
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json)
Hash identifier: fSwgovj352REKJOCNAUedpovYpml8cnH/7M4lgFDGWE=
Subject key identifier: 13:ED:31:22:0A:B6:21:C3:77:DB:92:5D:7C:FE:53:8D:1C:60:2E:8A
Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D
Certificate serial: 0CB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
Manifest number: 0CAD
Signing time: Fri 02 Oct 2026 18:49:11 +0000
Manifest this update: Fri 02 Oct 2026 18:49:11 +0000
Manifest next update: Fri 09 Oct 2026 18:49:11 +0000
Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: nOaKP2Wea5d/OE2WiXM9kKhe9jsLn2riLJtyRIEH55s=)
2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: aUl7t5S7wwdZHMJJBNCy28ETR7/g4qJO+m/jz+Gzuxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl
rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3CA, serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D
Validity
Not Before: Oct 2 18:49:11 2026 GMT
Not After : Oct 9 18:49:11 2026 GMT
Subject: CN=6abffca7-5dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:5b:d0:e4:4b:4d:e0:b2:14:1c:40:34:e6:
f7:a9:76:49:46:2a:ee:2a:23:c3:62:ef:75:a7:5d:
bb:43:ac:f5:b4:8d:04:bb:b8:7a:b9:57:a7:8b:25:
0c:69:34:ec:57:28:7c:01:6f:fa:ef:9e:6b:32:99:
48:d1:4f:f6:2e:a9:55:9c:6b:59:d9:47:80:92:95:
0f:04:1f:6b:ab:37:d6:ff:88:66:59:18:a3:d2:67:
30:02:35:1b:22:94:0d:c9:ca:bf:a2:32:db:5b:80:
fa:9a:dd:24:5d:33:99:29:53:36:ee:a0:66:a7:7d:
c8:08:8a:f6:20:73:31:e7:c3:46:c3:1e:d7:9f:b7:
1b:c0:04:35:68:ec:c4:1c:e5:70:00:26:45:0f:1f:
77:fd:c5:72:fa:7c:b4:00:d5:b7:a4:cb:2c:a8:54:
4c:99:01:a6:98:cf:a9:2f:df:3b:b3:bb:37:a4:7d:
b8:ac:5a:2c:e5:df:96:c9:64:ff:28:fe:5d:8e:a4:
a5:0c:21:db:0c:bb:ea:c3:dd:c2:4b:8d:58:42:60:
b8:dc:00:0a:3b:0d:99:59:f3:54:cb:3c:11:2f:90:
a3:b1:1b:1f:3a:65:b0:92:e5:9f:8e:53:10:ad:1a:
22:e2:39:03:7f:6b:df:f6:ae:f0:35:87:02:f3:56:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:ED:31:22:0A:B6:21:C3:77:DB:92:5D:7C:FE:53:8D:1C:60:2E:8A
X509v3 Authority Key Identifier:
keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:a8:e2:90:37:b6:1f:4d:b2:21:67:80:17:1c:95:bd:d0:b5:
ae:d8:52:b2:b2:88:35:c7:f3:9e:ac:91:fb:ec:d9:d7:49:02:
f2:1f:06:3b:ea:1c:e7:50:b5:78:d3:87:9b:26:6b:ac:1a:8f:
ef:6d:b2:64:87:a1:55:98:7d:3c:c7:db:a7:62:68:1d:27:e8:
ed:51:2d:21:e0:34:0a:a0:51:22:53:38:fa:00:a8:8a:53:6a:
88:96:d5:bc:f3:c2:77:8d:5d:6e:8e:cd:85:ec:7e:43:49:b8:
36:35:47:b0:23:91:3c:e5:8b:42:78:fc:a6:9f:66:9b:8b:38:
f1:07:5c:74:bc:66:75:90:b6:dc:37:14:47:fb:18:dd:f0:72:
07:0a:15:c6:93:c5:73:13:ec:d7:4e:c9:f5:1b:61:f9:e2:40:
83:3c:63:2e:53:47:37:dc:8a:dd:75:b3:5f:28:05:18:09:99:
34:4e:5f:81:8d:80:cf:48:f5:5f:41:c1:6e:5c:df:b6:2f:c2:
07:40:82:5e:15:3e:9c:74:c0:c9:20:0c:ef:0e:27:d8:8c:ac:
1f:fc:1a:29:9b:24:9b:82:4e:05:f9:6a:35:e6:ea:f3:66:48:
5f:df:7d:e3:fd:59:40:b8:43:7c:0e:bb:18:45:d3:ee:e9:56:
a3:1d:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:16:56 2026 by rpki-client