:62:4d:b9:06:4e:af:38:
10:a2:d1:e5:59:7b:a4:26:36:70:e3:4e:3b:b8:2d:8a:15:d4:
d1:eb:77:8c:be:44:60:01:9d:23:a8:54:3b:8c:5a:2d:2a:9f:
1b:34:4a:e1:00:d4:3c:44:47:31:e1:f9:7c:8c:bf:10:31:4f:
da:32:39:af:d7:ab:ec:1d:06:b0:fb:b8:ef:8e:eb:aa:a1:93:
bf:45:cc:76:91:f4:3d:5b:f3:53:97:96:4d:10:27:13:51:02:
09:ef:b4:42:bc:31:7e:d8:54:a9:73:41:1e:b0:19:05:55:c7:
1b:c3:59:34:87:9d:31:87:30:f5:7c:77:b2:5e:40:7e:f1:ae:
72:60:42:c7:b1:24:63:9b:84:f9:a1:0e:cd:79:94:9b:60:04:
75:e4:4f:9d:eb:1b:2b:af:1c:a8:a7:d5:dc:ea:d6:b3:7d:cb:
e0:f1:11:61:ab:78:3a:dc:d9:f5:ca:25:85:95:7a:d3:e3:c2:
8f:57:4a:b0:52:94:7f:08:d0:fe:5f:30:bb:51:c9:be:aa:21:
04:52:6f:7b:75:78:8d:14:bb:9a:16:98:01:12:3e:cf:34:44:
28:78:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:03:43 2026 by rpki-client