
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
File: D0a9vHSQTl34KfAVlbUcqqIBuds.mft (raw, json)
Hash identifier: NVgcGHG6nFdC9ZNcuvVfAoXQ7ZftXVgWmrcmOyV/XMk=
Subject key identifier: 0E:67:2E:81:3C:09:04:8E:0D:2A:FA:29:0B:65:A1:43:37:0D:37:C0
Authority key identifier: 0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB
Certificate issuer: /CN=A91449E2/serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
Manifest number: 0278
Signing time: Mon 21 Sep 2026 01:59:12 +0000
Manifest this update: Mon 21 Sep 2026 01:59:12 +0000
Manifest next update: Mon 28 Sep 2026 01:59:12 +0000
Files and hashes: 1: D0a9vHSQTl34KfAVlbUcqqIBuds.crl (hash: 7iBFyg/vFgznzHHhsTHTtUnp5b8aCicVrW6ybKaAmsk=)
2: 568D8AACF00511ED9239BC6EC4F9AE02.roa (hash: XrKHKQzHMa1y0uVAA7/pa5YvcBRJFX+HV140KMXuEWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl
rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91449E2, serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB
Validity
Not Before: Sep 21 01:59:12 2026 GMT
Not After : Sep 28 01:59:12 2026 GMT
Subject: CN=6ab08f70-51c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7c:33:80:36:b1:85:ad:d5:06:93:51:58:65:
06:c2:61:fc:3f:38:18:75:9a:d0:fc:57:2a:7b:f7:
34:81:08:e8:09:cc:4d:14:5e:99:2b:30:98:8f:ed:
3f:42:be:92:f4:ea:78:38:15:92:f4:b3:b9:5e:1c:
ee:df:21:d4:e8:a7:ff:55:9d:cd:3c:cc:15:68:e9:
a7:4e:f2:b7:01:8b:fb:63:ce:78:4b:33:19:3f:65:
01:ab:6f:0f:04:d9:84:c5:41:47:b6:1a:bd:63:66:
c8:38:d4:96:a6:b8:a9:23:4e:a5:27:34:de:c3:29:
22:76:cb:59:1e:6b:55:a4:5e:53:f6:53:8b:1e:77:
3c:69:be:fa:d5:60:5e:00:dd:00:e3:75:7f:f9:8d:
81:97:5e:1b:60:91:64:ee:c4:3e:53:d7:59:03:48:
0f:7b:a0:c0:3f:c7:95:c9:e6:3d:64:16:a5:4f:45:
82:11:f0:74:25:45:2e:d6:ef:c7:96:be:50:cf:56:
8b:93:d0:fd:7e:1d:8f:86:0e:e0:a8:b9:e3:de:ca:
bd:e1:4e:19:91:9a:95:12:6a:c6:98:77:5a:15:5d:
ee:46:2b:ac:47:5a:f8:65:8d:e3:d3:67:b7:db:38:
3a:4c:cf:5f:86:9d:83:98:b4:f1:2e:99:6c:c3:d3:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:67:2E:81:3C:09:04:8E:0D:2A:FA:29:0B:65:A1:43:37:0D:37:C0
X509v3 Authority Key Identifier:
keyid:0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ed:bf:2d:5a:a5:4d:ad:ce:62:99:8d:2b:c0:76:87:45:9b:e7:
2e:b9:2a:6a:98:f8:d2:49:33:27:2c:b2:fa:08:d5:d1:6b:6b:
c0:a9:79:3c:f3:ea:71:4c:7e:58:38:f0:d1:ec:89:56:51:e2:
35:52:25:9e:a1:65:dd:82:81:c6:76:6b:ac:2b:3c:f0:cd:ba:
ef:d9:f0:52:30:b6:6f:62:0c:83:7f:8c:bf:f4:c9:f6:a4:39:
64:45:ac:c2:72:df:d7:ac:a3:a5:1c:fe:2e:e3:84:c0:e4:ab:
a5:94:24:f4:a0:d1:3f:5c:a7:f3:55:1e:8d:5e:3e:51:3a:f9:
df:f5:2f:d1:6a:6e:50:16:a5:3d:74:62:b5:3c:25:72:bb:f3:
88:8a:92:e2:53:b4:4d:6d:70:b9:13:e9:ca:8e:41:6c:eb:28:
e4:0c:86:60:77:2f:97:61:68:c6:3f:0a:98:f1:7c:73:69:04:
33:64:4a:c4:22:23:c2:74:f4:c3:5a:34:23:c2:b0:9e:84:47:
0c:4c:c7:5c:ae:67:04:71:d2:e4:a0:d3:5c:f9:9c:e3:7e:37:
97:4c:30:1f:b3:9a:ba:1e:1b:aa:65:55:f0:83:6d:8b:09:c9:
f4:cf:a8:26:39:82:14:21:6c:47:46:99:71:7f:57:47:eb:ea:
0c:10:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:54:49 2026 by rpki-client