
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json)
Hash identifier: yHE+OTIq5OJ9C9oll11H8QsVYA409hltdKTYFg4lKvI=
Subject key identifier: 86:05:7F:9C:F7:2E:B5:F9:E4:17:A6:1A:A5:EC:BC:94:BC:E5:82:AD
Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Certificate serial: 0C28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
Manifest number: 0C1B
Signing time: Tue 08 Sep 2026 18:54:14 +0000
Manifest this update: Tue 08 Sep 2026 18:54:13 +0000
Manifest next update: Tue 15 Sep 2026 18:54:13 +0000
Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: QKjyU8T4JtKGhhA980m3DUpWiHTe2J3/N8YAURYZ0vE=)
2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: oSu7opmD3HBYoBwJbIsmMaGXMM1R4NMeIhfp2irZM0Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 18:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2
Validity
Not Before: Sep 8 18:54:13 2026 GMT
Not After : Sep 15 18:54:13 2026 GMT
Subject: CN=6aa059d5-bf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:f1:21:b5:9b:31:01:36:81:a6:ee:24:46:
96:7e:3f:1f:c5:6a:a1:03:ab:3f:64:d4:80:2f:7e:
c5:0b:bb:c1:2e:36:b8:9e:4d:4b:84:bf:e6:d2:d4:
ba:de:b5:82:89:95:c5:ed:9a:de:8a:f9:2e:2d:b9:
59:3b:99:5a:49:73:44:d2:65:72:02:4a:cb:3e:f6:
3e:31:ef:22:6d:57:08:41:6a:fd:08:61:d5:76:36:
ab:8f:d8:33:67:3b:59:84:38:04:c4:44:2d:a1:de:
d0:3b:01:4a:c4:d7:09:a8:d2:07:d4:89:da:3c:fe:
52:9a:7f:96:94:d5:e7:c1:9f:56:a3:c9:7d:3b:bc:
24:50:d3:d2:61:8a:2f:fd:25:62:24:6f:d9:a1:2c:
b8:36:ef:ca:11:2d:7a:03:41:48:60:73:7b:1b:7a:
29:ee:24:8d:2f:82:96:b4:62:a8:7e:84:66:07:8e:
6c:6e:d5:ac:1d:05:74:a1:41:66:a6:3c:8d:52:bb:
32:9d:36:bb:fc:87:a4:65:a9:f3:b3:a5:0d:ec:43:
29:04:7d:bb:37:f0:be:06:6b:69:38:af:5f:00:92:
23:0a:bc:7d:c6:2a:1a:77:5e:4b:cf:06:18:04:37:
56:70:9f:55:6f:d4:4c:a3:8d:95:3d:5f:e8:d1:d7:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:05:7F:9C:F7:2E:B5:F9:E4:17:A6:1A:A5:EC:BC:94:BC:E5:82:AD
X509v3 Authority Key Identifier:
keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:4e:9d:a2:3b:0b:38:e6:ad:f4:a1:ff:10:ce:42:5d:e4:4f:
fc:7e:be:18:38:c3:6d:a4:b9:4b:fd:fe:ca:33:20:c0:58:f4:
06:ef:ab:2f:5e:84:c7:ca:a0:06:9b:2f:73:f9:ff:f1:f3:7e:
88:37:9c:a4:ec:8d:c5:2f:5c:b3:77:a4:80:58:39:aa:21:eb:
70:d7:e4:77:0b:5e:b0:7d:23:b4:94:68:94:10:02:09:48:04:
82:7d:e7:13:49:8b:2e:db:e3:c0:c0:f6:bc:fd:71:92:d4:b0:
e8:8b:57:9e:18:67:05:d8:3e:ce:20:f2:b2:5e:ad:86:4d:b6:
0e:81:91:0b:43:cc:7e:85:b5:15:32:a5:57:e2:c7:b8:70:97:
a4:6c:9e:67:18:df:8c:31:48:cc:67:ae:0e:8b:e9:73:d4:53:
0a:04:9f:b7:1e:ad:0e:66:1f:98:ec:04:11:60:13:7f:9c:c0:
da:2c:16:ae:21:49:8d:e2:23:9d:16:76:45:5f:76:28:31:28:
64:06:7d:53:0e:b9:f7:d0:21:aa:be:65:8b:bd:81:22:ba:2f:
09:ed:e1:12:06:1a:db:c8:67:5f:94:e5:94:f7:39:d0:25:e7:
75:9b:35:06:8a:4b:10:ba:3f:76:03:6c:f3:1c:1a:08:19:26:
2b:65:b9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:31 2026 by rpki-client