
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File: 0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier: hmYn+NbuVkA71RsSdWU+Gdr78p98Vrr6CRpbOwgtaFM=
Subject key identifier: F4:B1:D7:A6:A8:F2:C2:FA:21:90:6A:BA:55:3F:92:F2:EF:59:57:11
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer: /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number: 0105
Signing time: Mon 21 Sep 2026 06:06:03 +0000
Manifest this update: Mon 21 Sep 2026 06:06:03 +0000
Manifest next update: Mon 28 Sep 2026 06:06:03 +0000
Files and hashes: 1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: eEgihSshiT/pGIJEh+Pf2xsvkrqqVywa37NuHEbpPrE=)
2: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: LyQfyLurnqqH+WScrTsxG9TtblSEPenqHyPotX69udU=)
3: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: snLyJB1mtilsonSg8bolW4tfoO6cxLckhLrYHgEKQiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Validity
Not Before: Sep 21 06:06:03 2026 GMT
Not After : Sep 28 06:06:03 2026 GMT
Subject: CN=6ab0c94b-05f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:8a:3c:db:94:91:40:db:71:f6:9e:5b:5b:
1d:2f:83:2e:46:70:fc:78:6d:66:fe:5b:4d:23:1d:
91:ba:58:b5:4b:1b:aa:92:96:c4:3f:89:6e:5c:d2:
79:c9:05:99:b6:c1:60:a4:4b:97:fe:20:20:8e:dc:
10:59:51:c5:e7:d4:e3:0b:2f:67:b9:81:5b:6e:c6:
51:2f:e2:f2:b6:91:70:33:9d:7d:e4:ce:64:05:0d:
01:b7:cc:6b:cd:2e:fe:90:aa:e5:74:58:8e:7f:6d:
07:c0:ec:e5:9b:b6:ed:e9:ab:fe:01:95:01:b5:24:
f4:22:0d:b6:40:af:b2:6d:5a:d0:aa:54:cf:b1:82:
2e:10:79:a1:67:68:6c:0b:8e:67:84:88:a3:5d:f5:
8a:be:35:1e:33:25:a3:d2:c9:a2:cc:0f:0e:16:ce:
46:b8:84:3b:63:79:78:28:82:0e:38:df:15:f3:18:
4c:f6:95:8b:4c:e9:05:5c:1d:45:41:8a:e7:d8:5d:
89:e4:93:c5:51:fc:6f:74:03:f0:76:8f:d0:53:58:
6f:38:34:35:d8:25:62:4f:7b:01:52:3d:b9:75:81:
7e:ce:e7:41:f0:86:2b:6c:38:9c:3a:c2:f8:b0:90:
ec:b0:21:0b:b1:87:33:2c:a2:83:ad:49:80:df:0d:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:D7:A6:A8:F2:C2:FA:21:90:6A:BA:55:3F:92:F2:EF:59:57:11
X509v3 Authority Key Identifier:
keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:f0:b4:1f:62:45:54:c0:d1:a0:89:56:1d:25:f9:dd:5f:70:
93:e8:4b:90:12:99:21:79:ec:80:6b:c4:cb:08:a1:75:65:1a:
46:ae:48:08:3b:b9:63:fa:58:e6:7a:49:39:88:93:14:84:46:
7f:fe:ad:87:20:bd:a2:b0:42:24:86:93:22:9c:75:67:97:80:
3c:ba:99:c5:ba:d8:b6:1c:38:5a:cb:31:e3:70:23:f9:a8:7b:
0e:5e:a5:fe:42:98:77:7c:fe:67:10:6a:26:47:c7:2c:a7:0f:
01:62:7c:84:86:9e:36:37:6c:d4:3f:b0:79:e7:6b:42:3d:7b:
28:c1:f0:78:0a:d0:bc:a7:40:38:7e:12:96:d9:fb:2a:94:9a:
b4:d1:1c:6b:b4:99:aa:f8:9a:aa:7e:2a:3a:6f:99:22:bb:79:
02:cb:a9:f8:7d:5b:ac:b6:ae:cb:dd:d4:d8:17:d8:b6:e4:b3:
ec:4c:9d:1d:ec:4c:bd:f8:4b:96:0b:25:42:47:ff:09:5d:d1:
57:9b:01:2f:49:64:f0:82:be:8e:49:06:d6:89:de:fe:67:5c:
92:d6:fa:f2:c1:5b:f6:fb:36:ee:d0:bc:7c:90:41:61:9e:6c:
85:43:a7:30:a6:26:57:47:32:07:57:0b:da:b9:c4:f6:8c:24:
56:d5:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:29:33 2026 by rpki-client