
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier: YEn2cRw1SRf5c9bxbBhng7U6Owu1ghsRFDJi73wwntM=
Subject key identifier: 0D:1B:1B:49:D2:31:B3:8E:47:22:82:EC:40:C9:48:FD:31:06:A8:28
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial: 0ACE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number: 0AC3
Signing time: Sat 10 Oct 2026 19:32:13 +0000
Manifest this update: Sat 10 Oct 2026 19:32:12 +0000
Manifest next update: Sat 17 Oct 2026 19:32:12 +0000
Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: GMyJ725UNkFm77v+Q7MvxK9DdCHAySbyZsZFmfGDsbw=)
2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: Zdi6fMt+tPDgT+ACX97dCbP+zzmo4Zw2wzFoqTQJgBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 19:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2766 (0xace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Validity
Not Before: Oct 10 19:32:12 2026 GMT
Not After : Oct 17 19:32:12 2026 GMT
Subject: CN=6aca92bd-219f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:1a:d7:ce:5d:ba:c2:82:3a:56:46:b6:bc:
c0:06:56:bc:9d:0a:8a:4b:09:e1:99:53:d4:a5:79:
a7:c5:12:d2:65:0a:cf:06:2b:6e:36:97:1d:cc:ac:
73:56:0b:b3:f6:40:cd:15:31:b1:0e:e3:41:69:f9:
a3:4b:1f:bd:f5:4f:e8:26:20:8f:1d:2b:06:39:f8:
cb:52:26:ef:bc:b4:ae:ca:2c:79:1d:07:ac:c5:27:
4d:15:71:35:88:61:9a:a7:9c:7b:6f:09:f2:e1:d8:
d5:76:d0:85:56:95:d3:e8:48:08:32:db:5b:e9:9a:
37:3e:da:64:fd:d4:69:b5:e4:ec:a0:1e:4e:1d:f7:
9a:ff:9c:48:24:b6:00:00:bb:53:ef:5f:ff:cf:2f:
90:64:76:31:0a:ad:9b:9d:04:58:61:d5:7f:42:c5:
69:df:b7:60:39:ca:55:2b:62:be:7d:c4:79:a1:48:
53:1b:13:11:91:ff:d1:21:78:86:c7:77:2d:25:89:
a5:54:52:88:f3:77:25:5b:9a:69:45:29:ec:0f:68:
fc:29:d4:ae:7f:f7:f0:a7:f5:2c:89:6f:4b:22:69:
dc:83:f6:35:36:07:71:ee:26:3c:b3:09:00:52:41:
2a:d5:a0:68:1c:58:da:17:88:2a:f5:40:3a:dc:f6:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1B:1B:49:D2:31:B3:8E:47:22:82:EC:40:C9:48:FD:31:06:A8:28
X509v3 Authority Key Identifier:
keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:18:f3:c3:9c:41:3a:49:eb:45:4f:19:94:9b:17:d5:25:01:
95:95:8c:d1:9d:48:19:9f:71:b3:03:18:70:7d:1c:1b:34:cc:
0d:3d:93:df:15:4f:e7:e3:d4:b4:a9:6b:4a:18:1c:d2:ee:ee:
fd:fe:ac:f9:f5:36:6b:0d:00:72:b9:da:cd:f2:4b:57:f3:8c:
c2:d1:25:22:07:fd:64:b8:64:3a:fa:8c:8a:3e:a3:50:48:74:
ca:9b:c7:5d:73:7e:1f:9e:3a:62:25:4c:34:69:a0:6f:a4:30:
ee:39:a9:9f:fc:88:86:17:a1:d0:77:0d:ec:06:e0:df:ac:b7:
16:53:61:23:6b:d3:27:f7:36:41:d5:8a:79:d5:ad:b0:76:01:
99:e2:5b:26:e7:9e:da:2b:f5:c7:6d:f5:47:03:4e:06:bc:4d:
68:14:8f:f2:70:4c:fb:cd:59:ff:8f:17:81:1a:41:2d:e9:07:
b3:c7:a5:25:7f:e5:6c:55:9e:74:a2:88:3b:8e:33:27:76:a3:
22:ed:43:e7:de:4f:0c:a1:55:ea:d2:19:c7:96:ba:78:39:47:
98:c4:7d:ae:c2:79:c5:bb:73:11:fd:ea:d4:d2:18:e0:df:8a:
4f:88:2f:ff:1a:17:dd:8b:65:21:c9:7d:55:f5:e2:d7:d9:c4:
fa:96:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:50:39 2026 by rpki-client