
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json)
Hash identifier: YGjV85TNaCjF20GC6ENcKT7ccw0vMxKI8Wi0CTjuLVE=
Subject key identifier: 2C:C6:F8:C4:50:40:14:15:BC:53:A3:5A:67:CA:DE:FF:66:33:71:B5
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial: 02E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
Manifest number: 02DB
Signing time: Wed 07 Oct 2026 01:28:19 +0000
Manifest this update: Wed 07 Oct 2026 01:28:19 +0000
Manifest next update: Wed 14 Oct 2026 01:28:19 +0000
Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: C32ysn+4GsxLVaxSCV8YSnEh/6zd54DMFkYp7TrSVjI=)
2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: FxqrozQ9bkCu/MslnOTZBZb3Iaskzn1o9qCly1GjApI=)
3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: kCW/zIL2wkLpmG5huYuN17ehvqsC22ne+nIXeNNOpgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Validity
Not Before: Oct 7 01:28:19 2026 GMT
Not After : Oct 14 01:28:19 2026 GMT
Subject: CN=6ac5a033-05fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:5a:c6:c6:36:16:5c:d4:e3:d7:ae:20:e3:
4e:62:02:dc:78:f4:3b:a3:36:fb:6b:8b:6e:67:34:
73:65:d1:b1:22:33:f4:f8:00:44:54:41:d8:51:59:
5f:e8:8c:37:7f:aa:2f:b9:75:bc:f9:37:b7:5e:f6:
38:ae:e4:09:f9:73:de:4a:e7:e3:96:84:5e:ec:67:
d8:a6:ca:a4:f4:dc:24:cd:f3:31:95:b5:39:14:c4:
49:6c:aa:01:69:53:9f:88:23:f8:43:ca:2e:11:e9:
1d:e1:ea:c4:62:4d:eb:0c:74:59:c1:83:6c:c0:e7:
cd:56:12:40:09:6b:df:5a:34:d3:84:f6:21:0a:71:
da:2d:5f:9b:5a:db:ad:77:cb:7b:9c:9c:08:e4:e5:
73:87:a7:3e:49:5e:c5:d4:6b:a9:b3:ff:d7:b2:80:
fc:35:aa:0a:f5:08:a3:ce:d5:4a:25:e8:a9:02:ce:
90:c2:17:a4:b4:de:a5:5f:74:ce:6c:ee:b8:2f:61:
47:c4:1d:20:32:fe:bd:b8:ef:dd:92:85:b1:cf:a2:
4e:50:eb:47:40:41:6c:36:53:c6:a0:81:b5:bb:35:
57:98:73:10:64:df:3a:ce:ae:56:23:54:ce:fc:f2:
18:96:b6:27:d0:8a:70:7b:d8:8a:1d:78:44:bd:01:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:F8:C4:50:40:14:15:BC:53:A3:5A:67:CA:DE:FF:66:33:71:B5
X509v3 Authority Key Identifier:
keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:ee:a5:53:0e:8a:1c:12:5b:5a:13:f2:cc:e7:1d:36:ea:c9:
8b:80:10:41:d0:1b:22:d9:45:70:d8:df:b3:80:50:5a:da:6f:
9b:ab:4f:56:31:c5:e0:66:c1:bf:f9:02:b6:e9:92:e9:77:6f:
61:ea:84:b3:b4:94:35:11:24:7c:c4:ce:cb:d3:3c:8b:f9:f2:
86:cd:a0:e3:a6:c0:4e:eb:62:78:34:f2:00:54:b4:1c:8d:30:
9c:d2:4b:75:ad:72:3c:4a:35:2f:0c:04:23:bd:48:1d:da:11:
85:fb:75:d3:ec:4c:bd:08:0b:83:63:87:94:96:82:79:cc:34:
7b:3b:e8:cb:c7:76:9d:7f:9d:a8:45:8a:e7:3c:34:01:82:ac:
f6:26:06:57:14:b3:22:3c:44:ea:f3:bd:d9:96:94:c6:05:25:
f8:38:33:fa:24:d1:1c:db:df:28:5f:1c:25:16:d8:43:32:53:
9b:16:c2:12:bc:c4:7f:e3:b6:b6:57:09:4a:62:dd:f7:f4:e4:
60:8d:f2:f6:c8:89:4e:48:d6:4b:9d:71:7b:33:7f:96:2b:8c:
02:fe:cc:fc:6b:02:27:cb:22:26:e5:47:8c:7b:56:e6:54:e2:
da:d2:fe:62:8c:b3:4b:9c:b3:78:76:b8:b0:ad:6a:e9:5b:73:
5b:72:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:57:26 2026 by rpki-client