
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
File: 7tKAkYf96vxUeKw6tWpqtPnBvUY.mft (raw, json)
Hash identifier: X4uAvx5gmVYGh6OUxDcc/jCf/Vz7RhRdkp0d+C2GGAk=
Subject key identifier: E4:58:98:74:58:70:B8:9E:4D:84:78:83:9F:4A:00:8D:BF:CD:7F:3F
Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46
Certificate issuer: /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
Manifest number: 90
Signing time: Wed 21 Oct 2026 08:05:56 +0000
Manifest this update: Wed 21 Oct 2026 08:05:56 +0000
Manifest next update: Wed 28 Oct 2026 08:05:56 +0000
Files and hashes: 1: 7tKAkYf96vxUeKw6tWpqtPnBvUY.crl (hash: VhaqgsvCiHoN8NnVh00LDKpKPdwL1nYlUBe/e09vxTg=)
2: 856BB842F51811F093E49DB5586F56BC.roa (hash: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl
rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 08:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46
Validity
Not Before: Oct 21 08:05:56 2026 GMT
Not After : Oct 28 08:05:56 2026 GMT
Subject: CN=6ad87264-433a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:ae:44:8a:cf:b9:08:42:30:fc:a2:e0:b9:
f8:53:a4:70:b9:2e:7c:57:fe:cb:b0:c9:4b:d4:00:
51:52:b8:06:68:25:8f:91:89:91:78:79:13:74:88:
4d:9a:f0:ef:3f:93:74:66:7a:70:9e:da:ad:b6:8c:
ce:75:a2:dd:41:ba:a2:97:40:32:45:3f:b5:37:ec:
73:91:0c:09:fb:68:f8:1a:6b:12:b2:c3:be:da:ec:
60:1e:01:ae:af:5c:1b:7d:bc:eb:a9:8e:96:b6:3f:
c2:da:6a:98:5d:1e:2e:b4:23:68:7b:40:73:56:75:
2c:03:b4:aa:32:e0:e3:e8:5e:00:91:6d:5c:5f:48:
0c:6a:4c:b2:58:ba:1e:9f:70:47:8f:d3:47:91:5c:
9a:4a:e4:e3:5a:b0:80:cb:86:ce:7b:3c:f5:94:76:
8e:7e:dc:c2:c2:95:c0:9a:df:91:8a:84:39:8c:83:
9a:60:49:fc:05:d3:2a:62:46:47:79:64:27:9c:f6:
21:41:31:97:cc:2c:da:ab:eb:9f:aa:39:c7:51:ac:
6c:18:68:e6:1c:ea:83:a1:65:33:3e:0a:4f:b5:fb:
28:fa:4a:fd:58:b7:54:ef:cc:b1:4d:bb:81:62:98:
c0:cb:53:9c:04:40:35:7d:f3:71:71:d0:06:cf:73:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:98:74:58:70:B8:9E:4D:84:78:83:9F:4A:00:8D:BF:CD:7F:3F
X509v3 Authority Key Identifier:
keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:a0:0a:98:5e:91:30:36:8e:9e:1f:dc:1e:af:43:27:7b:1a:
65:f5:71:15:71:83:2b:44:3f:8c:95:56:e4:c7:53:98:53:5e:
2e:21:b3:20:16:eb:7c:e7:ea:69:8c:9e:ff:8a:b8:b0:48:69:
87:ae:21:29:fb:32:8d:a5:9d:62:89:01:c8:a9:51:0f:06:9a:
c0:73:e2:62:b7:9b:97:e9:8a:f1:36:45:d7:32:50:80:31:c9:
03:2b:30:2e:a8:40:7f:aa:43:7d:61:09:43:05:2c:bc:ef:4b:
51:6b:54:9f:7a:ad:b6:f1:dd:47:4a:79:b4:09:64:8e:31:c3:
fc:17:24:0c:20:2e:72:8a:3b:95:cc:d9:c2:62:1c:53:1f:10:
ff:de:e9:a3:03:0d:e1:20:30:ab:b8:9c:6a:93:fd:08:d3:03:
6e:d9:e8:73:df:95:2f:07:33:f3:87:6c:30:8a:36:b9:56:2f:
8b:16:a9:ad:0d:c4:1e:e3:22:86:35:24:aa:74:b2:3e:be:be:
ee:f7:21:86:ad:fd:d3:2b:f9:cc:ce:c2:b5:4d:0c:80:15:b2:
27:9b:30:9c:42:45:d3:a3:5d:c3:f6:24:d8:3a:8d:95:f7:65:
19:98:ec:60:cd:2c:f8:de:b1:2c:a9:a4:de:b5:f9:c4:f7:d3:
86:f5:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:10:31 2026 by rpki-client