
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json)
Hash identifier: lZuZyAEGUKjIleK+DlsaZPS3SAlhgQT3f3UTgmQyBVc=
Subject key identifier: A6:E8:35:F6:9C:88:12:A1:78:D1:1B:FF:17:25:F2:B2:CB:1C:8C:4E
Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Certificate serial: 0C8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
Manifest number: 0C85
Signing time: Sun 04 Oct 2026 18:41:46 +0000
Manifest this update: Sun 04 Oct 2026 18:41:45 +0000
Manifest next update: Sun 11 Oct 2026 18:41:45 +0000
Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: ulyp/29z6s2tLnsxB5ZkcSIcK936CKEPgvvDRxzSGjs=)
2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: o//FOsDCWkj3ETUCgrMQsQNdHfeL0LqE5x3ch3IDkEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3215 (0xc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Validity
Not Before: Oct 4 18:41:45 2026 GMT
Not After : Oct 11 18:41:45 2026 GMT
Subject: CN=6ac29de9-ddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:7e:ff:65:e8:13:01:38:f8:b5:61:cc:1b:
21:b2:1b:56:f4:7a:53:20:c5:70:3e:58:15:98:9f:
c1:67:72:fa:b6:6b:84:1e:ad:b5:d8:0b:cf:62:46:
50:cc:34:5d:44:40:83:e6:c2:45:b3:cb:c3:9b:fa:
81:53:e4:dc:86:71:23:0e:5e:17:03:10:ff:22:a2:
e8:f3:ba:9f:a3:64:01:92:97:ab:f8:df:f8:f7:58:
f5:f5:eb:2c:c4:0e:68:a2:c9:61:bf:e2:cd:75:09:
2b:00:8a:54:54:1a:c7:14:86:85:f2:79:93:c8:c3:
ec:65:7f:84:f1:b9:af:1b:88:d2:6d:fd:4e:92:fb:
d6:4b:63:32:d6:9e:e5:c2:f3:66:6d:48:df:88:dd:
d2:8d:77:42:70:40:31:80:7a:7d:bd:bb:11:27:db:
a4:d4:68:08:26:bc:eb:8c:ca:5c:0a:4c:df:f5:9a:
7f:77:cf:d7:b7:51:2a:f8:46:f9:3b:e0:b5:2a:6e:
27:a2:1c:5e:3e:a5:a6:b7:00:45:a9:cc:59:76:3b:
ad:b0:de:a1:6b:6e:2f:27:ca:95:8c:16:b7:f7:37:
9a:bd:a4:6f:b7:a7:4c:76:fa:8d:9b:05:e1:a4:b3:
e2:31:12:6d:97:9c:2d:4d:37:3f:74:c8:2a:19:d4:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E8:35:F6:9C:88:12:A1:78:D1:1B:FF:17:25:F2:B2:CB:1C:8C:4E
X509v3 Authority Key Identifier:
keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:0c:3d:95:23:44:dd:8e:85:2f:6c:a9:f7:0b:27:55:40:55:
27:3d:85:80:9d:02:1e:28:c5:b7:0a:de:60:bd:e6:d5:95:87:
f8:94:09:bf:28:56:33:54:60:4c:a0:29:29:1a:fa:1a:d4:fb:
67:6b:0e:16:fe:b0:82:03:a1:69:4d:a0:fa:8e:9d:43:45:0c:
de:7a:65:60:99:ec:75:07:c2:80:a7:2d:2b:20:bf:2a:3f:3a:
e1:51:8f:b6:de:9a:58:74:75:5b:3c:b9:bc:14:3a:2a:f3:9e:
1c:8e:83:5e:08:0e:23:9b:5e:ad:f5:36:26:b5:57:4d:f2:e9:
fc:9a:c2:04:87:6b:db:22:cc:f9:98:ed:56:98:c1:51:db:d4:
1e:4b:b3:80:fc:bf:d7:f8:d2:ed:69:3d:26:6a:5e:88:ca:10:
1c:06:3a:b5:4a:2a:c2:b7:d7:8e:a1:e4:b4:fa:d6:ad:ba:d1:
02:9e:81:bd:49:d6:84:a0:5b:15:08:60:53:e8:96:2f:3e:83:
6c:23:1c:40:b8:db:1b:a1:a1:55:66:c9:a8:c3:29:f2:13:da:
6b:c9:79:98:29:04:f3:fe:ed:ea:ab:77:be:71:c4:d7:57:87:
1a:fc:16:90:5a:a0:9c:2e:98:95:81:ab:b8:16:6a:80:c5:4c:
79:20:cc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:15:46 2026 by rpki-client