
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.mft
File: a-rQvPbKtf0Em9fNDLveo6UTsG0.mft (raw, json)
Hash identifier: jd+BCBRXvl9gI5gpq5SxJ5UQT0yYMrJg5bvxyvU7KQo=
Subject key identifier: 62:83:25:54:03:6A:19:2F:A5:32:76:21:62:C0:30:85:29:04:E2:5F
Authority key identifier: 6B:EA:D0:BC:F6:CA:B5:FD:04:9B:D7:CD:0C:BB:DE:A3:A5:13:B0:6D
Certificate issuer: /CN=A91284EC/serialNumber=6BEAD0BCF6CAB5FD049BD7CD0CBBDEA3A513B06D
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rQvPbKtf0Em9fNDLveo6UTsG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.mft
Manifest number: 057C
Signing time: Mon 28 Sep 2026 23:29:18 +0000
Manifest this update: Mon 28 Sep 2026 23:29:17 +0000
Manifest next update: Mon 05 Oct 2026 23:29:17 +0000
Files and hashes: 1: a-rQvPbKtf0Em9fNDLveo6UTsG0.crl (hash: zr0ilpmfXcbvEj2Zn9zc4vTpytJimYzOryr8fbpItl4=)
2: 87B64E0AB56611F193BCECE2A4EE528E.roa (hash: BW/tMDmQRM02pErAUQDp8owFyBp6gE4+1J5rJ0l2W30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.crl
rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rQvPbKtf0Em9fNDLveo6UTsG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 23:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC, serialNumber=6BEAD0BCF6CAB5FD049BD7CD0CBBDEA3A513B06D
Validity
Not Before: Sep 28 23:29:17 2026 GMT
Not After : Oct 5 23:29:17 2026 GMT
Subject: CN=6abaf84e-9e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:9b:44:fe:ae:c8:12:79:d2:b8:e0:ce:ff:
66:ff:1d:88:4e:c0:61:a5:37:35:88:d4:74:21:74:
e1:fb:14:7b:19:43:5f:bc:b8:20:1e:58:1d:3f:91:
ae:a0:4d:7c:f1:74:b5:bf:f9:0e:18:e7:6f:8b:95:
2c:f0:37:5a:6a:dd:b1:82:78:6a:4c:a2:c6:00:42:
c5:e4:7e:87:a3:17:6e:77:a1:f6:cd:65:df:2b:fe:
3e:eb:b1:e0:03:6b:3a:1f:74:2b:a7:a8:22:7a:49:
89:38:b9:1e:8c:17:5d:34:17:d4:24:a1:9b:3f:0a:
b4:11:55:cd:85:64:45:c8:b9:59:78:78:5f:b0:f1:
fe:34:c5:f8:7c:d3:f2:bc:2e:0a:f6:3f:00:e9:93:
46:5f:b4:6c:5c:7c:64:30:35:3f:c7:43:08:07:c7:
ff:ef:20:8f:5e:bd:c6:8d:d4:22:00:bf:75:cd:58:
ac:ed:78:eb:8b:c1:ac:e8:d3:5d:a2:aa:04:ca:a4:
f7:13:19:e3:76:57:38:36:70:9e:14:3b:b8:ea:44:
70:a4:37:ab:33:c1:08:6c:fe:e9:34:92:43:17:09:
69:6e:8e:89:78:d8:94:27:64:5c:7d:57:16:b4:0d:
e1:ba:17:8a:d2:bb:1c:57:da:29:ab:fb:20:41:92:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:83:25:54:03:6A:19:2F:A5:32:76:21:62:C0:30:85:29:04:E2:5F
X509v3 Authority Key Identifier:
keyid:6B:EA:D0:BC:F6:CA:B5:FD:04:9B:D7:CD:0C:BB:DE:A3:A5:13:B0:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rQvPbKtf0Em9fNDLveo6UTsG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/a-rQvPbKtf0Em9fNDLveo6UTsG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:81:d7:f0:8c:03:71:43:8d:76:aa:6a:ae:88:ad:46:d8:ea:
48:cb:5e:77:d8:68:cd:43:db:90:9d:fd:cb:3d:94:18:de:4e:
7c:39:e9:06:73:9e:33:ba:03:57:b2:83:20:60:14:01:64:59:
36:3e:f9:fe:37:3f:a2:0d:d4:29:f5:28:43:0c:aa:2d:74:bf:
7b:2c:9b:7a:0d:ff:24:5b:ad:3f:73:b0:f8:4c:02:d7:f5:1c:
34:ba:e2:13:d1:14:81:6a:04:2f:fc:a2:c5:dc:2d:a9:f4:00:
b6:55:c6:0f:1b:99:8a:9d:52:b4:fb:51:e2:78:3a:d8:24:86:
7a:bd:4a:b4:41:52:bc:72:b5:3e:68:b3:ed:96:62:ba:c9:7d:
65:01:88:53:6c:b2:fc:56:90:07:6b:92:dd:e6:76:9b:3a:37:
af:01:ac:d8:55:10:9b:35:ea:8d:a9:ed:da:a2:54:2c:f1:b5:
c9:ed:44:65:59:98:ff:b3:9c:fe:07:ff:3a:32:28:81:dd:84:
9b:e2:36:01:6c:cc:67:e0:8b:93:91:b5:1c:00:d6:1d:f5:cf:
b4:9d:6a:fd:d6:40:7d:a6:f3:9d:4b:2a:b9:19:cd:2d:13:34:
4b:04:8e:77:17:cf:68:28:89:26:d3:03:76:27:b8:ab:a6:20:
e1:fa:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:41:23 2026 by rpki-client