
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json)
Hash identifier: glCrAqCQryzckPLKZO6WhCjdzjbi6t/50hJev0oA19M=
Subject key identifier: B7:8C:AC:EE:20:31:60:92:E9:9E:6C:92:34:1E:97:24:CD:F0:35:7F
Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Certificate serial: 021E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
Manifest number: 021E
Signing time: Wed 07 Oct 2026 03:16:59 +0000
Manifest this update: Wed 07 Oct 2026 03:16:58 +0000
Manifest next update: Wed 14 Oct 2026 03:16:58 +0000
Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: hZJhDP5o+hYh/+hj5yh838tbG8tvKyp9QmyvIB/pk/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Validity
Not Before: Oct 7 03:16:58 2026 GMT
Not After : Oct 14 03:16:58 2026 GMT
Subject: CN=6ac5b9ab-2985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:f6:dd:af:b0:21:74:df:74:63:47:0c:91:
d2:a8:8f:fd:5e:f9:14:39:37:5e:e1:ca:98:95:d5:
0e:e5:57:e0:c3:93:c7:8b:b7:70:fc:e3:67:89:0d:
60:ed:8f:45:9b:7e:b0:aa:28:f4:dc:f6:92:6e:d1:
9b:16:61:ab:e8:3c:86:5d:ae:77:7e:78:69:15:d8:
16:4f:db:8b:9e:75:b4:3c:3c:ca:45:c2:41:eb:46:
2b:3b:22:9e:81:8a:8a:c1:9e:a0:ae:ba:bd:21:92:
5f:07:3c:68:a0:ac:58:ab:af:c9:6c:eb:d0:f5:b1:
49:fe:34:d8:0f:c3:0a:bc:fb:19:f0:64:b4:e5:91:
e3:b4:f3:10:4d:fd:73:16:22:10:13:85:13:46:1d:
0b:24:2c:e8:4c:db:19:23:3c:45:58:63:83:a4:34:
27:94:6d:df:fb:56:5c:d6:15:28:0b:f2:50:a4:73:
ee:63:39:5d:f6:c4:c7:d9:a5:ef:3d:bd:4a:9d:07:
02:f8:48:ac:99:ab:f6:57:9d:fd:0f:aa:cf:45:16:
9b:b7:a4:20:63:f7:12:c9:df:fb:ab:a2:33:e4:7d:
2b:72:7c:4b:b5:ff:96:88:41:7d:ae:8b:31:4f:3e:
06:6b:ad:2a:6f:d7:36:86:ec:14:43:06:71:2b:59:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:AC:EE:20:31:60:92:E9:9E:6C:92:34:1E:97:24:CD:F0:35:7F
X509v3 Authority Key Identifier:
keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4d:23:66:c0:d1:28:7d:63:c6:ad:c5:c4:79:e4:c8:80:15:
8c:0c:5c:85:bd:59:bd:c7:14:79:3f:a5:d6:13:79:d4:83:aa:
8e:d2:6c:7f:98:ad:10:0b:d6:4f:7e:bb:7a:7a:ff:70:f1:e9:
8f:0b:4a:1f:3f:e3:69:24:dd:37:a0:a0:f8:84:56:ee:67:f5:
d9:1f:7d:a0:26:59:bf:50:06:c2:03:2e:28:44:2b:39:9d:47:
c3:9b:c5:7c:5e:f7:67:30:ad:32:2b:71:42:b5:b7:23:37:3a:
97:b9:93:19:01:cd:6a:ff:a0:81:f0:cf:2a:43:49:02:a3:e4:
6e:95:eb:fc:09:a8:95:32:81:54:04:c9:b0:72:65:3b:50:23:
b0:db:4a:51:3f:d8:3d:e6:79:4a:f1:b8:74:cf:06:41:7e:99:
3c:e5:81:1f:e3:5b:7c:8f:4a:4f:f2:1d:b8:4b:f2:52:16:64:
21:a2:f2:e2:71:15:ce:c8:c6:1e:8e:aa:01:29:f4:3f:30:c2:
a7:e3:a4:a2:f5:1a:de:f0:d4:e5:d3:1a:d4:e0:b6:1a:15:d8:
75:ff:a8:4b:c0:b1:75:3b:5f:b3:b4:7f:4f:1f:61:65:8f:29:
37:f6:1c:60:3e:1c:55:06:df:7c:61:46:30:9f:1f:ed:a3:e4:
d6:05:af:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 11:09:28 2026 by rpki-client