
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier: oWdWzW0qa3h2VRMe+A4PYQKEjudCNgH6okxRj4u4QVw=
Subject key identifier: DE:55:6A:E7:CA:60:BE:7C:85:DE:73:2E:7C:B5:F7:D2:F8:71:28:DC
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number: 0230
Signing time: Fri 25 Sep 2026 02:45:42 +0000
Manifest this update: Fri 25 Sep 2026 02:45:42 +0000
Manifest next update: Fri 02 Oct 2026 02:45:42 +0000
Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: llOIwTxSfjpyqZ0QM6dCocvmv6svgRT4YrDnt9W/oAg=)
2: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 2rJz07ou4vSpX5JnrTMQgxdJR1a87eEGMUNp0szeRmA=)
3: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: Wccg8kNGUBCLT/sRVkDKLDrzp/1nNs6rKjY6plM3zMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Validity
Not Before: Sep 25 02:45:42 2026 GMT
Not After : Oct 2 02:45:42 2026 GMT
Subject: CN=6ab5e056-7b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:65:47:ae:30:94:ab:05:7b:a0:cd:d7:c5:a7:
ff:c4:1a:5c:b8:a1:e1:4c:c4:2a:aa:3d:a6:8a:3b:
30:53:ba:ea:41:8a:22:36:b1:73:32:19:f4:4d:37:
e4:63:55:90:32:0c:bf:61:73:55:bf:a2:fe:9d:73:
e2:44:c6:aa:75:3a:2a:68:6a:3f:e1:cd:7c:ff:08:
50:ba:16:c1:86:73:75:4d:3a:a9:77:d9:43:db:83:
14:e1:0b:8e:99:cf:7d:3b:90:ca:53:53:70:11:6c:
cf:a5:9b:38:93:d8:83:8c:62:ef:2d:5f:29:c0:b8:
c7:7c:28:2d:e7:1e:6e:6a:31:87:d2:3c:3b:27:89:
e3:87:ee:6b:a6:59:9e:f9:7e:ba:3f:f0:fb:de:6c:
d4:bb:4a:3d:90:37:61:ae:3d:3e:1b:67:d5:e8:d8:
2c:3d:c8:c1:fe:8d:0c:d1:6b:b8:62:4c:43:ec:65:
bf:a4:1e:63:84:73:96:9e:29:ec:34:61:3a:2f:64:
91:86:fd:01:49:b0:f2:bb:c8:bc:55:f2:17:90:33:
66:53:67:44:18:26:d7:c0:2f:aa:70:2b:31:b3:b1:
33:e7:32:f8:40:1f:76:64:eb:0e:bd:18:e8:9c:c2:
86:bc:e7:0f:f0:91:b2:a6:7c:eb:17:a7:d8:96:a0:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:55:6A:E7:CA:60:BE:7C:85:DE:73:2E:7C:B5:F7:D2:F8:71:28:DC
X509v3 Authority Key Identifier:
keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:88:93:74:3a:2d:fe:35:01:54:90:7c:98:d3:54:80:8e:ea:
81:6a:28:b5:81:bb:ad:56:da:9f:71:8c:e1:80:69:73:5a:06:
13:f9:5a:bf:a9:46:72:ba:49:8e:b6:0d:62:4e:14:26:00:53:
49:ac:e4:88:a6:e6:85:62:de:42:97:ed:d2:99:cb:06:ab:10:
d0:9d:c3:a8:2b:ee:d6:b8:c8:09:d8:a0:44:15:8f:97:25:87:
d9:c6:68:78:dc:fb:aa:1a:ae:5a:95:2c:89:c8:58:2c:58:1c:
62:5f:38:ac:0c:8f:d6:d6:fd:8c:65:3f:ce:c4:6e:76:de:ec:
0c:c5:52:7c:37:b7:01:55:58:d7:52:ff:3c:91:6c:12:d9:61:
26:8b:df:19:a1:80:77:7f:0e:a8:d5:ef:1f:b6:68:77:f7:77:
7b:00:83:ab:be:6f:de:72:ca:4a:01:13:30:7c:26:16:6d:96:
df:5c:4e:a2:25:0e:72:86:b8:35:2f:0c:20:a7:94:9a:18:72:
19:b5:95:a8:fa:17:d7:bf:3e:47:f5:a2:57:3f:a1:74:1a:ea:
91:fb:1c:bf:48:05:77:e9:b5:cd:59:21:05:c8:13:52:44:51:
10:a4:f4:37:ac:7c:8a:cf:59:f6:4a:b4:7b:6e:7b:22:c8:b1:
3b:98:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:08:03 2026 by rpki-client