
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json)
Hash identifier: lPh98rhLvrDBAIEEdxq3kDpcqCd9sadOYrzGdwNHNS4=
Subject key identifier: 84:95:2C:3F:EC:AA:BE:5C:05:B1:FF:6B:7A:D4:DD:CE:2D:92:02:60
Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE
Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
Certificate serial: 357A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
Manifest number: 357A
Signing time: Sun 20 Sep 2026 15:05:14 +0000
Manifest this update: Sun 20 Sep 2026 15:05:13 +0000
Manifest next update: Sun 27 Sep 2026 15:05:13 +0000
Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: 9EZSoiUvzEjxLVOu2+Siq6UL95yfj0LnlS2H8gmGRrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl
rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13690 (0x357a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
Validity
Not Before: Sep 20 15:05:13 2026 GMT
Not After : Sep 27 15:05:13 2026 GMT
Subject: CN=6aaff62a-040b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:8a:8b:b4:28:7a:5a:e4:45:03:73:9a:1e:
01:ab:d7:80:a2:15:c1:71:88:6b:b9:04:75:d9:a8:
23:11:aa:72:94:df:d0:8a:65:58:c1:ba:26:b4:13:
9f:24:45:a0:2a:ca:3d:cf:57:04:df:79:09:6d:e2:
f2:c1:15:9c:6e:6c:f5:9d:18:2a:b7:9a:6c:fa:8b:
43:0a:14:b7:34:c6:25:63:28:12:f5:51:8d:db:56:
a8:b4:00:41:33:66:c4:37:50:eb:95:67:c1:12:6e:
08:2f:88:47:06:bc:3e:22:8f:65:70:9e:09:2a:3a:
4a:54:40:42:47:ab:a8:f7:d7:69:47:06:74:69:62:
77:9e:af:28:d2:e9:a1:62:10:41:02:93:dc:10:10:
38:51:d4:1c:e5:b5:3b:c7:5d:f8:fe:fa:cb:53:88:
2b:f5:08:86:2b:bf:17:59:7c:8e:c3:23:b3:78:02:
b3:e0:e8:54:7e:a0:14:85:ec:b2:44:6a:21:cc:3c:
03:3d:88:db:a9:3f:f9:03:ed:b5:f4:d6:d4:45:87:
19:d0:40:2c:ab:8a:67:85:02:3d:25:b1:31:1c:27:
9e:0f:5e:54:8e:19:04:c4:5e:b7:cc:0e:83:d4:0c:
20:a7:cd:1e:72:99:78:6e:be:41:84:02:e9:84:17:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:2C:3F:EC:AA:BE:5C:05:B1:FF:6B:7A:D4:DD:CE:2D:92:02:60
X509v3 Authority Key Identifier:
keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ea:ed:9f:db:c4:a2:03:a2:aa:33:62:e7:d8:e9:47:b1:ab:
cb:4d:ab:51:41:31:5c:2f:42:62:59:c7:49:24:02:30:50:d3:
18:25:9b:b4:44:af:c2:07:19:0c:db:48:fc:57:07:33:83:a4:
36:1a:65:59:b8:87:b7:d8:09:db:64:e8:c2:94:71:22:16:76:
4b:2d:93:38:bf:4c:57:fa:fd:dc:7c:a0:ab:01:a1:cf:9f:69:
d4:a4:3c:f1:95:55:ee:9f:22:3d:86:49:64:74:be:f6:1e:f1:
38:37:f9:52:e2:e9:0e:ca:e2:2d:51:90:5f:ac:20:76:02:c1:
70:82:f9:f8:42:ff:fb:7a:1b:46:db:b2:cb:cb:28:f1:5f:da:
53:66:36:73:05:bc:d9:b0:cc:0e:e4:a4:59:1f:8c:8f:7c:b4:
22:02:4e:24:96:dc:04:7b:df:5c:35:b8:0c:d7:b4:f7:35:a0:
e4:22:38:d5:e2:04:4f:4b:8b:e5:42:29:cd:70:5c:ef:ff:9a:
9b:6f:27:56:ac:c3:ea:08:c5:9b:cb:56:6a:4a:c1:5b:eb:31:
b8:20:27:e1:0e:c1:30:95:46:6f:67:2b:e0:7f:67:09:1b:e5:
23:60:0e:86:a9:74:3f:18:bc:c1:9c:b6:05:f4:95:b9:70:52:
3b:28:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:50:43 2026 by rpki-client