
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json)
Hash identifier: EOr1PsQ6CXTdgKtwOo5w9PsciPZC0h+gCD9/SvvYaZI=
Subject key identifier: A5:30:CE:83:56:55:30:F5:60:4A:26:49:0C:63:AE:A7:8B:39:E0:85
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial: 1578
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
Manifest number: 1554
Signing time: Fri 04 Sep 2026 16:46:37 +0000
Manifest this update: Fri 04 Sep 2026 16:46:36 +0000
Manifest next update: Fri 11 Sep 2026 16:46:36 +0000
Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: xSJ9yOYTUrkTXE6YuDFjAGWCuTdKNUYV96TKBLzniDw=)
2: A0375A56964511EF9481CA74C4F9AE02.roa (hash: iHRpBY8mTgfogKkV6RLUH1pT9Rubnqiw6gX0z2kYfjk=)
3: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: UOD9amObCmIqDiXfNM0JkH+AqrUmQZuay9hIXFnISTk=)
4: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: 9thasJHdgQQ3RXCs+BHPjiNfWZD4NYRuTQ+ayukgtLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5496 (0x1578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Validity
Not Before: Sep 4 16:46:36 2026 GMT
Not After : Sep 11 16:46:36 2026 GMT
Subject: CN=6a9af5ec-c7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:be:dd:19:e9:1a:da:52:2c:8e:54:c7:22:
02:a2:1d:3c:f5:fa:f1:e1:b1:30:0b:9b:58:24:77:
fb:04:8a:6b:64:d4:3a:a2:3a:d8:11:d2:e6:70:5e:
e0:41:2b:55:c0:61:e8:99:37:79:7f:6f:da:f8:3c:
6c:6f:40:57:44:3d:ee:2c:bc:fc:62:ca:77:43:95:
04:87:78:ea:55:84:07:73:4a:94:d0:92:45:48:c5:
07:91:a5:1d:4a:aa:83:63:78:b7:db:92:7c:27:a4:
44:b4:57:74:a8:63:68:0c:cd:d9:20:57:dc:6f:1c:
f7:7c:b4:c2:c5:53:d9:c2:a9:06:cb:a5:09:80:6c:
8f:53:f3:37:90:59:a7:df:d6:22:8a:04:33:9b:bc:
15:7a:f7:88:a9:c9:15:d0:fa:c8:29:8f:2e:06:a1:
14:c5:a6:ad:e1:bc:84:c2:db:78:be:bf:2f:1d:62:
ca:63:20:10:3b:56:83:b7:96:fb:9d:d1:ef:c4:77:
34:cb:c6:93:96:f1:63:2e:88:6c:45:a2:01:f6:65:
a4:87:6c:63:e6:05:e7:4b:70:72:56:2a:ea:4b:fd:
e6:c1:e2:5b:d8:4f:8e:2d:49:4f:9e:e8:64:22:df:
4e:40:94:08:29:7e:ad:69:aa:83:8f:7e:f8:fa:71:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:30:CE:83:56:55:30:F5:60:4A:26:49:0C:63:AE:A7:8B:39:E0:85
X509v3 Authority Key Identifier:
keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:1a:34:01:76:91:d7:bc:07:22:f5:c5:da:46:36:2b:91:27:
ba:84:d5:28:5a:40:44:6d:d3:6f:00:6a:f5:2f:fc:21:90:10:
fa:e9:76:56:24:0e:e4:d3:1e:cd:60:72:0d:09:2f:64:9b:77:
0f:48:a1:28:50:de:50:0f:23:45:18:2d:d3:e0:30:44:62:05:
7f:b8:a9:7a:62:ee:63:89:63:82:75:92:76:de:be:f1:d4:bf:
2d:d8:04:8c:1f:e8:81:33:bf:71:7f:46:cd:5f:21:90:c1:10:
7d:0e:95:99:54:5c:66:7f:bb:75:49:79:60:7a:d8:87:30:c9:
9a:f8:10:06:b1:e1:2c:c8:1b:33:3c:33:ca:35:fd:28:2d:f4:
cf:b9:e6:e9:da:87:9d:39:94:12:0c:1c:6d:d9:f6:d4:f1:c7:
67:34:63:8a:a7:5b:d3:2a:38:95:c0:b1:13:18:00:64:e2:4b:
bd:8e:c5:00:5f:c6:c7:4e:91:8a:96:db:61:9c:6b:04:28:70:
7c:7a:c3:12:77:ab:4c:e7:9e:34:95:47:00:21:cf:ed:db:c0:
d6:ff:3c:f3:b1:ef:d0:92:bc:71:c9:3a:b3:b0:31:29:64:00:
df:4f:b1:9a:96:37:97:ee:dd:00:47:93:ce:53:9d:2d:ab:77:
c9:08:66:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:51:00 2026 by rpki-client