
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json)
Hash identifier: Dvlw41tLfankVdsRFxTjWVWB6gMyiw0NdZhNP9lCXYQ=
Subject key identifier: 48:CC:59:3F:C6:0B:A2:74:27:E5:28:36:7A:E6:F0:C0:C4:6D:53:C4
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 03E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
Manifest number: 03BB
Signing time: Tue 27 Oct 2026 00:31:24 +0000
Manifest this update: Tue 27 Oct 2026 00:31:23 +0000
Manifest next update: Tue 03 Nov 2026 00:31:23 +0000
Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: tbxycJaO2JgJTaY3pD0R7Z2r8t6RK7vg6RdlZAX15u4=)
2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: IT6sjqgyeU7yL3F+eCEVuRIF5QZib/FjkDzd9+imaPw=)
3: 8BB438729C5311F19090C9214211F970.roa (hash: 4P3QCMBtXIARu2oRAALfV+4dtZEhy98vYnb2SXz40aM=)
4: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: igM78oSfeB942BNkl42YqKy+vOSBmm/qF44KEq3SfEc=)
5: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 3rz3y2F3aVzj5O9phACfchAMbGqJwRa3oLDOUx3l7LI=)
6: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: ZWhBeU6y3g8qTKiuOtQLL6VcfczNqvmkhr8Yqi5VXlY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 00:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 997 (0x3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Oct 27 00:31:23 2026 GMT
Not After : Nov 3 00:31:23 2026 GMT
Subject: CN=6adff0db-8415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:4f:c1:4e:1f:f2:7d:b9:de:53:a6:e8:1a:
ce:80:fe:63:80:e1:fe:92:8e:30:00:5f:7b:3d:72:
90:e9:52:65:2f:00:86:03:86:76:3a:54:74:13:9e:
ea:a7:ec:ed:20:c4:68:a0:93:50:27:8e:03:b3:b5:
8a:55:a1:95:73:40:c7:e4:f9:d4:51:de:e8:27:a0:
1e:8e:5d:72:65:73:85:40:36:d6:07:d6:2a:37:5c:
45:02:3b:e2:63:6a:5c:e6:c1:18:c5:e9:42:a0:84:
ee:8b:af:57:23:bc:c1:c2:55:0a:69:0a:b3:ea:05:
e7:a9:f1:68:10:a5:27:da:ec:0f:34:6d:47:c5:b1:
fb:e5:ff:66:eb:7a:04:14:52:5d:61:99:27:fc:15:
9f:54:34:8e:a3:39:24:74:79:fa:bd:a9:3f:c8:65:
d6:d5:6b:e2:48:5a:81:f2:92:58:09:2e:c2:27:f6:
b7:61:0b:c8:45:9b:05:f9:03:7e:87:d9:72:e3:ed:
8a:88:a3:5b:05:a7:aa:c3:eb:e8:8e:59:70:78:54:
66:80:ec:2f:93:0b:21:26:b8:f1:9e:ed:4c:cb:c2:
80:18:cf:1d:82:14:d9:23:0e:3e:d9:c9:75:f9:94:
66:90:ec:6e:f7:0b:5a:5c:b8:4c:96:ad:9a:d1:49:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:59:3F:C6:0B:A2:74:27:E5:28:36:7A:E6:F0:C0:C4:6D:53:C4
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cd:55:7e:41:08:8a:4e:ce:70:82:4c:0a:8e:51:e5:03:66:
91:73:de:96:ef:6a:1d:1f:28:f5:60:53:f8:7a:d7:58:b5:a7:
27:1b:f2:f2:2f:1c:cd:99:59:06:d0:de:fb:e2:44:15:af:a2:
a9:cc:e1:d3:fa:e9:45:e3:c0:d9:e8:6d:97:c5:78:27:3b:dc:
9e:6d:17:9e:77:98:21:de:a6:cf:3c:09:77:f9:6d:bf:b4:90:
cf:26:8e:bf:33:09:47:3e:ec:92:45:22:a1:9c:47:e3:56:52:
19:9e:d0:75:fa:05:42:8a:cd:74:d3:24:ad:f8:4e:8b:47:85:
54:b0:70:92:ce:96:a2:5c:ab:13:fb:20:84:2b:e3:b3:9a:5b:
6f:df:7e:1b:43:fb:47:71:39:df:35:d7:6d:ce:b5:27:99:66:
f6:72:f6:c4:14:54:78:bd:c4:58:2c:c3:9a:9b:39:32:08:0a:
f9:45:12:53:bb:b6:13:41:91:56:8a:1c:1c:99:a3:32:32:ea:
f1:bd:19:e7:12:9c:90:a7:c8:5a:a3:83:b1:9e:74:f8:3d:41:
86:a2:4c:1e:98:74:a5:fd:eb:4b:ac:37:9b:07:6f:39:08:73:
cf:24:de:1b:34:cf:77:8e:a4:61:2e:76:28:7f:a2:c6:48:6b:
a5:66:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:15:08 2026 by rpki-client