
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
File: 91FDq1voML6TvNd20zKw_Vt4fjs.mft (raw, json)
Hash identifier: qhUdGBgET9qakUoIHrn3OkwGWXAFxK5MQ68DqdIwJ8E=
Subject key identifier: 96:CE:E2:D7:A3:50:2A:EE:14:AD:31:E8:13:2C:CC:08:AD:0C:F7:78
Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B
Certificate issuer: /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B
Certificate serial: 08D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
Manifest number: 08C9
Signing time: Sun 20 Sep 2026 20:24:15 +0000
Manifest this update: Sun 20 Sep 2026 20:24:15 +0000
Manifest next update: Sun 27 Sep 2026 20:24:15 +0000
Files and hashes: 1: 91FDq1voML6TvNd20zKw_Vt4fjs.crl (hash: 3L48JWrcAZdiiWyPfITMlhwZdnLRusqRCS8VjxStbXs=)
2: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (hash: y9BTyvgaU1VbrP+/g6c74FO/jdmkWItE5o2GWg/yoeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl
rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2259 (0x8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91717C0, serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B
Validity
Not Before: Sep 20 20:24:15 2026 GMT
Not After : Sep 27 20:24:15 2026 GMT
Subject: CN=6ab040ef-4a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:48:1c:68:15:80:f1:9c:db:27:f1:a3:ee:
09:d2:2f:7e:7f:a9:94:4a:ac:4c:aa:cc:9e:6d:4c:
75:36:3a:00:dc:e2:91:24:a5:5e:17:83:c8:e7:04:
00:72:dc:6c:be:60:21:83:7c:e5:e1:8f:17:6b:b1:
0b:13:e7:e8:03:d6:1f:36:e4:5e:e8:8a:eb:94:3c:
c6:a6:43:b9:66:32:6d:e1:e4:03:35:5e:ac:3e:27:
f5:52:39:d5:b6:5a:43:21:6e:44:8c:0b:b9:af:63:
fb:5f:3b:86:40:0b:63:38:89:0e:7c:e1:43:fd:d8:
dd:0e:04:fe:a9:97:a3:82:a8:d0:85:7f:6c:d0:69:
8b:a8:35:8a:e1:69:83:02:c3:82:5f:1c:4b:4a:05:
be:d5:12:02:54:0e:ae:fe:52:7c:be:c7:76:dd:3d:
12:f3:fb:e1:d3:76:e7:67:77:53:ce:4a:b2:95:b2:
d8:35:c9:6d:13:9b:cc:68:a5:97:0f:78:eb:9a:cf:
17:d5:d0:45:3a:76:b4:b7:a8:38:44:bd:88:ac:1a:
f4:d9:26:f3:83:ab:04:6d:7a:a8:42:4a:96:a8:42:
2c:76:5a:f4:d5:cd:a1:68:28:a9:6b:d0:f3:eb:8e:
e6:2a:44:0a:39:8f:1c:4a:ea:25:91:0c:71:e6:c5:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CE:E2:D7:A3:50:2A:EE:14:AD:31:E8:13:2C:CC:08:AD:0C:F7:78
X509v3 Authority Key Identifier:
keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1a:43:5a:8a:ea:57:11:21:f1:b2:c6:03:fc:ad:25:d4:f3:
a0:18:bd:8f:bd:6c:73:17:3b:9a:26:91:d3:7f:a1:3f:96:c4:
ef:ab:0a:e3:e3:0e:27:df:4b:75:91:28:3e:33:88:3b:23:b1:
e9:4e:47:9b:01:cd:90:1d:82:aa:60:d6:0d:f5:b1:2e:37:2c:
14:57:77:5f:6b:47:bb:9f:37:31:5f:da:38:ab:8f:ac:1e:6f:
9b:ad:32:b2:a2:93:30:f8:3c:c5:54:10:3e:d0:c6:b5:49:f7:
24:60:08:7e:ac:37:29:90:1f:41:07:5f:67:ba:91:65:29:02:
7d:b7:ee:ef:5a:08:19:f8:d8:84:f6:e3:73:b9:ea:5a:34:09:
a6:52:9e:de:81:09:ca:c5:c2:a7:26:ea:15:ed:ac:04:40:b4:
dd:0a:e9:fc:81:75:29:10:de:aa:12:02:28:c3:ea:d0:db:29:
f1:a1:1e:92:7e:ac:b8:28:9f:9f:71:3c:de:d8:03:48:74:01:
b1:15:f5:f7:3c:6a:77:f3:b6:7e:6d:20:82:e7:70:44:a5:22:
dd:18:66:06:5f:c0:ad:e8:1d:ce:47:15:3a:97:6c:ac:cb:c5:
41:0f:ad:da:64:37:4c:10:44:9a:2c:43:02:32:e4:73:41:d3:
39:98:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:34:50 2026 by rpki-client