
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json)
Hash identifier: hWH712wt8qmBuui4SghnOW3eQsdtlA++Zc4gAsfjUtw=
Subject key identifier: 6A:D1:9A:54:51:33:A6:E4:62:50:65:4C:50:FD:2F:64:C4:40:13:90
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial: 02BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
Manifest number: 02A9
Signing time: Sat 03 Oct 2026 02:11:15 +0000
Manifest this update: Sat 03 Oct 2026 02:11:15 +0000
Manifest next update: Sat 10 Oct 2026 02:11:15 +0000
Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: 6LYWP1KIpe0GGfOXqzEkHZ3ad1Aon3clLGpVS9Cdij4=)
2: 7E9B367C7EA811F1A854ADB365A30FBC.roa (hash: Eu4ivh0ocxW3L/+Wz018Tp2rtHk2MvNF/CFT6tWavaM=)
3: 1B8AAA547EA811F1B1B4ABB165A30FBC.roa (hash: CrxDIG23oExmjO7SdSCqEOfcY+3UGQ0HeSLQRNX0rk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698 (0x2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Validity
Not Before: Oct 3 02:11:15 2026 GMT
Not After : Oct 10 02:11:15 2026 GMT
Subject: CN=6ac06443-6970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:21:99:2a:a6:03:c1:c1:a2:98:23:cc:65:
5c:3c:aa:84:96:b8:cc:cd:d4:3b:cc:fe:2e:ae:59:
80:ad:8a:9e:9b:a5:87:94:0e:9a:a8:4d:ef:04:72:
f8:c3:ed:d9:d2:67:ac:c4:cd:3e:24:c2:9d:95:55:
0a:80:28:95:85:16:43:5d:17:11:56:fa:5e:c8:d4:
eb:76:1a:04:72:5c:24:d9:8b:75:bd:e5:4e:4e:1e:
33:7c:13:e3:db:cd:fa:70:b8:5f:df:db:af:a0:a3:
6d:ab:9d:f9:45:b2:f9:98:23:be:72:b3:fe:1d:7a:
5f:39:d5:7f:82:a3:bd:ec:22:5e:1d:0d:f1:19:be:
50:db:d3:72:58:72:e7:57:94:04:cb:12:8a:61:7e:
d5:cd:29:2b:3f:02:5d:ad:2a:c0:11:c9:d5:cb:f3:
bf:92:ff:fb:7b:26:83:b4:b5:6f:a1:17:ec:15:bf:
d3:25:60:b2:8f:76:31:02:23:64:e8:54:e2:90:27:
72:d4:04:9f:4b:b0:66:72:43:4b:2a:ba:16:63:a7:
78:55:7d:88:27:a7:c5:bb:4e:bc:ce:03:f9:b3:c0:
6a:6b:67:f2:b3:e5:20:7f:30:82:04:49:0c:e9:35:
89:f6:c8:4d:cf:02:7a:16:83:c3:1a:43:b9:6b:f7:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:9A:54:51:33:A6:E4:62:50:65:4C:50:FD:2F:64:C4:40:13:90
X509v3 Authority Key Identifier:
keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:54:87:ea:8e:34:ae:20:cb:61:29:f6:49:50:28:b7:15:3e:
5f:9f:44:15:6e:e3:7a:c5:d0:ef:c1:79:bd:8b:80:72:b6:64:
c9:f6:41:4f:fb:07:55:3d:cc:b8:f8:39:e3:aa:77:93:2a:b4:
d8:e3:45:b3:8a:6f:c2:a2:fb:7a:8d:ed:2a:e3:c9:70:dd:8e:
5b:68:58:f6:94:d0:18:bc:85:d0:ec:7f:10:b0:cf:76:4c:11:
48:60:fc:1a:21:66:1c:b3:40:c1:02:23:25:17:5d:53:54:22:
a9:29:3e:17:72:ec:3f:93:83:75:e2:c6:b1:46:81:d1:1b:50:
72:7e:95:54:36:a7:18:ad:ca:3f:f9:dc:67:34:02:c7:3b:e3:
88:e0:87:f4:7a:b7:ee:c3:b8:70:68:53:72:d1:00:5e:df:f5:
9b:e7:7a:26:b0:32:39:90:38:c6:bf:54:d8:48:79:40:c2:63:
30:b6:0c:0a:3a:93:9d:c0:b4:fc:bf:03:bd:ee:e8:10:24:95:
c0:27:61:2a:c9:2f:a4:48:79:74:e4:56:41:08:45:21:3b:15:
7f:3e:f4:f4:74:97:99:b1:26:86:2d:92:8e:5b:27:85:fc:6f:
80:5a:8e:e8:3f:24:64:f1:fd:ab:fa:82:7e:bd:6b:ee:cc:a4:
6c:64:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:57 2026 by rpki-client