
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json)
Hash identifier: whDJrHstueAedHFr0zkYY5+qJBQM/WUvxK2xcJ7G0tw=
Subject key identifier: EC:4C:5B:A4:CA:E1:F2:CC:29:73:C4:56:09:95:BF:92:B5:4A:8B:BD
Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Certificate serial: 3586
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
Manifest number: 3586
Signing time: Tue 22 Sep 2026 14:39:59 +0000
Manifest this update: Tue 22 Sep 2026 14:39:59 +0000
Manifest next update: Tue 29 Sep 2026 14:39:59 +0000
Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: 2gp7C6BFK1v23tBfhETZ1tp3QcCknnfpWItYO7KzN7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13702 (0x3586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Validity
Not Before: Sep 22 14:39:59 2026 GMT
Not After : Sep 29 14:39:59 2026 GMT
Subject: CN=6ab2933f-cafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:d1:35:7c:bc:5a:b4:83:9a:ce:b1:7b:ad:
07:ba:66:26:99:02:e4:cc:78:40:2b:76:c0:5d:15:
c9:c6:64:ce:75:c6:0c:b6:37:9e:dc:c5:7f:93:13:
d5:a0:a8:b4:4a:28:72:e4:4a:66:3f:df:e9:92:51:
cb:19:16:b5:1f:b8:57:49:2f:95:f5:57:f5:23:dc:
cc:b8:d1:1d:34:3d:72:17:b9:c0:b1:12:49:06:5b:
55:53:9d:fa:80:4d:89:ba:55:a7:f8:9f:73:72:d4:
44:d4:82:e7:63:70:3b:e3:00:11:78:43:e0:e8:4f:
f4:78:e5:c6:1c:3f:ff:9a:ca:ad:56:78:1e:95:81:
75:1f:11:b5:a4:3d:fb:74:31:a6:73:c7:d6:85:9c:
38:fc:74:44:3e:72:76:0d:c4:42:45:fe:b5:e4:5f:
8b:3d:74:b2:6d:a3:59:ab:44:99:69:48:82:1d:0c:
1c:35:fc:65:62:6b:14:8e:7b:d0:1e:94:2a:24:ee:
66:41:8f:b0:7a:6b:e5:37:82:a5:1b:b5:14:46:9d:
e5:59:0a:c5:0f:c3:6d:0d:87:76:e9:7b:75:b6:23:
6f:7a:e2:61:f6:ef:95:d8:47:71:af:42:9c:ab:86:
eb:27:fa:62:5b:9a:60:53:dc:03:9e:b0:13:12:bc:
ab:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4C:5B:A4:CA:E1:F2:CC:29:73:C4:56:09:95:BF:92:B5:4A:8B:BD
X509v3 Authority Key Identifier:
keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d4:ea:a2:15:db:99:4e:8a:0c:81:e8:c6:be:94:b0:6b:84:
50:43:0b:00:09:c4:75:24:1c:37:45:42:77:4d:ec:2c:e8:29:
03:21:a7:05:3a:b9:c5:04:18:94:f5:e4:28:9c:9c:87:3d:22:
44:78:91:cf:d5:3d:5c:7c:2a:2c:46:19:f0:ad:90:c9:8b:21:
78:14:90:18:a9:0b:99:b9:72:e2:49:4e:7b:ba:80:d5:24:8f:
86:0b:b9:42:8d:b9:35:dd:8a:ca:3d:f7:02:87:15:01:ee:5f:
36:77:67:8b:36:27:25:c1:29:52:95:7a:7f:c6:32:30:63:4e:
0d:ee:05:d6:93:9c:bb:22:c5:f9:6d:64:c4:d9:9f:b9:f2:d7:
17:b1:62:66:b7:91:09:ca:c9:2a:be:5d:d4:10:52:dc:36:eb:
ce:1c:8d:7c:0b:28:de:49:e0:8d:9c:c2:a3:b9:8a:65:9b:03:
28:07:25:1a:9b:9d:7f:c2:a6:bd:90:46:ca:b7:19:fc:cc:9c:
e2:52:ed:3e:03:e1:f0:40:05:39:92:2a:c2:e1:a7:9c:75:24:
56:4f:2f:4d:a7:bd:90:49:a1:82:f1:3d:9d:b0:31:c0:77:cf:
9e:ff:15:c0:71:a7:fb:20:05:22:f5:b4:ca:57:e4:70:47:50:
2e:f3:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:33:25 2026 by rpki-client