
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json)
Hash identifier: J76KBdBAMIFB7wwJGt1WZcT2e90MYalcJsOvS5y3zLU=
Subject key identifier: C0:8F:6D:4F:A1:B3:6C:E2:ED:C5:A0:33:98:D3:6E:EC:14:C2:E5:37
Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D
Certificate serial: 0C9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
Manifest number: 0C96
Signing time: Tue 18 Aug 2026 18:52:43 +0000
Manifest this update: Tue 18 Aug 2026 18:52:42 +0000
Manifest next update: Tue 25 Aug 2026 18:52:42 +0000
Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: +0Ju7ORcuAOuvQP04KZNFS/fBu3+qbCHpYevOToUMUM=)
2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: aUl7t5S7wwdZHMJJBNCy28ETR7/g4qJO+m/jz+Gzuxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl
rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3231 (0xc9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3CA, serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D
Validity
Not Before: Aug 18 18:52:42 2026 GMT
Not After : Aug 25 18:52:42 2026 GMT
Subject: CN=6a84a9fb-5967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:c8:db:1f:fd:aa:cc:29:3f:d9:6c:b8:8f:
c3:52:2c:60:cf:65:e3:a7:79:df:c2:9b:93:2a:79:
1f:56:ec:2b:74:85:05:8e:1d:97:5d:a5:08:b6:85:
b4:37:e5:cb:d2:62:a4:2e:f5:bc:0c:04:93:b2:90:
ac:1e:35:b5:1e:f6:0e:44:71:25:3f:fe:47:f8:ab:
f3:65:b8:31:55:58:6e:07:ec:a3:c5:19:24:b9:27:
10:7f:c6:3d:5f:22:8f:0d:1b:f3:e4:a1:71:37:b3:
e8:78:3e:46:45:70:15:3a:55:f8:8b:01:7c:b5:cf:
fe:ba:17:10:67:1f:22:49:75:74:ba:9c:9d:0d:ec:
33:81:5d:67:f2:d1:cf:31:6d:f2:6e:a4:3d:49:99:
fd:b4:fb:64:45:7b:40:f4:64:f0:90:ad:93:18:d5:
75:7a:06:5c:46:39:1f:f6:f3:db:fd:4f:cd:c1:cb:
67:0d:38:63:57:53:c7:4b:21:74:f1:5b:39:7b:57:
91:a5:5c:6c:e1:a1:ee:ce:ab:fa:2b:1d:11:2d:e1:
b1:6d:ad:20:6e:e1:35:86:1b:76:42:dd:12:53:85:
49:d9:f4:ce:b4:ed:d8:df:29:7b:82:bb:ed:50:b7:
6d:75:0b:af:7f:3a:9b:f9:ce:b2:29:ca:45:b3:50:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8F:6D:4F:A1:B3:6C:E2:ED:C5:A0:33:98:D3:6E:EC:14:C2:E5:37
X509v3 Authority Key Identifier:
keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:59:da:8d:fd:c6:11:63:9b:c6:e1:ad:d5:47:06:db:31:74:
b5:c8:7e:89:dc:1b:49:9c:14:70:1e:4f:3a:a0:0d:b5:f8:db:
5c:1d:9c:84:3c:1d:68:ec:f8:54:9a:32:b8:44:57:c3:c9:12:
62:cf:10:62:11:a3:bd:7a:bf:33:97:a2:c9:ce:8d:1b:73:72:
18:ec:33:26:1c:d9:0a:ff:16:a6:52:6f:a1:de:9d:7f:3c:fa:
e4:35:c1:50:09:61:91:d2:bd:71:1a:eb:0e:0c:46:9b:c8:05:
83:d9:ac:ca:15:9f:02:7e:66:58:a5:84:e1:88:9d:e7:0f:d0:
39:ad:7c:1f:56:85:06:47:8f:ed:1c:f9:7c:a8:94:90:a8:90:
df:9f:c5:fc:0d:94:5b:c6:e3:d1:47:05:b2:71:6f:12:a1:8b:
d2:4f:49:74:f3:a9:f4:1f:5d:04:e2:70:80:43:fb:e6:eb:07:
90:aa:47:b9:0a:ff:09:e6:50:9c:47:37:83:c0:ff:2f:32:ee:
ad:e2:60:88:94:9f:ab:e1:cc:3f:6a:26:1f:16:f2:cb:28:d3:
52:39:82:ab:34:df:5e:cf:f4:a9:5c:29:e6:eb:b6:ec:9f:69:
28:bb:43:7f:b4:52:4f:b9:a9:f6:88:53:89:b3:77:70:79:63:
4b:74:ee:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:31 2026 by rpki-client