
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
File: 9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json)
Hash identifier: 7YVEAa1bKuxQQwGqggolVC9RFGyrfM5ZJxCumfBvzNw=
Subject key identifier: EE:53:F4:87:E0:23:6A:CF:92:E8:FD:08:A1:98:D9:9C:1A:8A:E0:62
Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
Certificate issuer: /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
Manifest number: 7B
Signing time: Tue 23 Jun 2026 07:56:15 +0000
Manifest this update: Tue 23 Jun 2026 07:56:14 +0000
Manifest next update: Tue 30 Jun 2026 07:56:14 +0000
Files and hashes: 1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: mfgelan0dq505AhdqH69Z0fjpijdXceqhf+Ev6izqUg=)
2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: KPsklehDxHE/6tXZuvBqXZaukbJh52cwiwX6QhSLfDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 07:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Validity
Not Before: Jun 23 07:56:14 2026 GMT
Not After : Jun 30 07:56:14 2026 GMT
Subject: CN=6a3a3c1e-cf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:38:68:a3:45:96:d9:b5:45:3c:05:41:05:
0e:65:69:16:b6:74:bf:77:c1:b8:7c:70:47:f7:ed:
ff:d1:3e:b8:b6:37:08:4c:f5:b6:1d:a5:b4:38:6d:
20:28:73:af:d2:12:af:ef:38:9a:00:5a:6a:ba:4f:
4a:9e:52:61:4b:1e:10:e2:c7:a6:f7:e9:5c:97:68:
13:7a:00:40:0e:31:36:47:da:ce:b8:9f:f5:01:8b:
56:57:aa:34:55:87:6f:5c:86:cb:d2:9d:a6:b7:76:
16:6c:5e:13:d6:3d:93:9a:96:f7:37:0e:8a:8f:9b:
f1:53:9a:aa:41:6e:5e:c5:a6:1e:d9:90:7b:9d:56:
db:e6:bf:d7:3c:d5:04:dd:a3:86:cf:4f:25:1e:90:
5e:b0:42:6f:6e:4d:e4:59:f6:a1:2a:77:c3:80:fb:
85:42:e0:89:04:c0:b7:9a:ef:6d:3b:e1:b4:40:2a:
99:1d:e0:10:6f:94:a8:c5:2e:10:c9:96:f6:f0:6e:
74:15:42:69:f5:88:89:d0:fd:0c:7f:2f:41:1b:5e:
69:76:ed:bb:6e:2f:28:0f:db:47:5f:80:e0:e2:4d:
63:79:81:4a:54:e7:9a:c8:38:a7:d3:ee:37:bc:e9:
74:40:cc:29:86:f1:0c:64:81:32:6a:a8:a8:fc:a0:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:53:F4:87:E0:23:6A:CF:92:E8:FD:08:A1:98:D9:9C:1A:8A:E0:62
X509v3 Authority Key Identifier:
keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:64:7e:08:f1:93:b8:a6:6e:cc:b8:4d:f8:fc:8c:9e:c8:19:
a0:3a:2f:d2:60:33:0f:00:62:16:56:b1:82:ba:9b:d8:0e:00:
87:ad:78:d7:c3:fe:91:9c:34:e8:bb:de:ae:67:a2:63:e6:68:
06:ff:e9:ef:60:a5:ae:c7:a3:14:84:4a:bd:c2:34:a7:ac:08:
95:57:94:a4:d7:be:4f:e4:e9:c2:4e:42:57:89:72:a6:2e:1c:
20:34:20:29:e0:4f:15:54:f0:ad:ae:f5:90:76:3a:9d:65:be:
e8:f0:76:b9:c2:af:cd:55:87:ae:8c:9c:e9:07:64:68:f2:3e:
e2:5a:b8:ad:94:1f:56:a1:2b:88:ba:4a:ab:8d:6f:56:4c:8c:
44:64:13:ab:37:ed:fb:30:27:9f:80:0c:13:c7:64:72:34:23:
bc:a6:2c:01:f1:ba:1e:f7:b3:a7:83:c6:1a:11:c8:24:9c:ef:
7a:84:b5:ee:3c:49:75:c3:c7:c1:0a:5a:6b:f6:a2:ce:aa:09:
91:3f:ac:a0:fc:da:6f:8b:e6:d0:1a:4d:75:49:8f:06:de:77:
0d:eb:4e:d5:d8:49:46:4d:51:ba:a6:04:09:a2:57:21:4e:e1:
19:15:7d:88:97:12:f4:82:2e:a1:33:77:e6:b7:0a:a2:43:ef:
11:34:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:39 2026 by rpki-client