
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
File: a9bIzoghkMgWnoE2ReDt2bdX6xk.mft (raw, json)
Hash identifier: h4VTRv8joeBgLzufnNCukYlQonDZUur4tc8Bq++/FMI=
Subject key identifier: 7C:A8:83:72:3A:FC:E7:5F:43:CD:3E:2B:7E:6D:6D:4C:1B:84:DC:2F
Authority key identifier: 6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
Certificate issuer: /CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Certificate serial: 180A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
Manifest number: 2240
Signing time: Sun 20 Sep 2026 16:29:53 +0000
Manifest this update: Sun 20 Sep 2026 16:29:53 +0000
Manifest next update: Sun 27 Sep 2026 16:29:53 +0000
Files and hashes: 1: a9bIzoghkMgWnoE2ReDt2bdX6xk.crl (hash: O2NI9KcC4xR2guP10KyVKUxge4Yu/4d799oNB/KxrTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl
rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6154 (0x180a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398E5, serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Validity
Not Before: Sep 20 16:29:53 2026 GMT
Not After : Sep 27 16:29:53 2026 GMT
Subject: CN=6ab00a01-414e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:86:2a:f5:85:2e:7a:70:0c:d0:29:96:b5:af:
34:3c:2f:f5:87:5a:ab:05:1c:a2:16:b0:93:9f:12:
30:92:49:f8:36:e5:0d:02:1c:6c:69:eb:ae:e6:c9:
80:52:68:db:89:19:71:67:2e:15:b1:63:d9:38:98:
27:9a:8a:cc:c6:4f:7d:9f:5c:9b:54:ac:77:00:8a:
f3:80:24:f9:94:47:41:37:b2:da:b5:dc:5f:db:31:
7c:28:3e:9d:f3:44:83:9e:61:01:00:9e:0e:f4:09:
62:a9:39:61:2a:78:3d:d7:50:b6:2a:23:30:7a:b2:
7d:1b:d2:7a:7c:de:35:23:d7:ae:e9:53:67:1c:55:
90:86:d3:59:60:2b:5a:d9:1f:0b:ac:f6:e3:77:ad:
0a:a9:75:f1:c5:e4:ff:11:f2:63:49:9b:bb:91:72:
c8:c9:53:8a:f2:5b:85:21:7a:3b:b9:27:9a:eb:a6:
ed:7b:00:c8:cc:8b:a6:c7:6c:8d:e0:c3:04:c3:06:
67:06:15:fd:cd:54:86:24:1d:cc:3a:c3:4f:65:a5:
64:1e:7b:3d:16:42:72:84:69:45:2b:ef:27:6e:2d:
e2:db:4b:36:61:f9:30:54:af:26:08:f9:cd:d9:fb:
82:d7:95:79:91:bc:74:bc:a6:75:d3:91:f1:de:38:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A8:83:72:3A:FC:E7:5F:43:CD:3E:2B:7E:6D:6D:4C:1B:84:DC:2F
X509v3 Authority Key Identifier:
keyid:6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:96:a3:7b:26:d1:ca:db:35:3a:c1:1e:e9:74:d6:cd:aa:94:
59:7b:d7:21:1a:74:0a:d7:d0:58:29:ba:ba:5c:30:0b:54:19:
df:25:dc:67:8c:b1:28:f8:50:33:b1:3a:bc:fb:60:16:c0:dd:
3c:73:17:cb:0d:37:81:d6:df:ec:09:cb:8a:2e:30:28:ab:13:
7c:90:70:d1:e2:88:d6:ac:85:b7:c0:23:81:b6:2c:42:0c:1e:
08:2e:40:d9:6a:61:74:fb:87:5f:6d:76:07:6e:e4:b4:e5:f8:
b7:a6:b8:60:04:a2:55:72:1d:d7:83:b5:7d:ff:e3:4c:fb:37:
1f:20:b1:19:32:4f:b5:a2:e0:e3:9a:5a:df:9f:b4:f5:7e:40:
6d:bf:6d:90:e3:ff:a4:b9:59:86:74:4b:d7:6b:61:90:0c:84:
58:ce:22:b8:ce:42:cc:70:b4:06:e5:1e:42:78:4a:6a:d9:3b:
27:8c:e3:78:33:34:b1:2e:12:3d:53:d3:a2:15:26:85:fb:a5:
b3:26:14:eb:bf:67:84:c5:48:3a:53:41:80:1f:3b:31:40:82:
e7:ef:b9:c7:04:77:62:71:b4:16:fa:1f:b0:1a:fe:c6:0c:d2:
d7:40:b0:fa:11:d6:68:40:3c:a3:c8:93:1c:8b:70:ce:60:47:
7f:fc:bb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:30:13 2026 by rpki-client