
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft
File: Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft (raw, json)
Hash identifier: 75nJZOssx+XyvBcUFX7N7DB+AvI0YkZqsBL7ryAWyXc=
Subject key identifier: F8:AF:30:35:53:62:90:86:3A:70:85:FA:60:32:9A:6B:C8:83:6C:6B
Authority key identifier: 31:F9:35:FE:C9:E2:E7:0B:CF:BC:5E:64:25:7C:31:8C:9B:D9:3C:2D
Certificate issuer: /CN=A91A4BD5/serialNumber=31F935FEC9E2E70BCFBC5E64257C318C9BD93C2D
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mfk1_sni5wvPvF5kJXwxjJvZPC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft
Manifest number: 0E
Signing time: Fri 09 Oct 2026 09:56:42 +0000
Manifest this update: Fri 09 Oct 2026 09:56:42 +0000
Manifest next update: Fri 16 Oct 2026 09:56:42 +0000
Files and hashes: 1: Mfk1_sni5wvPvF5kJXwxjJvZPC0.crl (hash: sUjVBtIM3XCdPJ7PsnwcBa0JEz+Jkv2brRgxpbHPYX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.crl
rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mfk1_sni5wvPvF5kJXwxjJvZPC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 09:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD5, serialNumber=31F935FEC9E2E70BCFBC5E64257C318C9BD93C2D
Validity
Not Before: Oct 9 09:56:42 2026 GMT
Not After : Oct 16 09:56:42 2026 GMT
Subject: CN=6ac8ba5a-9c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:2b:90:c0:f5:84:9e:bb:ed:5b:b1:e8:fb:
f7:38:92:50:f7:e1:b6:43:83:5a:91:c5:0f:b0:e5:
60:39:91:b7:07:71:85:18:a6:ba:00:44:bb:bd:50:
6a:26:7c:92:72:c2:07:c6:b0:d5:d9:21:e0:93:08:
dd:0d:fa:7e:59:29:5d:a1:3f:25:bd:f1:a2:54:2e:
27:6a:22:3e:b8:2e:70:ab:8d:aa:4e:3d:ef:7e:82:
de:da:f7:4e:57:06:eb:b3:08:a1:85:4f:af:44:60:
50:cf:cc:e6:00:02:27:da:02:51:f0:4e:ee:54:87:
15:6a:87:c0:8a:f0:5b:5e:58:24:76:b8:ef:b1:25:
59:f9:2d:8f:f0:38:1d:1f:42:49:a7:13:53:7e:96:
fe:2f:c6:aa:05:7a:18:0f:2f:65:65:41:fb:ec:37:
13:c2:e3:02:8f:10:ec:50:20:47:a9:33:79:97:ab:
f8:ee:71:85:a8:00:84:27:b0:05:45:c2:67:af:26:
8b:f5:48:2d:90:55:2a:16:15:2e:b7:fc:43:7c:ad:
0a:67:66:7f:61:73:c0:69:ec:f3:25:f3:11:2f:1c:
fe:8a:41:c4:08:b0:91:65:0c:70:44:08:d1:27:24:
84:f8:10:e9:e7:e6:aa:fc:82:60:d6:c7:fe:36:3f:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:30:35:53:62:90:86:3A:70:85:FA:60:32:9A:6B:C8:83:6C:6B
X509v3 Authority Key Identifier:
keyid:31:F9:35:FE:C9:E2:E7:0B:CF:BC:5E:64:25:7C:31:8C:9B:D9:3C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mfk1_sni5wvPvF5kJXwxjJvZPC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:56:9f:78:cb:16:08:63:f7:10:ba:20:b3:53:04:2d:ff:c0:
0d:b9:79:c9:5e:cc:87:72:de:d1:f0:dc:2d:da:f0:0c:c4:6c:
20:37:83:23:d4:a2:52:52:c7:56:e9:69:89:0a:f2:c4:13:94:
ab:2a:90:54:dd:c8:37:cb:ce:31:87:6b:e9:f5:47:3a:d9:b2:
a9:b2:0f:4e:4d:34:ae:f9:0d:88:97:ab:6d:80:55:e2:89:26:
28:2f:64:81:33:21:a5:46:73:c8:8c:32:92:1f:af:dc:8a:45:
06:3b:f8:ef:9e:ee:a9:db:85:b3:b9:03:22:8f:ed:7c:73:0d:
92:80:fe:d1:bf:f5:8e:17:d9:b1:cb:4e:66:f7:6b:6f:99:4d:
4d:7d:c7:66:0e:87:7d:96:9a:13:84:50:9e:62:9e:81:5b:d3:
90:27:67:f5:16:56:44:75:1c:e6:8a:c3:19:49:44:06:a2:dd:
04:fa:ec:04:11:3d:e3:b1:5c:af:6f:28:68:01:28:2d:12:e8:
e9:eb:bf:d8:30:9d:b1:59:4f:d5:0c:c7:3c:a6:af:36:f3:b1:
18:6d:8b:96:ad:9a:23:e3:40:18:20:02:80:27:db:dc:c0:6f:
00:7c:7a:bc:74:a2:04:ed:23:c7:01:df:08:23:97:04:e8:c7:
59:b1:a6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:22:50 2026 by rpki-client