
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
File: 7a8emnnZ_ssQeIOv03V_qPcKMtc.mft (raw, json)
Hash identifier: DBGaMCZjslrfWRmKq+2iKyS/fS77RQrq3M+T2oOJWpw=
Subject key identifier: 7F:9F:60:A9:80:E6:DF:0E:2F:56:FB:BE:1F:A4:99:E2:75:5A:47:7F
Authority key identifier: ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7
Certificate issuer: /CN=A91A2F6C/serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
Certificate serial: 0AA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
Manifest number: 0AA4
Signing time: Tue 06 Oct 2026 19:40:15 +0000
Manifest this update: Tue 06 Oct 2026 19:40:15 +0000
Manifest next update: Tue 13 Oct 2026 19:40:15 +0000
Files and hashes: 1: 7a8emnnZ_ssQeIOv03V_qPcKMtc.crl (hash: stwsLZGrGIwxBC7q6RU5gZJWLvbHKJBgLYEvNljPHfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl
rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2F6C, serialNumber=EDAF1E9A79D9FECB107883AFD3757FA8F70A32D7
Validity
Not Before: Oct 6 19:40:15 2026 GMT
Not After : Oct 13 19:40:15 2026 GMT
Subject: CN=6ac54e9f-e039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:cb:f8:e6:3f:28:20:9d:00:2f:3b:5b:80:
09:1c:aa:c8:57:59:23:13:6e:53:60:47:6d:1a:18:
d3:b9:b3:4e:b4:1c:ae:6f:bd:63:e5:b4:08:67:92:
c5:11:ab:c3:ce:03:73:95:6b:81:e6:67:78:71:fa:
a8:65:67:28:21:4b:7b:ec:89:5e:b9:61:c9:ac:15:
f7:9f:1f:75:f1:2b:9a:f1:a8:db:9f:13:5a:d6:aa:
ed:df:7e:a2:81:cf:44:d6:36:44:83:95:54:0c:5e:
15:32:c9:6b:df:77:fc:8b:39:30:60:31:b3:68:ff:
3a:76:e9:79:0d:56:75:42:d3:d5:ca:75:97:a0:47:
d7:e4:6d:20:4b:bf:d8:80:fd:54:d5:07:06:e1:79:
27:17:12:6e:72:7e:5e:61:d0:2e:56:f0:34:ee:36:
95:3f:f2:de:c5:2c:6e:20:dd:ed:d9:c4:9e:78:fb:
80:87:74:73:4b:1a:78:e3:27:0b:4e:6a:66:31:cf:
17:fe:2b:29:22:db:e0:70:48:3d:5d:b5:23:f6:2c:
5f:98:6d:29:09:75:e9:d2:a6:4e:30:fb:74:75:1a:
cd:39:35:6d:14:2c:73:c9:15:40:51:f0:3e:65:72:
a3:67:bd:a8:63:d5:6c:7e:94:33:c4:f1:01:d3:50:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9F:60:A9:80:E6:DF:0E:2F:56:FB:BE:1F:A4:99:E2:75:5A:47:7F
X509v3 Authority Key Identifier:
keyid:ED:AF:1E:9A:79:D9:FE:CB:10:78:83:AF:D3:75:7F:A8:F7:0A:32:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7a8emnnZ_ssQeIOv03V_qPcKMtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F6C/9E31F3B28AB311EA93A6BA3EC4F9AE02/7a8emnnZ_ssQeIOv03V_qPcKMtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:09:19:37:2f:20:5f:a1:81:50:9d:97:4a:ed:ec:5c:85:0b:
be:58:58:5d:0c:1d:81:85:6b:e6:42:b9:fb:b6:be:4f:d4:cd:
8c:c0:2b:72:90:69:16:21:75:ef:ba:0f:53:3f:3e:c8:97:56:
b4:27:88:01:92:bd:d0:d7:00:1d:9b:47:06:19:03:a4:73:28:
03:6f:47:d1:1b:bd:16:37:70:1f:fd:28:c0:44:c8:db:3a:77:
25:e7:ad:fe:13:cb:f5:dd:b9:39:d3:a2:a7:25:c8:1f:01:16:
19:81:23:20:8f:ae:ff:9a:3f:23:58:d8:59:10:04:40:6b:d3:
94:07:13:cc:dd:dd:8b:a8:04:1e:0b:22:b8:d7:ba:5e:88:5f:
1c:53:e3:89:6b:e1:24:80:39:c1:36:86:a2:13:bf:c5:16:84:
4a:3f:62:da:4e:40:a7:90:5e:ab:c7:75:cd:ab:b0:43:e0:20:
f2:4a:5f:9f:e6:fd:25:7c:eb:50:c1:61:05:d5:ee:95:a9:f8:
66:80:53:7b:96:b3:73:72:f7:bb:fc:c1:65:f6:da:3b:a7:dd:
70:0c:ee:98:80:ca:70:c4:27:37:85:5f:fa:cf:b6:03:2b:fd:
cf:6f:5d:3a:74:1b:20:7a:1a:0d:c0:ff:65:6c:83:56:57:01:
c0:c2:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:38:01 2026 by rpki-client