
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
File: 7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json)
Hash identifier: KChiiHzu/cxeybUXw6KSA1N/gWKQwnXl+oXzpOFv/O8=
Subject key identifier: 06:6C:C9:58:7A:C8:1A:8D:71:11:5D:21:4B:29:36:CC:5D:91:C3:4A
Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41
Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41
Certificate serial: 07AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
Manifest number: 07A1
Signing time: Sun 04 Oct 2026 21:33:18 +0000
Manifest this update: Sun 04 Oct 2026 21:33:18 +0000
Manifest next update: Sun 11 Oct 2026 21:33:18 +0000
Files and hashes: 1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: 1evgOYbWODSqBZAlyqITuGzqcl0avTkeXdHxrw/uVeU=)
2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: tjPB8xU2pzQXxPzoDOvibf/wCuzZoo3PXAjj5jlFvKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl
rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 21:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962 (0x7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C309F, serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41
Validity
Not Before: Oct 4 21:33:18 2026 GMT
Not After : Oct 11 21:33:18 2026 GMT
Subject: CN=6ac2c61e-da98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:6d:9b:48:ad:bc:aa:9d:61:a2:47:58:f4:
85:4c:2e:a5:20:2f:8d:ff:4d:ab:27:51:9b:ed:41:
41:c1:21:96:c3:fa:a0:d8:a1:69:d9:10:9e:24:3a:
14:e9:5a:a8:e6:d9:37:9e:47:0d:28:1e:04:af:97:
1c:bb:0a:96:a0:16:38:ba:45:b7:e4:62:1e:11:1c:
84:90:03:b6:8e:67:a7:6b:cc:16:dd:9d:9c:1e:2a:
52:1d:b3:0c:ff:3e:08:03:dd:b8:0b:ac:2a:bd:6f:
88:55:dc:9d:63:3b:53:7e:63:a8:bf:0e:69:e8:51:
40:73:ff:2a:da:a7:a2:84:4a:eb:92:01:a7:53:01:
fb:16:43:0f:f5:13:e5:58:fd:38:39:13:5e:d8:52:
ab:0c:c0:6a:3f:89:77:d5:90:34:f3:90:36:f7:7e:
2d:43:de:c1:50:ea:36:e6:8a:6f:37:4d:bf:f0:46:
07:16:18:1b:65:66:0c:10:88:23:a2:bc:57:70:d0:
b7:01:d6:ff:71:dc:83:a7:40:85:c6:72:3d:77:0b:
84:f6:38:e5:29:2c:5f:d0:8d:1d:2b:10:77:cb:74:
cc:67:8f:19:79:ed:39:95:c2:e3:41:65:b5:cb:b0:
5f:90:c4:84:4e:97:db:53:ac:dd:4c:ad:8b:ec:90:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:C9:58:7A:C8:1A:8D:71:11:5D:21:4B:29:36:CC:5D:91:C3:4A
X509v3 Authority Key Identifier:
keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:e7:1d:63:3d:a2:b0:fc:33:e8:db:2d:94:d6:55:d8:9c:22:
52:40:c9:5b:4d:28:ec:87:d1:bb:f0:dc:c7:9e:1c:73:d2:b3:
07:5f:73:31:ae:89:99:29:1a:54:4b:69:b7:79:3a:93:15:11:
11:e3:8a:5e:39:80:6c:bb:55:d3:7e:fa:75:e6:55:94:f1:90:
1f:b0:62:90:6d:12:ec:1a:68:75:f6:1d:17:f3:ef:22:d3:5d:
f5:4a:1c:c6:53:92:78:2d:92:03:8d:d2:18:a2:ce:6f:90:d2:
c6:bb:c2:0f:a8:be:ba:7d:65:f4:18:7a:74:33:cf:08:b2:43:
ac:a9:ef:ae:70:53:1d:54:7c:24:29:14:72:10:07:ff:90:7b:
cc:49:8b:2a:1d:5d:79:51:16:98:f3:81:eb:7b:b3:fc:85:dc:
86:90:fb:69:de:e3:6f:ff:9c:fb:a2:23:5a:43:a1:0e:d7:dd:
89:4d:08:38:e6:b8:70:87:0c:9e:84:91:24:df:36:2e:5b:5b:
9b:57:8a:11:0b:d1:4e:fb:11:f5:82:02:d4:de:73:0b:d5:5d:
05:50:93:a8:9e:f3:82:98:03:49:8b:13:d4:15:d2:42:77:23:
f8:cc:2c:d9:8c:9f:e1:e1:b3:ef:38:76:1c:d0:de:3d:66:da:
ee:dc:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:28:15 2026 by rpki-client