
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json)
Hash identifier: TvJup0o1pZf8VSlhDDUN//7zl2mHHNx9Nve5c96KmJU=
Subject key identifier: F6:4F:37:35:72:BB:D7:77:A8:58:9A:40:25:6F:41:B5:38:B5:F2:EE
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial: 04FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
Manifest number: 04EA
Signing time: Mon 28 Sep 2026 23:54:47 +0000
Manifest this update: Mon 28 Sep 2026 23:54:47 +0000
Manifest next update: Mon 05 Oct 2026 23:54:47 +0000
Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: FwUyB47DfVd8UoyofgIfqtQZAgbifYbmvxeGc+rm6y8=)
2: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: XKFE0kyiSUVQS14tKQTI53/xKajjRhTjZFO9s7Phd1s=)
3: TNesbQPOhDDr4KYNIs_ULOZ8uAU.asa (hash: UstJDqYgq3295EaM116gFlEtnLY1VqmPGGoMYUkAIYk=)
4: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: 2HGFVACffkGhDeLHJzK3N3Q2oFmACWhF8TcKRliN94o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 23:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Validity
Not Before: Sep 28 23:54:47 2026 GMT
Not After : Oct 5 23:54:47 2026 GMT
Subject: CN=6abafe47-81ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:89:4b:09:a9:62:b6:7d:e2:f1:11:af:e1:
1b:4c:4e:8b:28:cb:cb:68:f1:45:36:d3:5e:40:09:
cc:c3:32:85:41:5a:00:57:fb:8e:bf:1a:91:37:50:
9f:0c:12:f8:ca:ed:52:9b:9a:54:9b:e5:a9:89:da:
79:40:56:d4:f6:67:02:8a:0b:b5:b8:10:03:85:96:
70:90:b2:93:38:7d:de:d1:49:e2:ac:0c:d6:0f:39:
6a:b9:55:7f:b0:a3:89:5d:6f:b1:54:8d:d1:17:ac:
0c:9c:39:01:58:62:d9:94:08:8d:5a:e6:e0:3c:a9:
21:1d:dc:35:56:62:4c:33:e6:dd:ff:66:2b:a0:20:
fc:e7:69:11:1d:92:37:7c:d9:07:b6:b4:2e:73:d2:
7e:5f:07:f2:aa:8b:f7:81:01:50:1d:83:cc:c5:72:
6e:35:49:91:6b:e7:24:63:c4:12:37:4d:ea:2c:92:
51:41:12:ce:04:de:f8:82:f1:61:bd:38:91:8c:f3:
3f:6c:b5:6b:2e:4b:93:70:fe:e0:16:33:f0:97:9f:
7a:9b:39:71:f9:02:45:02:e0:a0:7f:3f:19:2d:32:
1a:b2:56:11:4b:2d:5d:72:3f:bb:30:84:f2:95:2c:
cb:1f:25:41:9a:bb:39:7b:e3:4c:0e:06:f2:65:cc:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4F:37:35:72:BB:D7:77:A8:58:9A:40:25:6F:41:B5:38:B5:F2:EE
X509v3 Authority Key Identifier:
keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:05:d9:22:ad:1d:b1:88:33:96:70:b4:3c:d8:23:d5:91:f0:
d4:e7:bc:b5:5e:f5:a3:7e:14:93:2a:64:a0:5d:0c:4b:40:8c:
05:5b:7b:be:15:0f:3d:4e:cc:d2:30:cf:95:b2:d2:8b:3b:f3:
18:0e:2c:d5:29:44:15:49:ff:e5:f7:46:f6:ae:bd:dc:b7:e5:
a2:c7:d0:47:c7:a1:ce:61:83:5a:f2:34:ab:ab:28:1e:f3:c0:
2e:d2:b1:2d:35:d6:a9:3b:03:d4:97:72:d5:36:f8:c0:5a:d7:
18:cd:a8:33:3e:2b:e2:76:ed:c3:b7:8f:ca:47:a9:7f:f4:2a:
5c:64:ad:9c:ed:34:ff:25:9b:b8:2f:f4:2a:c1:7c:2f:a3:64:
07:cb:dd:bb:5b:b5:7f:24:4c:8e:13:b6:b5:b0:f5:e8:75:57:
47:a1:e5:b5:b1:d8:80:3a:8c:01:c5:0c:d1:45:cf:22:08:0f:
bc:20:23:84:05:e4:82:6c:94:91:f4:97:82:94:d2:dc:14:cc:
33:72:37:19:55:70:de:36:97:92:87:4a:8d:a9:f3:26:12:a0:
a8:5b:70:39:63:84:9e:78:30:1b:af:ae:d7:03:9f:da:8d:a5:
37:67:4b:c0:7a:1d:5b:3c:0b:ef:26:2d:e9:b6:a8:be:d2:55:
09:39:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:48:54 2026 by rpki-client