
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
File: 7TFghH3ErtktjFnRmEZbHL7y3yI.mft (raw, json)
Hash identifier: /XhEDXq584S/stCLtyC2pzgVSFS3882DHh57A3M+uNY=
Subject key identifier: 41:E6:7C:7D:00:84:4B:A7:59:81:08:20:FE:41:4B:A6:51:F7:7A:29
Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22
Certificate issuer: /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
Manifest number: 01B5
Signing time: Wed 07 Oct 2026 04:27:21 +0000
Manifest this update: Wed 07 Oct 2026 04:27:20 +0000
Manifest next update: Wed 14 Oct 2026 04:27:20 +0000
Files and hashes: 1: 7TFghH3ErtktjFnRmEZbHL7y3yI.crl (hash: NJwsNK20MIycINKJlK6kh2cYrTYBjdHvpODUydNQNac=)
2: 26FB7E3ABE4111F1BBAE9B086411F970.roa (hash: V+vOkhDCczTWhMx1bTt1hl61/d9z3gsXXE9fPjuY/c8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl
rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22
Validity
Not Before: Oct 7 04:27:20 2026 GMT
Not After : Oct 14 04:27:20 2026 GMT
Subject: CN=6ac5ca28-6d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:0a:8d:8f:67:e0:ef:53:70:6e:cd:19:f8:
5c:d7:dc:9f:2c:cb:97:a0:66:90:fb:bf:43:22:67:
2b:c1:e7:f0:2b:a7:10:3b:ad:3a:d4:94:39:df:ca:
24:c6:7c:a3:04:76:37:8a:95:a2:ac:0c:7a:41:f4:
8f:ff:7d:4c:bd:8a:c7:b4:91:4e:d8:ad:84:d6:f6:
39:64:ed:e5:69:24:96:0e:cf:0f:a4:cb:b6:90:f0:
a7:c5:8c:82:e2:39:e8:4f:2d:e8:46:d8:f6:4d:a6:
f6:e2:8b:54:1f:85:94:66:5a:8f:6a:48:c1:94:23:
ca:90:b1:01:33:c0:d2:89:96:87:71:3d:73:42:7d:
9c:7d:d2:b6:fa:f9:eb:d2:69:d5:4c:99:cf:f5:f3:
0a:cf:27:87:ee:fe:11:28:cc:c8:bd:0d:c7:f2:a7:
6d:24:aa:87:31:7e:cc:70:6a:dc:60:48:10:ce:ee:
ba:d7:06:16:f9:e6:dd:6f:af:2c:b1:70:fe:80:3a:
d9:07:60:2e:28:e3:7e:32:20:b7:c9:18:52:f2:48:
f8:87:ff:34:ee:85:3a:8e:70:fe:19:a5:4e:72:1a:
a3:8e:99:92:12:f1:de:a2:7d:06:e3:a8:9f:82:84:
e0:1a:10:a4:33:30:e8:20:7f:0d:1e:5e:80:08:89:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:7C:7D:00:84:4B:A7:59:81:08:20:FE:41:4B:A6:51:F7:7A:29
X509v3 Authority Key Identifier:
keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:36:a0:e5:44:31:08:7d:46:6b:8d:13:02:d9:ee:6e:5e:78:
cb:40:69:12:11:1c:47:43:a9:03:19:48:fa:f6:81:56:17:c5:
79:09:4c:14:55:23:06:2f:8b:a0:07:f1:ab:dd:53:bb:9f:fb:
c7:56:b5:36:2b:a9:4f:fd:42:43:28:a5:90:f2:8f:27:76:4a:
d2:1d:57:e1:cc:8d:6b:3f:57:1b:d9:62:16:76:5a:e5:5f:99:
f7:72:d4:c9:dd:76:4a:b8:ab:2d:d3:97:cd:46:6c:82:92:ff:
c3:2b:5f:81:3b:04:11:a4:c7:36:41:a8:6a:32:dc:05:e6:6c:
56:38:22:54:0c:3b:f7:90:c3:22:f4:a0:77:17:8f:00:04:c6:
c2:a8:a5:b7:cb:b7:f2:0b:e4:fc:0d:c7:5d:36:68:7f:52:45:
b1:7e:9d:81:b0:55:9e:32:04:05:8a:a9:a2:bc:43:cf:d5:48:
56:90:59:49:0e:ef:a6:9d:2e:4c:59:76:9b:5d:b9:6f:9b:9e:
56:9f:ab:d8:8b:21:06:76:4b:c7:ee:92:d0:b8:f2:45:e2:e6:
29:2c:b5:d3:fe:7c:71:0b:e5:58:6b:17:e2:07:0e:c9:d6:32:
dd:eb:ac:8c:72:45:cd:e3:e1:de:06:ca:16:60:8d:3d:ad:8a:
0d:60:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 06:53:14 2026 by rpki-client