
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json)
Hash identifier: lMF4dMBdh/2R49X4SyiX3PdU1GT6DX/gLPAE5uM7eBg=
Subject key identifier: 9B:72:D2:EF:1B:EB:E2:F3:C5:47:11:AC:70:EB:B3:36:C8:6E:06:56
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
Manifest number: 020B
Signing time: Tue 20 Oct 2026 23:34:51 +0000
Manifest this update: Tue 20 Oct 2026 23:34:50 +0000
Manifest next update: Tue 27 Oct 2026 23:34:50 +0000
Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: NErLkm2fqQZsLck9bKXjDOvi8nPszwT6k4+MOZ5ev4k=)
2: E2B84D6C99FF11F1A9158CDB4B11F970.roa (hash: DHn76d22Jk3eP91ucVOK7OtumZBe4NWc4zR6YDdAtGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Validity
Not Before: Oct 20 23:34:50 2026 GMT
Not After : Oct 27 23:34:50 2026 GMT
Subject: CN=6ad7fa9a-ed6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:0d:18:42:f2:1d:63:47:de:14:32:fe:77:
fa:e2:5f:2d:07:e7:ba:7f:83:ae:c0:50:90:32:a7:
61:c1:03:d3:43:26:6e:7a:66:66:f0:49:3f:77:a7:
9b:6e:4b:62:21:90:9c:42:c4:48:61:30:87:16:f1:
55:70:7c:31:fb:ae:d3:57:88:7e:e2:4f:76:44:58:
80:e8:66:0b:7e:64:4b:f8:b7:f6:c2:74:d5:99:ae:
74:66:d4:61:94:f9:f9:6a:87:5a:ae:12:8c:26:ff:
52:66:74:5f:02:f1:78:38:ee:61:61:fc:d3:d9:46:
56:fe:46:ae:8a:9e:64:c1:bb:2c:74:fd:25:e7:f3:
7a:86:88:26:3d:b9:c3:a9:42:2d:d3:01:34:42:7f:
a8:52:b1:00:04:ff:e8:3e:c2:46:82:9a:19:45:07:
57:27:70:87:4f:a1:52:3f:57:56:84:dd:39:f9:38:
52:be:0b:0c:75:95:9b:6f:36:41:13:64:23:2f:87:
ba:e5:ab:d9:68:8b:c1:9f:49:84:f9:0e:03:aa:b3:
69:90:cf:4b:46:1f:6f:e4:37:15:4f:a8:15:d7:8c:
2e:35:4d:4b:bd:9d:9f:3f:7f:0d:fd:7c:64:f9:38:
c6:cd:d4:c7:21:cc:42:c6:8c:14:c4:29:cb:6a:89:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:72:D2:EF:1B:EB:E2:F3:C5:47:11:AC:70:EB:B3:36:C8:6E:06:56
X509v3 Authority Key Identifier:
keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:ae:78:6d:d3:26:e0:47:22:58:33:cb:bc:10:69:b2:f3:
f5:13:96:30:0a:4a:cf:b8:16:84:94:bd:fe:77:3b:67:c0:28:
c3:f8:96:cb:3b:72:f2:8c:ad:a3:21:fc:5a:32:12:ff:07:e7:
7f:de:98:2a:b9:f7:ef:9a:93:72:84:72:03:f9:39:7e:72:d1:
d7:f6:8d:5f:66:bf:06:0e:67:89:35:58:c9:31:04:a8:bb:6e:
6c:02:14:df:0a:a4:d4:52:14:bc:e5:3c:0d:96:f9:56:95:69:
6d:6c:97:ea:72:96:b2:db:33:2d:67:72:be:0d:8e:d3:7a:ab:
53:4b:6d:c4:ac:4a:e5:16:90:eb:8a:0c:7b:ac:4c:a3:4b:b2:
51:d8:17:31:b2:f0:40:71:5c:e3:c3:62:3e:b0:c9:18:4d:79:
85:93:a6:77:d4:18:fb:7a:d0:f7:a0:9f:9d:d5:cb:55:15:ac:
c6:c6:71:72:e7:5d:99:fa:7e:7d:40:78:c6:91:59:b6:6f:08:
a9:6c:8e:d5:5b:0e:b9:bf:8b:1b:2c:0a:9c:7c:88:75:1c:7a:
41:81:50:8e:cc:72:93:f4:f7:97:24:b3:09:09:6e:df:65:11:
27:c5:c5:8e:7f:8f:f2:46:fa:52:ae:e1:21:65:a5:95:cd:be:
12:b4:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 06:00:50 2026 by rpki-client