
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json)
Hash identifier: tj4BQfBtPFyd29uEeMwf2UNLnaQKhWb/GnKCtAsgn8s=
Subject key identifier: ED:DF:B1:27:A8:77:F6:44:5C:27:04:95:DD:FB:79:60:13:46:3A:2B
Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA
Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA
Certificate serial: 1BFE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
Manifest number: 1BCE
Signing time: Thu 10 Sep 2026 16:13:16 +0000
Manifest this update: Thu 10 Sep 2026 16:13:15 +0000
Manifest next update: Thu 17 Sep 2026 16:13:15 +0000
Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: 0hS4X3Tr91ut/33m0OMwEjmPAi7/7xvczVVJc0B9IHM=)
2: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: nSC5zdMsQPFLTo2n37S2hHT1g8ZFIDvzCzjnrqu5sXM=)
3: 6290CEFA3E3611F0BC85B94CC4F9AE02.roa (hash: OGm0uB3FR35hN/gFsyIV99ObU52GXmXg7+3oLUUM2jI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl
rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7166 (0x1bfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA
Validity
Not Before: Sep 10 16:13:15 2026 GMT
Not After : Sep 17 16:13:15 2026 GMT
Subject: CN=6aa2d71b-8e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:4c:c9:8f:d2:26:d9:31:8e:c8:56:de:7d:
91:52:b8:2a:51:dc:21:01:ee:66:fc:d7:71:88:b3:
72:d5:ea:31:8b:cb:6d:f6:1b:6e:e1:28:a4:5c:fe:
af:13:ec:8f:04:f8:3d:81:e9:53:f2:94:d6:03:72:
4a:8e:a5:cc:c4:87:85:75:32:b3:1d:89:b3:e1:33:
90:c8:74:96:77:e8:a8:cd:95:33:9d:36:56:78:33:
10:ca:61:24:39:fc:fb:5b:10:d7:13:ac:16:1d:4f:
d7:5d:39:2e:30:f1:f3:fb:60:d9:56:19:9b:c8:82:
d6:f1:1f:ba:f8:31:4f:f9:b0:fd:57:02:a1:4d:0e:
9b:74:85:bc:22:93:4d:2a:36:db:6c:68:b5:c1:c5:
02:f3:be:74:b4:dd:90:15:34:c6:04:f9:d5:70:a9:
0e:93:82:85:68:86:09:39:ee:4b:3c:08:b4:fb:17:
6b:ee:9e:f0:21:d3:25:db:7c:5a:d4:5e:85:7b:0d:
55:ed:34:47:4f:f7:4e:8e:9e:ba:64:d0:a8:b7:85:
80:d9:d7:2e:83:3c:42:b3:f7:b1:05:6a:b4:38:1a:
a2:4d:91:79:f8:8e:4f:3e:30:4a:f5:6a:c0:e7:97:
a0:f4:ef:39:b7:2d:0c:33:f2:26:33:d8:21:99:e7:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:B1:27:A8:77:F6:44:5C:27:04:95:DD:FB:79:60:13:46:3A:2B
X509v3 Authority Key Identifier:
keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:d6:90:3f:e8:b2:9b:64:fb:bb:ed:c9:a0:e9:f9:fc:3a:6f:
e1:0a:cc:59:63:6a:8f:8a:a8:37:b9:7f:63:2d:0e:83:68:32:
f0:4c:32:a5:18:7f:51:05:e9:bb:30:9b:81:70:5a:b5:e5:e3:
21:8d:b1:ca:79:df:9f:fe:5a:fe:4d:86:62:c1:ae:d1:05:72:
5c:68:2f:c7:09:e2:47:2e:fc:ee:0a:d9:9f:3e:45:f7:79:51:
ea:78:76:a7:3c:fa:eb:f9:bf:83:f2:4e:70:63:d7:dc:58:d0:
7b:39:42:ba:43:3e:b6:c8:38:3f:00:fb:33:23:f7:94:08:c7:
b7:61:c5:9b:d7:75:69:76:17:69:f5:41:8a:38:68:30:e9:62:
14:bd:5b:a3:15:df:35:9f:bb:17:a4:8a:9a:12:19:ff:ef:d4:
6f:21:23:de:a1:bb:26:0b:50:1f:b1:54:a2:a2:f8:b2:01:c7:
b5:52:36:60:8a:c4:54:dd:76:16:ca:c7:81:8d:de:10:2b:ff:
64:eb:dd:a8:0f:f3:d3:3a:cb:05:82:f1:55:88:4c:f9:94:cb:
d4:5d:c4:83:2b:28:31:d4:d0:14:16:10:40:49:3c:46:f0:ca:
f1:fa:92:b0:16:03:f9:20:7d:17:a3:2c:00:89:50:24:1c:f3:
96:25:77:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:07:54 2026 by rpki-client