
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
File: 9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json)
Hash identifier: Tya/eUkWMT5hC5ahqUh3JyZGgXLWCz8Fnkwkmxq+of4=
Subject key identifier: 6E:89:7F:98:28:A3:5F:FF:72:89:BB:3E:BD:C7:0C:00:89:21:B6:43
Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
Certificate issuer: /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 07:19:21 +0000
Manifest this update: Thu 17 Sep 2026 07:19:21 +0000
Manifest next update: Thu 24 Sep 2026 07:19:21 +0000
Files and hashes: 1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: xL4dT94Xh2x/Xh6OkqlMx+TRDF4I1e4fnJ+ug7wX5dQ=)
2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: lbIVYYnHv8vubQVKyUCUSrB8ACyZBFYdKNL38l6ekfA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 07:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Validity
Not Before: Sep 17 07:19:21 2026 GMT
Not After : Sep 24 07:19:21 2026 GMT
Subject: CN=6aab9479-ea77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:24:9b:ca:6e:12:95:99:26:3a:ca:35:40:
5e:83:d2:03:85:cd:58:e4:e5:8a:43:9b:d1:b4:54:
c1:b4:fa:b9:83:92:51:45:f4:17:af:78:75:aa:c4:
93:dc:1a:0e:62:db:f6:6c:df:11:70:d8:26:c4:ea:
63:e3:d0:af:38:41:1a:fc:f8:0b:63:c1:4b:ea:96:
91:cd:61:d9:a3:40:ec:41:de:a6:65:61:eb:4f:9d:
0c:c5:1f:d9:ca:13:87:08:48:97:9f:bf:e9:85:d2:
ad:35:fd:18:70:ea:fd:59:20:0b:84:89:24:7d:f2:
36:aa:6d:dc:dd:01:e1:b4:0c:95:cb:21:1b:7e:a2:
13:e2:ed:10:81:ea:b7:62:c3:36:78:b1:93:1a:56:
8e:93:03:c3:17:73:03:49:01:c2:08:ca:75:f6:35:
3a:36:3e:f1:25:39:c0:73:e7:2c:ea:57:1b:55:d6:
4e:19:61:3d:c5:bd:f3:a1:9d:2f:fb:f5:42:1d:f8:
e5:eb:ab:09:63:74:f3:2b:95:4b:55:be:9b:a8:ce:
ce:e6:7e:32:31:7c:01:d1:d6:ae:5e:bb:4c:2c:f8:
0c:3a:f3:6b:44:51:bf:a6:5a:66:33:fa:79:0a:03:
f9:2b:25:63:f6:d4:d9:22:99:e3:4e:6f:58:45:0b:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:89:7F:98:28:A3:5F:FF:72:89:BB:3E:BD:C7:0C:00:89:21:B6:43
X509v3 Authority Key Identifier:
keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e0:cf:61:34:0c:ae:ad:a9:de:94:06:70:ff:a1:91:93:ad:
93:6c:0f:72:18:71:35:a1:56:a6:ac:d1:3c:28:8d:34:54:88:
d1:5c:22:09:ca:71:3d:ef:17:ab:05:c4:63:8a:18:93:f5:fa:
2e:5f:ae:1c:5f:5c:49:c4:c5:6b:f2:42:7e:ca:ec:0c:f8:01:
3f:bd:d7:98:d2:c1:59:f0:c4:04:9a:17:ee:52:e0:f9:39:b7:
54:ee:b6:af:f7:23:b0:84:40:3c:5f:44:fc:fc:24:d4:af:3f:
56:4d:ff:5a:88:3f:86:2f:47:57:17:72:5b:66:c8:c3:aa:96:
a6:b0:ac:bd:9b:b3:4c:73:09:77:97:85:69:db:de:b4:86:86:
69:7e:91:18:88:8e:a0:9d:0b:d2:9e:c0:09:42:31:03:c8:5d:
43:ef:72:2a:09:06:f7:e8:3b:00:57:b1:06:80:56:dc:76:a9:
e5:72:11:e8:48:ba:3b:0a:06:e5:83:95:77:af:38:51:d1:cf:
01:81:41:b9:a2:f8:9a:5d:61:ab:0c:e0:66:a5:e6:4d:0e:3a:
d8:a1:2c:cf:91:01:2b:1d:8d:8d:c6:af:67:ac:72:cb:8c:e6:
7c:9e:f2:3a:18:75:ef:37:43:ea:5d:7a:5a:df:29:eb:21:f9:
39:14:8b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:49 2026 by rpki-client