
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier: XHIGGsJT7BQqRQ5fKryV8jAv8O4SU1x2mo1oTE/82ag=
Subject key identifier: E6:D3:65:73:A4:E9:01:58:24:0A:1D:F6:F1:C0:81:4D:B8:66:D7:B4
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number: 0178
Signing time: Mon 21 Sep 2026 04:56:46 +0000
Manifest this update: Mon 21 Sep 2026 04:56:45 +0000
Manifest next update: Mon 28 Sep 2026 04:56:45 +0000
Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: rqb7G7Wu7QLAPt1Doq4006meScKRP+RjvM9O32H/lmo=)
2: 900E2938699411F19844B5108747A888.roa (hash: jizyqkTyH+zkwQWvqzJaFbEht/vGvHvuFyzL4PcRYxY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Validity
Not Before: Sep 21 04:56:45 2026 GMT
Not After : Sep 28 04:56:45 2026 GMT
Subject: CN=6ab0b90e-da6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:fc:72:3b:c6:f6:d8:30:1a:28:02:cf:ba:
2e:e5:81:61:52:98:34:94:d2:27:6f:f6:d3:66:e8:
d3:df:68:35:fb:2b:01:77:60:f3:76:bd:a6:f0:10:
c5:e8:48:ac:7d:7b:d8:88:8d:25:00:45:8e:d4:84:
1e:76:a3:ee:c7:e4:eb:51:e8:9f:53:ac:4d:c2:92:
7b:e2:0e:47:9f:a5:87:fe:ab:d2:e2:6f:5f:a8:0a:
4f:21:21:ba:77:dc:83:3a:63:f0:ac:96:69:66:5b:
63:36:d0:5c:08:e0:07:bf:9e:7b:1f:af:5e:f0:85:
44:85:49:b1:f9:57:4c:ba:5e:90:f1:bd:54:75:6f:
83:90:01:d8:0f:0a:f4:e2:ed:41:5f:9d:df:31:4d:
cb:92:2d:ca:f3:6c:7b:9f:96:84:54:a4:a4:fc:fd:
2c:47:4b:6f:3b:bd:42:d2:35:5e:3f:41:e1:19:52:
fe:bb:85:27:c8:f3:d8:90:63:c4:3a:17:3a:2a:a2:
b3:89:93:ae:4a:a2:b6:71:3f:cf:fd:f2:f8:d6:b3:
15:96:5e:84:bd:e7:e5:5f:ac:66:c4:32:13:40:d3:
31:bb:b4:49:0c:3c:a8:4e:55:47:b6:cd:7a:63:ce:
3b:d7:54:cf:ce:bd:e4:5b:0c:c3:bc:bf:f2:6f:f5:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D3:65:73:A4:E9:01:58:24:0A:1D:F6:F1:C0:81:4D:B8:66:D7:B4
X509v3 Authority Key Identifier:
keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:24:0b:73:d9:46:25:54:a4:de:b4:01:73:b1:43:1b:a5:61:
77:55:68:9d:61:ad:f8:c3:fd:7c:c0:60:61:49:89:fb:a0:d2:
db:80:f8:20:73:1c:7c:65:a9:8b:b4:8c:96:15:5b:0d:77:cc:
9c:66:52:a5:92:4a:db:56:86:6f:82:9a:55:ed:f0:b9:48:3a:
e4:f9:d3:14:cb:0e:fc:3b:76:9a:69:5e:fe:41:30:de:ff:62:
79:b7:6f:b3:8f:91:b8:c9:ec:c2:d5:03:db:9f:89:b0:12:e8:
c2:b5:33:dd:61:38:65:5f:be:ad:90:e6:e1:0c:78:a4:2a:15:
81:93:6f:5d:f1:32:53:25:1c:a7:bc:f9:85:b6:ff:1f:4a:84:
d7:a0:ba:2c:bc:80:98:90:d4:34:0d:26:ca:fc:71:7f:b5:63:
2a:44:38:e9:68:65:25:9d:bd:b6:21:72:f6:fd:a2:35:0b:dd:
39:8e:11:ab:ce:d5:54:fe:35:86:62:68:0e:7b:1f:be:29:34:
aa:a4:b6:89:02:f4:25:16:b3:df:46:43:d2:ba:3d:ab:08:3c:
b7:c6:70:1d:24:b8:0b:d1:89:2e:6c:2f:7e:29:72:a0:b8:da:
e8:2d:9b:9a:43:e5:f7:c8:1e:57:df:dc:8c:7d:4d:93:38:af:
22:de:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:20:34 2026 by rpki-client