
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3472/3D82FCD8B66611F19E9620833311F970/7RRrdkOSYRyCABXQ0OeQozzAM3A.mft
File: 7RRrdkOSYRyCABXQ0OeQozzAM3A.mft (raw, json)
Hash identifier: g9EOg0kzwhGkA+I7p2rFs+L9AKFI7DAjRSKbDlu56ps=
Subject key identifier: CC:5A:63:87:D2:7F:F9:85:21:94:CC:7A:95:9E:B8:84:01:45:D8:1E
Authority key identifier: ED:14:6B:76:43:92:61:1C:82:00:15:D0:D0:E7:90:A3:3C:C0:33:70
Certificate issuer: /CN=A91E3472/serialNumber=ED146B764392611C820015D0D0E790A33CC03370
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RRrdkOSYRyCABXQ0OeQozzAM3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3472/3D82FCD8B66611F19E9620833311F970/7RRrdkOSYRyCABXQ0OeQozzAM3A.mft
Manifest number: 08
Signing time: Sat 03 Oct 2026 09:59:10 +0000
Manifest this update: Sat 03 Oct 2026 09:59:10 +0000
Manifest next update: Sat 10 Oct 2026 09:59:10 +0000
Files and hashes: 1: 7RRrdkOSYRyCABXQ0OeQozzAM3A.crl (hash: E4/vXpy03o04jhAyLELkkVFl0hGCG+WVq/JL8MQqhsQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3472/3D82FCD8B66611F19E9620833311F970/7RRrdkOSYRyCABXQ0OeQozzAM3A.crl
rsync://rpki.apnic.net/member_repository/A91E3472/3D82FCD8B66611F19E9620833311F970/7RRrdkOSYRyCABXQ0OeQozzAM3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RRrdkOSYRyCABXQ0OeQozzAM3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3472, serialNumber=ED146B764392611C820015D0D0E790A33CC03370
Validity
Not Before: Oct 3 09:59:10 2026 GMT
Not After : Oct 10 09:59:10 2026 GMT
Subject: CN=6ac0d1ee-72b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:eb:04:2f:1d:46:67:84:0d:e0:b7:af:46:
c9:89:ba:19:3c:8a:c1:c4:fc:d3:2d:7b:87:1b:2a:
40:5a:c3:d3:0a:d0:7d:a0:30:a9:c6:63:6d:15:02:
a3:19:f4:76:d1:61:6e:3d:29:fb:2e:7a:37:ae:13:
0f:1b:b0:60:d6:cc:60:d5:56:8b:d7:ee:27:71:c1:
a6:33:c4:b1:dc:e2:3a:e2:0e:12:13:f1:99:5d:3e:
f7:a4:9c:a1:84:da:89:d9:40:23:49:96:eb:ab:31:
80:8f:7e:bf:ca:55:71:77:85:4b:59:e0:de:70:a6:
44:ec:5b:3d:8d:20:cc:c6:81:8e:6e:9c:d9:fa:c5:
a4:4e:2c:72:f7:da:a1:d8:4c:53:cc:3d:81:04:da:
a5:05:39:50:df:f9:30:46:47:d6:01:92:f8:25:3e:
be:cf:b1:f1:20:69:41:52:3a:92:65:af:18:d9:e4:
6b:1c:46:2b:d6:bb:47:74:fe:3c:37:4e:90:d5:64:
b0:68:b7:5f:c7:be:21:12:ff:b7:88:c7:4b:8f:d8:
62:50:e2:ca:00:62:de:65:4c:70:7b:d1:e2:48:d4:
67:50:2d:5d:62:7a:d0:ee:69:fa:91:11:73:17:66:
17:fb:68:2d:6a:c6:10:ad:6d:f8:61:80:f9:22:99:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:63:87:D2:7F:F9:85:21:94:CC:7A:95:9E:B8:84:01:45:D8:1E
X509v3 Authority Key Identifier:
keyid:ED:14:6B:76:43:92:61:1C:82:00:15:D0:D0:E7:90:A3:3C:C0:33:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3472/3D82FCD8B66611F19E9620833311F970/7RRrdkOSYRyCABXQ0OeQozzAM3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RRrdkOSYRyCABXQ0OeQozzAM3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3472/3D82FCD8B66611F19E9620833311F970/7RRrdkOSYRyCABXQ0OeQozzAM3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:9e:e8:12:2e:e0:de:7e:1d:ac:e8:5e:20:0f:83:6c:53:fe:
71:a8:fc:72:f3:52:0e:2f:83:f3:3f:e4:04:44:89:d7:00:2a:
15:bb:7a:10:f7:52:55:d0:2a:d2:a8:d8:2a:42:e9:bc:02:57:
f0:23:98:a2:11:5d:3a:ce:34:78:06:8a:50:2f:47:31:6c:7b:
61:da:3b:76:53:1c:15:d8:c9:db:00:f3:14:66:ee:bd:79:1f:
6c:ea:23:92:cf:45:d7:d5:c1:49:c9:e1:ab:ba:81:27:9d:97:
a1:84:6a:d4:b7:61:47:af:9d:f0:01:cc:4c:49:8e:27:45:76:
de:66:f7:25:5a:ee:f7:e7:10:0e:0a:ee:93:21:ed:09:86:11:
7c:62:7b:cb:44:2c:18:fa:54:11:41:22:10:67:0a:a9:75:1e:
6d:62:8e:a7:09:15:76:45:38:85:d9:0d:42:d6:69:67:41:ca:
9a:37:c3:7f:1b:82:44:27:f4:7d:bc:4c:15:8b:bf:b4:f0:3f:
bc:07:4a:15:5d:4c:ed:53:09:0d:73:18:43:c8:57:95:50:cc:
39:f4:30:a0:1d:6c:a2:50:b2:25:40:d7:8d:cf:9e:cf:a2:ca:
8c:d5:bb:9c:aa:af:06:bb:49:5f:c9:40:63:1d:47:ed:2c:a0:
26:9e:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:37:07 2026 by rpki-client