
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json)
Hash identifier: tcBigNEUVO6saPwJ4yI3305RZlT1PgYhuovMFeYj7OY=
Subject key identifier: 21:BF:69:7A:CD:5C:06:1B:A9:D4:E6:2C:4F:D4:8F:AC:E1:97:4F:18
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 2792
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
Manifest number: 26D0
Signing time: Mon 12 Oct 2026 15:44:21 +0000
Manifest this update: Mon 12 Oct 2026 15:44:20 +0000
Manifest next update: Mon 19 Oct 2026 15:44:20 +0000
Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: 3pdqc5trgQKk9ONFz9YGz0tuslOW8je7u8QBTJgicbM=)
2: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: Pjz+08zpul92iEr/FyBypslQXBvHcPTKNW0fvBkPIWM=)
3: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: uI8JkXxS1CM8Or4qNWDsTDezDrKYhjyhya9BD0dbVjg=)
4: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: gImkVIX1Ti4fAjEUeoxwtMLyNZvCsjjTo3pecuPTMXQ=)
5: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: V7CmN1xxQAz8ED8W5YuKvgQGAteloiShsurxJg1zXzs=)
6: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: r+NJ3jKOR4vbaI18u5l5ojoc7t3kUi7BlcVZrzgaNHg=)
7: C9848396CD1711ED898C311FC4F9AE02.roa (hash: 840BTsr7MCOvubWbnUyTx2fy05G4bC6cgOK+3N3KMHs=)
8: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: p4U+fQNg+/V66C8aZ/HW+ICWyGJMsccnbek/XvJglE4=)
9: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: HceQiQapHI9mZcaE2+NlpIpioZwe2l9rRMvUgtBaWC8=)
10: F450479E947F11F1863B76686111F970.roa (hash: bd7BteijD3uWnUjyPC/p9Qb7sNg2qQwiywvvpGWat5Y=)
11: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: 5Q3MWx4Ewo9/UKJ7jz7gMiN8rU99sMEnjBMOjFr/rTk=)
12: A8ED74B2677F11F0A8B65370C4F9AE02.roa (hash: +Ess6UwDczJQfPwe7MZtIEzK7JKUQbyZj8nSvdtJAM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10130 (0x2792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Oct 12 15:44:20 2026 GMT
Not After : Oct 19 15:44:20 2026 GMT
Subject: CN=6acd0054-bd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:db:99:75:a7:5d:89:91:da:53:0d:76:85:
8f:fd:6b:52:45:e5:ce:44:66:04:91:f9:3a:e5:ca:
c4:4f:e5:3e:be:42:67:53:07:44:d2:6e:f0:d2:87:
a1:fa:fd:b2:7c:06:15:83:d5:92:98:3a:d6:2b:62:
e5:54:e5:13:cc:6c:2b:4e:be:ac:e6:b4:d8:23:6b:
f3:3c:f7:7b:67:67:9b:93:f6:ed:54:df:a9:01:1c:
05:be:af:cc:3f:71:e7:a1:31:a5:bb:16:0d:0d:ad:
59:23:e4:b1:c7:0f:4f:0c:80:79:38:82:4e:fb:3d:
7a:3d:29:74:bd:7b:62:a1:e7:30:e3:69:56:9c:c3:
6a:68:ff:af:da:ab:fb:4f:b1:6a:86:02:69:6c:ca:
66:22:56:8c:e8:9e:08:c4:bb:03:f0:02:a3:d1:7e:
56:9c:09:7e:e2:6b:d3:f8:b4:5a:51:84:67:1c:59:
81:a7:86:6b:21:01:49:70:0b:7a:71:07:90:d9:fb:
22:26:1c:ca:34:3e:b1:3b:78:4f:85:4c:6e:d4:05:
10:7e:0b:8c:c9:84:4b:1d:26:ea:1c:ae:74:c6:24:
c3:0f:70:3e:cb:e7:f2:84:a8:60:a3:76:81:44:c6:
7a:62:b8:d7:6a:cc:8c:b4:74:1f:a9:42:7c:01:07:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:69:7A:CD:5C:06:1B:A9:D4:E6:2C:4F:D4:8F:AC:E1:97:4F:18
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:60:dd:c5:bf:30:18:86:6a:54:eb:da:ca:9d:c7:d1:34:92:
fa:d6:0e:c5:24:8c:02:c9:04:b0:26:f3:26:08:10:6e:35:38:
39:41:83:74:f9:59:61:08:18:bf:44:41:04:f5:ed:10:e9:31:
1f:89:a7:23:da:57:bb:bf:ac:77:25:e8:04:82:2f:82:32:4b:
d4:2a:56:3b:17:43:a2:5d:62:54:e8:a9:b6:9d:16:7c:52:27:
17:28:49:a5:e4:f2:a7:c4:ba:68:81:1e:db:ce:45:e4:ed:47:
df:14:fb:36:fd:80:08:49:c1:9f:9e:72:eb:62:f4:87:63:a7:
0e:67:80:41:51:5b:9c:45:12:20:a7:ed:3f:3e:82:6f:0d:64:
86:64:53:af:69:e8:e4:04:00:3c:86:d1:b4:a6:dd:0f:5b:48:
dc:be:20:fd:f7:9e:b5:b0:97:2e:34:c6:e0:da:3b:ac:29:9b:
62:74:27:7c:91:a9:1d:f6:52:ed:7c:7f:79:a9:9f:a6:e9:ff:
a3:ef:d4:2b:22:ed:2e:e3:4c:c9:af:21:d6:b8:6f:3d:f2:0b:
cb:f0:8d:63:6e:4c:90:a3:ab:b3:77:f4:fd:71:1e:76:aa:df:
15:98:b9:ee:8b:83:8c:28:0f:e4:18:32:5d:d3:41:28:08:a5:
9f:e4:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:42:53 2026 by rpki-client