
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier: UVtcic045kQmFmIvvtnzyKEYmKEwJu6kAkKO6skREiI=
Subject key identifier: 5B:44:B4:96:98:A1:81:EC:6D:93:4D:49:73:97:01:D3:E1:73:9A:5C
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 02DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number: 02D0
Signing time: Sun 20 Sep 2026 15:59:39 +0000
Manifest this update: Sun 20 Sep 2026 15:59:38 +0000
Manifest next update: Sun 27 Sep 2026 15:59:38 +0000
Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: FHSi9AHFU5ze4A8Uh4ZoIy6emxxe/dYnWxVCUmXdikc=)
2: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=)
3: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: cDlDJUGZn7R/T+BNtx5SoPKWRYaEnJYFspu2vfBh0pY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732 (0x2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Validity
Not Before: Sep 20 15:59:38 2026 GMT
Not After : Sep 27 15:59:38 2026 GMT
Subject: CN=6ab002eb-28be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:48:13:91:1f:8e:50:40:63:70:1b:7b:f4:
a7:21:3a:ed:5b:f2:6b:ff:6c:88:08:1f:32:52:ca:
ae:dd:27:47:bf:89:ab:de:6d:f7:ee:6b:7a:96:f3:
ba:a9:5c:14:23:78:ea:7d:57:e7:c6:50:84:85:21:
57:e6:50:1a:bc:b7:08:21:ce:83:05:0b:aa:b0:94:
70:62:8e:95:e4:5d:9e:18:7b:ba:65:80:97:5b:73:
fb:68:56:ed:15:29:37:3a:87:f0:40:70:d0:3b:61:
72:b0:15:f7:14:61:ea:61:ea:1b:3f:d1:f5:a9:45:
2b:68:8d:ac:3f:ae:5c:a7:15:08:96:56:91:ec:7e:
c2:2f:b1:71:46:74:05:fa:27:92:de:9b:c0:83:f4:
25:cd:a5:15:12:96:46:53:ff:67:f5:27:f3:0c:fe:
6c:c1:65:dc:36:da:0b:96:1f:37:6c:82:96:9f:7b:
fc:12:a8:af:c6:62:c1:3b:b5:a1:da:9d:13:28:2c:
1f:a4:60:c7:4c:ee:ce:b8:46:a5:06:ce:bf:8c:9e:
13:7e:81:46:55:76:2f:f8:00:c6:8e:c1:5c:87:91:
d8:37:95:e6:63:2b:62:19:26:a7:69:36:bd:45:56:
ca:11:8b:28:cc:9d:3c:e1:5c:ec:00:9b:c0:2e:99:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:44:B4:96:98:A1:81:EC:6D:93:4D:49:73:97:01:D3:E1:73:9A:5C
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:80:fd:34:b2:12:e8:a7:c1:f5:e8:64:68:c7:cb:62:e6:c7:
5e:4c:55:ae:c5:40:45:5a:93:9f:36:c0:6e:c8:1e:a8:b3:2e:
df:16:36:07:4c:a2:61:fe:84:4c:c9:54:9e:b5:e1:3f:95:97:
18:47:24:52:8e:25:67:52:80:e7:60:65:74:b7:91:d0:1c:69:
81:61:24:39:e4:ed:ed:57:f8:ff:29:58:a5:74:4f:c0:a0:13:
e7:45:64:d1:a6:95:e6:b8:bf:4c:1c:20:bd:2f:bd:a4:ce:58:
81:e4:0e:d3:81:6d:35:9b:a3:e2:33:0d:95:e2:de:e1:dc:27:
2d:7b:bb:e6:49:99:17:51:99:17:75:a9:94:19:af:a7:b7:3a:
67:f6:f4:12:6d:f4:c5:ff:ce:36:f3:51:a2:5d:6f:92:10:6e:
25:5c:cc:e3:d2:77:56:0a:72:e3:bc:ad:05:7b:e4:4f:35:5f:
1e:a8:66:82:a1:42:af:fe:d1:af:67:42:97:89:47:e8:72:cc:
6a:68:1f:93:7c:aa:53:8c:2f:c6:b2:60:94:34:50:a2:69:bf:
7c:e1:10:73:5d:a3:7a:01:aa:c1:10:b6:c6:40:51:97:ee:5f:
fb:89:ad:47:6e:47:10:36:b5:77:1b:55:94:11:80:de:47:dc:
48:a3:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:09:29 2026 by rpki-client