
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json)
Hash identifier: Bg4wQA5r/GNxZDY/Qcm29cwcwGEHmh5ocHuRvV3WIaM=
Subject key identifier: 42:83:67:29:4F:B9:0E:06:5F:CF:18:09:F6:D5:C4:85:EB:81:B2:E0
Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75
Certificate issuer: /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
Manifest number: 94
Signing time: Fri 09 Oct 2026 08:10:08 +0000
Manifest this update: Fri 09 Oct 2026 08:10:07 +0000
Manifest next update: Fri 16 Oct 2026 08:10:07 +0000
Files and hashes: 1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: z7QggPlR/cmLavEsj4/GOoiEZOXDqK1FAXUbnaV7mcQ=)
2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: rkDeFlmd5GKow5toLJKpXkhy9It1msy7eliFypTprmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl
rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075
Validity
Not Before: Oct 9 08:10:07 2026 GMT
Not After : Oct 16 08:10:07 2026 GMT
Subject: CN=6ac8a160-4696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:a2:b7:ea:3b:db:90:d9:28:96:76:4e:b5:
00:f3:0a:1d:ce:f3:46:1e:68:3e:a7:d9:68:10:ae:
23:41:f7:eb:5a:ba:89:97:dc:6b:e9:9e:45:d5:f1:
1d:90:30:70:c8:32:9e:b5:ff:3e:bb:e6:c3:0e:65:
23:d3:51:f3:9d:89:2a:a3:d4:66:39:77:0e:b4:2c:
c5:8c:24:55:50:51:f0:30:ab:7c:7a:b3:bc:d7:36:
97:86:d3:42:b7:47:1e:28:e2:46:49:36:de:61:33:
19:29:76:80:92:21:07:09:70:82:cd:3c:c8:59:78:
ef:d7:77:52:cd:18:de:5d:e2:d0:44:91:5a:e5:ac:
53:30:80:ab:c0:1c:e5:53:29:53:f0:e7:5c:b0:dc:
72:aa:ca:18:6e:a0:80:34:b0:e0:cc:30:d7:00:53:
cf:a2:ae:d7:9b:3f:12:5a:53:88:86:4b:73:10:82:
55:2f:97:48:d1:8b:d4:b7:c2:73:f9:3b:a9:5a:57:
9c:84:2c:7e:2b:77:d0:1a:ae:42:ed:5c:0c:80:1c:
ca:fe:ce:ea:fa:cf:ff:22:cf:31:be:1d:ef:44:05:
9d:66:b9:c7:1d:ac:dd:20:f4:70:ae:ac:45:81:9a:
e7:83:a3:5e:dd:cd:f7:3b:f0:a1:1b:a0:1c:fa:1c:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:67:29:4F:B9:0E:06:5F:CF:18:09:F6:D5:C4:85:EB:81:B2:E0
X509v3 Authority Key Identifier:
keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:45:4b:f4:d8:2b:d7:25:87:84:3d:7a:b5:6c:ce:fd:e2:76:
41:ae:60:6b:82:1e:d2:e1:6c:17:33:89:66:d6:e5:ef:28:a3:
00:cf:cd:94:75:44:39:42:4a:1b:ee:e4:52:a1:5e:89:72:75:
55:c7:bc:c6:06:85:e1:30:78:ec:56:69:e6:b4:82:f6:b3:97:
5a:30:57:e3:d5:42:5f:ff:69:ea:17:06:06:a4:fb:75:37:78:
d4:20:1a:37:01:af:73:1a:be:d3:a0:ed:6d:42:c6:5d:c5:b2:
00:e8:14:b2:32:22:62:94:cf:65:04:6b:b7:3d:7e:8f:9d:76:
03:8c:4a:64:0d:a2:6b:24:24:41:46:6c:40:56:dd:74:5d:b2:
61:f5:5a:7b:0f:20:e2:e9:d9:84:5a:2d:bb:bf:68:51:c5:c2:
80:7f:0a:c4:2f:e6:1e:34:4e:d7:b8:45:54:78:a4:b5:a7:0c:
43:71:ef:3f:f2:8a:c3:f4:29:e2:61:7d:4b:df:49:c9:2a:bd:
2a:df:2d:97:eb:62:68:7f:5c:68:51:d9:ff:b4:f1:33:8a:22:
08:70:51:2a:4e:48:eb:b3:22:5d:f8:7b:cc:db:36:db:a9:5c:
6a:da:ad:62:a4:2f:23:e4:ad:c3:6a:76:b4:68:3e:3c:c2:df:
98:6a:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:59:51 2026 by rpki-client