
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier: awb9X5Y15q9tzW8aJsjR3hh+szTmfkzbnU8fY9rqyTg=
Subject key identifier: 04:2D:A4:9F:B9:5C:8A:F6:B0:EB:83:D3:7C:E4:8D:5C:21:BD:18:7F
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number: 0206
Signing time: Wed 07 Oct 2026 03:39:51 +0000
Manifest this update: Wed 07 Oct 2026 03:39:50 +0000
Manifest next update: Wed 14 Oct 2026 03:39:50 +0000
Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: JdppbHHBSkJUWGKaZFewJ2g6Z9jhVNBAdgdc6/UlUfg=)
2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: YjRa1pB30YYbPQePj+r96aLADC7aXekCFySJbOFg6Mg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Validity
Not Before: Oct 7 03:39:50 2026 GMT
Not After : Oct 14 03:39:50 2026 GMT
Subject: CN=6ac5bf07-ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:7d:ea:55:f3:52:69:d0:2b:cd:92:7c:83:
33:cf:0b:b5:d3:5f:3f:84:5b:84:a4:dc:af:fe:a8:
77:8f:5e:7c:b3:42:20:c7:0b:06:b2:7b:b6:2f:60:
34:fa:89:58:03:49:9d:c4:ff:ed:4f:e1:ec:fe:1f:
eb:c9:ec:4b:da:90:90:47:c2:a1:e6:09:b8:85:f6:
50:0c:ee:a5:19:c7:52:cd:0f:a0:a1:90:c8:2e:c7:
22:89:b1:78:82:c2:eb:62:4d:95:8d:1e:0b:91:59:
5e:2a:b7:cf:54:c8:af:8c:c4:fe:69:53:f0:ea:8e:
13:57:da:b4:ae:0e:07:36:79:f1:38:f1:49:e5:c4:
49:cd:a7:f8:e4:ac:7c:85:83:27:22:d9:90:16:a2:
ef:cc:a7:c8:79:ef:d0:54:b8:53:9e:1c:ea:f6:ed:
ec:90:34:59:f2:f6:1e:a3:0e:90:f5:85:0c:06:6d:
2e:5b:df:12:1a:ba:c1:16:12:54:2f:ee:6b:f4:e2:
4f:12:ba:fd:d5:4e:1a:c4:f7:5a:29:ef:71:19:b3:
57:86:96:a6:aa:cf:1d:b3:69:ef:66:d9:51:67:51:
c7:72:0c:3a:cb:1b:70:8a:f1:0d:5e:d8:d1:91:74:
88:99:bf:ae:da:16:3e:c6:ee:6b:6e:4f:d0:50:df:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2D:A4:9F:B9:5C:8A:F6:B0:EB:83:D3:7C:E4:8D:5C:21:BD:18:7F
X509v3 Authority Key Identifier:
keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:af:ba:21:72:6f:67:27:64:22:33:c2:de:8d:b8:cf:7d:b8:
a3:d8:6b:68:99:fd:4d:c1:24:b6:cb:58:15:d8:38:bd:ca:e9:
16:f5:2c:ea:c5:fc:2c:a1:4f:e1:ed:f1:e1:05:4e:a1:0f:df:
e5:19:cc:86:32:25:0f:42:b0:ab:ed:b6:bb:23:25:d6:a4:cb:
59:ab:28:3c:2a:6a:06:68:4e:5d:d7:f4:10:6e:52:a0:26:95:
75:bb:f8:b1:c9:16:eb:e1:01:a5:3e:71:18:07:18:fe:13:5b:
40:f0:68:5a:59:fe:c1:84:33:b9:ec:b3:47:c1:56:8e:97:18:
a7:a7:d3:1b:86:77:62:95:59:dd:23:f2:ef:bb:b1:cf:22:40:
36:46:b4:25:0f:ee:42:8e:8d:45:8c:30:4a:84:63:08:36:70:
81:29:b5:ff:33:ae:3b:a0:3c:6e:23:4c:37:bf:6e:44:cd:48:
c7:ec:3c:83:2d:82:91:31:6d:fd:66:e4:69:ac:8a:6d:e3:e7:
5f:cd:13:d8:e2:ef:c2:d4:56:5a:28:09:c2:57:d9:18:1c:e0:
e7:3d:3a:17:e9:15:c6:86:94:93:60:c5:53:55:af:9d:9a:53:
12:55:2d:c9:67:3a:1e:84:4f:ba:cf:c6:db:2d:f2:fa:c4:ca:
e9:9d:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:05:23 2026 by rpki-client