
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json)
Hash identifier: 38r99N4bowOXSQ+37p1FqhkRWuRuW4crzzm1q3k/YYs=
Subject key identifier: C3:0E:BB:6F:9D:62:3F:78:4C:74:09:B0:11:A0:B9:77:0E:28:90:02
Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
Manifest number: 010A
Signing time: Mon 21 Sep 2026 06:03:38 +0000
Manifest this update: Mon 21 Sep 2026 06:03:37 +0000
Manifest next update: Mon 28 Sep 2026 06:03:37 +0000
Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: Y/SY3OcQ7LRFO3+zF/SJRv2kZ0gFBJU6ZtorSFwxr6Y=)
2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: q15h8naITCmlNDgt0fcVFaL5Jg+soxRTIhbvGiyXn00=)
3: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: nKq89mFtdPAm1UALvKV17Saig4Y05tURAwcO6cCh6zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Validity
Not Before: Sep 21 06:03:37 2026 GMT
Not After : Sep 28 06:03:37 2026 GMT
Subject: CN=6ab0c8ba-c15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:8b:04:0a:ce:ba:79:dc:93:51:fd:09:a1:
71:0e:d9:49:02:b6:67:10:b7:f0:cd:af:d8:1c:f4:
fd:20:7e:97:6f:b6:4c:84:20:0e:81:de:08:15:10:
5c:fd:bf:e1:1f:9b:ea:19:a6:2d:2e:6f:c3:89:c6:
67:68:15:15:2f:64:84:94:97:d2:7e:4b:26:99:ff:
c8:56:a6:9a:3c:e3:5a:da:8d:2f:02:fc:4d:b5:a4:
8b:fd:ce:ca:63:54:80:4c:e1:aa:28:9c:53:33:4b:
2a:ea:62:1e:b2:4e:7c:e0:ba:c9:36:a3:6b:0c:bf:
28:64:6e:3c:f3:da:1a:b1:3e:47:37:ec:c8:0c:5c:
4a:e2:15:e1:82:7c:6b:7f:96:05:6d:2f:d7:87:b9:
ba:f1:0d:60:d8:f2:33:ab:f1:dd:de:14:eb:28:e2:
e2:a5:28:bf:6f:9a:9c:52:b9:5d:7a:a4:c2:d4:98:
0d:c5:5f:68:80:07:93:6d:9c:cf:78:16:c4:04:83:
09:22:2f:cd:0e:0a:45:cf:bd:d9:5b:38:1b:4f:93:
1d:1d:a1:bf:17:2f:1d:27:8e:4c:34:44:f5:95:7b:
d6:87:50:14:a9:02:13:30:83:e0:89:30:e7:0f:46:
15:56:5c:32:06:be:bd:39:78:de:78:16:cd:8e:d0:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:BB:6F:9D:62:3F:78:4C:74:09:B0:11:A0:B9:77:0E:28:90:02
X509v3 Authority Key Identifier:
keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:d6:92:51:97:bd:5f:29:69:3d:4d:ff:ed:81:22:b2:ea:60:
85:c4:04:52:f4:fa:83:98:7c:38:dd:92:ab:17:b0:45:3e:c7:
fc:96:13:92:bf:03:c1:bf:7c:13:89:76:43:5c:12:c5:1a:e4:
00:5f:80:51:49:d5:50:90:be:b7:17:6e:7e:87:3f:e2:a5:ad:
54:1e:db:da:38:2d:ad:7b:a6:01:cd:1d:f6:c7:4a:af:55:c5:
39:f8:6c:16:e9:ec:2e:fe:91:13:30:d3:b6:78:65:2e:0d:88:
f4:fe:26:36:4e:e4:f6:ea:d8:32:b0:0e:b4:c4:88:8b:3d:fc:
c7:20:b8:90:b7:48:31:ed:8b:9b:73:cc:45:57:a6:62:94:a3:
9e:4a:69:8f:a3:2d:a0:ed:20:d2:54:64:c0:81:11:87:5f:f4:
c3:74:fc:60:bb:c1:92:d9:ab:19:0a:76:30:a2:e8:85:76:11:
a1:28:7e:5f:39:4f:9f:61:76:47:91:1b:3b:73:c6:67:79:e2:
a8:8d:a5:4b:57:04:cc:9b:83:17:fa:ea:bd:53:81:0d:e6:98:
ba:e6:1b:c4:7a:6a:c1:47:83:4c:52:03:50:d1:a3:bb:03:92:
8f:07:89:1c:21:62:8b:72:60:39:fc:db:ab:fd:c8:2c:c4:d7:
0e:d0:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:24:30 2026 by rpki-client