
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
File: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft (raw, json)
Hash identifier: YN3CHbWW1Q+89aZN5LG64mJb0ZDF2cTyL7cPJmLV4eM=
Subject key identifier: 0B:48:37:67:BE:77:BC:F3:F9:CF:E2:14:A8:48:95:52:02:DC:A6:BC
Authority key identifier: EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
Certificate issuer: /CN=A91A45C3/serialNumber=EEC1462457141B83FD3DFC25896A76023DE84739
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
Manifest number: 63
Signing time: Wed 14 Oct 2026 23:04:51 +0000
Manifest this update: Wed 14 Oct 2026 23:04:51 +0000
Manifest next update: Wed 21 Oct 2026 23:04:51 +0000
Files and hashes: 1: 7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl (hash: 4xCA/XnQaJcr/XGJQEn6o8Py7e7GQXCu47P8SIkZO2g=)
2: 2FC19BF83D4F11F19A601DD5A5833773.roa (hash: 56GdB+plmjNwHg70SCuUFxrfa+TUalszBHQ17pYd9is=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl
rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 23:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45C3, serialNumber=EEC1462457141B83FD3DFC25896A76023DE84739
Validity
Not Before: Oct 14 23:04:51 2026 GMT
Not After : Oct 21 23:04:51 2026 GMT
Subject: CN=6ad00a93-d76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e7:31:1e:2f:6b:00:e7:61:3c:92:73:00:4a:
68:fc:fe:04:b3:ef:b4:e2:70:c3:51:9b:5d:a9:06:
57:2a:02:88:d8:d3:6d:ae:87:c4:3f:36:8d:69:b9:
a2:48:bf:33:26:ca:c3:4a:4e:4b:56:9e:ac:99:d2:
50:fc:1d:cb:ad:59:d9:53:1c:7e:61:a0:7c:40:7f:
74:c5:42:aa:ad:a5:8c:6f:9c:3f:e2:23:08:06:dc:
e9:7a:1b:a3:c5:ad:17:68:ec:96:7c:12:8a:39:7c:
bf:1f:51:d6:04:e2:08:e0:f5:68:ad:e2:cc:77:1a:
0e:ce:0e:46:19:98:36:c8:24:47:29:f2:cb:df:f1:
a3:87:0a:5d:2e:06:f0:ab:46:57:6f:7f:06:46:7a:
54:c0:33:2b:3c:d8:9b:d9:45:30:98:32:ef:53:f5:
70:f4:ac:33:bf:29:b1:fc:14:79:09:a2:2b:80:f4:
be:af:4b:2f:62:ae:fe:25:4f:49:bf:9b:9a:cd:31:
25:35:c3:25:dd:fd:35:bc:a8:24:0b:9d:8e:43:c1:
2c:35:79:a5:5a:0e:d3:6b:c6:34:7e:6a:f6:5a:2b:
82:8c:4c:a4:09:f8:02:0a:df:7b:5f:96:68:b3:05:
2d:ad:28:a6:ea:e7:63:3b:89:0a:d1:12:54:dd:c3:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:37:67:BE:77:BC:F3:F9:CF:E2:14:A8:48:95:52:02:DC:A6:BC
X509v3 Authority Key Identifier:
keyid:EE:C1:46:24:57:14:1B:83:FD:3D:FC:25:89:6A:76:02:3D:E8:47:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/7sFGJFcUG4P9PfwliWp2Aj3oRzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/DD0A3FE237AD11F1AADCA634B7833773/7sFGJFcUG4P9PfwliWp2Aj3oRzk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:ef:8b:dc:6b:aa:42:c0:45:50:df:32:37:76:cf:a5:0b:d2:
38:88:65:6a:a2:c8:c4:33:15:4e:4e:2c:87:83:14:64:d7:ca:
5f:95:e4:60:93:80:80:24:7e:fd:26:42:d2:31:05:c3:5a:97:
c0:13:64:79:db:99:c9:8e:04:c2:0e:07:af:85:1f:d8:cf:34:
25:44:98:89:28:6f:a0:20:02:9c:b2:58:82:af:f4:0e:c2:e1:
4b:4a:1e:77:50:4c:3e:0d:ff:cd:8d:fa:94:42:ab:5b:e6:4a:
58:52:46:d2:53:bd:dc:48:4d:9a:09:0c:99:3b:96:9e:d0:d7:
c5:e3:a1:b8:56:01:d7:d9:5e:7b:e5:c2:5f:cb:c5:72:55:90:
d9:ee:5d:8b:6c:5f:09:6e:6d:c2:b1:ce:c6:d3:20:b0:d4:23:
f1:57:69:60:c3:f5:c2:8b:b3:69:92:dd:43:54:2c:ea:6a:65:
b1:7f:36:06:aa:0a:41:6c:93:6b:00:f6:48:fd:e3:74:6a:2b:
a7:e7:24:25:f6:90:37:eb:6f:ea:d4:a0:40:ae:7b:cb:d2:66:
6b:1b:31:63:78:ee:57:15:fd:95:7c:de:8f:3d:63:02:c6:62:
0c:35:20:e7:29:06:01:0c:63:35:1a:a9:08:c9:39:ae:4f:46:
6d:6d:19:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:55:50 2026 by rpki-client