
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
File: 7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json)
Hash identifier: FfW1V27NLxfY6cMobY7DwS68OqRRVJ2TU9VE43abA0k=
Subject key identifier: 2F:9D:8E:8D:5D:9C:B5:9C:DA:35:1B:FE:FC:75:78:86:CC:5F:5B:FC
Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
Certificate issuer: /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Certificate serial: 3581
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
Manifest number: 41BD
Signing time: Sun 04 Oct 2026 14:48:56 +0000
Manifest this update: Sun 04 Oct 2026 14:48:56 +0000
Manifest next update: Sun 11 Oct 2026 14:48:56 +0000
Files and hashes: 1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: cOLN2ZBaBIGDHXS6kox4uUHA699Q1RcwKRoGAyiJ7MQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AAA, serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Validity
Not Before: Oct 4 14:48:56 2026 GMT
Not After : Oct 11 14:48:56 2026 GMT
Subject: CN=6ac26758-fe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:cb:8b:82:35:b0:19:e8:74:f2:f6:37:03:
37:58:b4:d6:93:15:b9:8d:43:1f:bd:a7:f4:38:60:
8c:69:0a:d1:55:96:f8:7c:4f:a0:56:51:d3:f0:10:
12:29:5a:26:ec:14:fc:2a:3b:2a:f5:4d:9d:79:4a:
ca:3c:9c:dd:6d:17:5f:57:be:81:63:07:f8:28:d0:
d1:63:08:ed:f6:fb:fe:98:bc:ad:2c:b2:ac:e9:60:
e8:7c:78:1f:6e:30:8d:a9:dc:fd:ab:1d:15:e9:ff:
7a:f9:d8:ec:65:25:3e:66:64:13:69:c4:04:91:97:
59:ae:83:6b:87:ca:6f:15:f2:26:e1:c4:15:c2:2f:
7e:ef:f3:58:02:f7:36:f8:0d:00:37:9d:98:8b:d0:
a7:a1:62:55:40:19:46:38:c8:30:5d:13:37:59:0d:
b7:0c:6b:1a:20:6b:00:1e:ae:c1:04:6d:ce:09:38:
85:e5:27:82:c5:b0:76:a4:84:82:5b:37:b1:78:fb:
77:2a:60:67:f7:74:37:d6:e2:7b:53:34:bf:b0:6b:
f0:21:2f:2e:71:c5:29:45:05:6a:42:e3:39:e2:2a:
92:c8:27:70:db:ee:e9:f7:31:94:41:a7:2e:ab:45:
2c:f2:66:63:f2:64:ad:9e:73:46:2c:26:ee:3c:ef:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9D:8E:8D:5D:9C:B5:9C:DA:35:1B:FE:FC:75:78:86:CC:5F:5B:FC
X509v3 Authority Key Identifier:
keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c8:98:f4:15:91:d1:ed:05:2a:13:b4:05:60:1d:85:1a:78:
89:80:6f:22:41:17:0c:b3:4a:52:f9:f4:53:12:fc:e4:ee:6b:
99:1a:e0:cd:85:65:d1:14:5b:91:98:c7:b0:02:ff:0c:f0:dc:
8f:93:53:f4:3f:b2:f6:4b:06:4d:45:4c:ee:ec:6d:30:b0:7e:
83:5d:3e:af:51:fe:ae:11:5c:81:82:6d:54:6f:77:1d:07:57:
27:64:32:40:16:0b:95:3b:71:e8:41:9f:a1:b3:64:8e:ed:41:
33:0f:71:31:e3:0e:3d:b8:a9:65:e3:3a:e2:51:a2:6c:02:aa:
84:fd:b2:b2:9f:b2:89:44:53:03:30:b8:bf:93:a7:15:e6:8c:
53:04:a4:8f:8e:26:9f:c2:85:f3:f0:bf:57:45:22:a8:32:71:
4e:1b:2b:3e:6f:41:d0:5a:ff:c7:6e:cf:e1:4a:38:af:75:b7:
2d:90:cc:2a:f0:8b:9b:ab:70:09:ef:85:8c:af:d0:ac:3d:6a:
78:13:70:0f:6e:89:03:7c:20:6e:49:98:58:57:e0:17:d6:bd:
0e:d0:b7:57:b9:79:78:87:bd:ad:9a:21:63:a0:44:2a:d7:9d:
bb:d9:54:84:fb:70:66:1a:1f:25:e5:3d:df:34:e6:3b:46:6d:
2c:0d:eb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:53:58 2026 by rpki-client