
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
File: AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json)
Hash identifier: y1tMDXj+TX4lk0+8jtVm8c0l3SO7TNR/W6BvhPhD71c=
Subject key identifier: 41:5E:3A:CE:A5:31:9A:70:FA:01:E7:38:FB:49:CC:2A:D8:42:99:26
Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Certificate issuer: /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
Manifest number: 01D7
Signing time: Mon 21 Sep 2026 03:38:13 +0000
Manifest this update: Mon 21 Sep 2026 03:38:12 +0000
Manifest next update: Mon 28 Sep 2026 03:38:12 +0000
Files and hashes: 1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: pJjnNXQ1BO04DqMBnjXrSdMNnlZl1BhRaOSE+/k29yA=)
2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: MyCVqIOapLAqkPEbtp0lVmBHxbYqY2/3hoqeYDo7nAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl
rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Validity
Not Before: Sep 21 03:38:12 2026 GMT
Not After : Sep 28 03:38:12 2026 GMT
Subject: CN=6ab0a6a4-77a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:c7:6e:0d:9c:90:aa:01:80:ba:6c:b8:80:
7c:0b:c5:f4:c5:ee:d1:dc:9d:02:52:1a:9f:ce:2e:
c3:f7:69:67:af:a6:63:d2:83:ca:65:83:35:a0:63:
0f:33:ae:06:26:18:b8:e7:a3:76:ec:06:d4:0f:0c:
e7:4b:f8:ee:c6:d0:7f:47:2c:c2:57:77:64:f2:e4:
8a:32:c5:85:f1:fe:35:1d:a4:cd:4f:80:17:f5:44:
84:61:f3:7e:20:73:0e:a4:1b:25:db:b3:39:64:51:
c1:55:89:0a:5b:9e:5a:c8:47:77:56:0f:d0:ab:08:
27:b6:8c:5d:b8:00:30:3a:fd:3e:0c:ad:d6:21:7c:
2e:d9:2a:ee:e9:6a:2d:98:38:07:1f:ea:0a:9d:55:
e1:6c:3d:1e:11:d2:d5:9d:e3:18:3f:f6:27:b9:ee:
62:67:ea:c9:02:7a:f2:09:bb:69:c6:ec:a7:37:c1:
7d:fc:4c:b8:91:bb:90:81:ee:cd:7b:1b:5e:f8:89:
d5:2d:a6:7c:30:39:2e:ef:56:da:7f:53:fe:3a:c4:
ac:77:80:63:32:0d:81:9d:cb:f2:0e:93:e7:58:f1:
f6:63:a2:5b:41:2e:44:47:3b:98:df:d5:a3:45:e5:
bb:18:09:bb:e9:c6:ec:67:eb:db:4e:4b:42:3a:bc:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5E:3A:CE:A5:31:9A:70:FA:01:E7:38:FB:49:CC:2A:D8:42:99:26
X509v3 Authority Key Identifier:
keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:d5:b5:93:c1:90:c4:a0:48:e7:97:de:bf:a7:cf:36:00:0e:
31:4b:3d:e9:cb:b8:dd:f4:3c:37:51:67:18:42:8c:5b:a0:62:
06:09:be:c1:a5:be:8f:c4:bd:2f:f8:93:77:80:81:64:49:a9:
c0:8c:13:4c:82:ad:79:09:17:f9:4a:24:4a:e1:df:38:92:9b:
12:9e:00:1c:93:ac:38:b8:26:90:96:c3:e3:55:93:b0:ad:7b:
14:27:ee:9f:dc:b5:19:82:cb:83:bf:65:29:8f:b9:bb:ee:7c:
66:2e:a6:ff:52:8f:0b:7f:3b:b4:3f:c9:c4:a6:41:bc:ce:ed:
56:3d:06:25:ff:30:82:87:c1:ad:36:12:04:d6:25:7d:d0:b7:
c1:9e:dd:de:cf:d9:3c:6a:53:c6:11:5b:2d:e2:9f:27:7d:d6:
4a:c1:5d:c1:8b:ba:67:d7:f1:b6:5a:be:78:0e:04:45:39:6e:
ce:0c:e2:0e:4c:e7:88:1f:a1:ba:8d:8e:44:04:27:2d:af:18:
30:5f:f9:f1:50:47:21:9b:48:c0:e2:b8:22:64:bf:d8:16:58:
97:8c:19:ac:0a:d1:03:ee:82:be:7d:eb:df:ec:41:75:95:ae:
8a:7a:4e:10:ae:83:a0:d0:92:45:2c:0d:ed:94:79:be:1a:34:
29:b3:af:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:51:46 2026 by rpki-client