
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json)
Hash identifier: KlPbQeHjfagSMh9OV2WKzeKoz/4Iwb1MRpPl/Gxr474=
Subject key identifier: 4A:5B:3E:7C:3F:E9:ED:FA:4B:E0:66:42:86:55:06:3A:26:2C:29:69
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
Manifest number: 0221
Signing time: Mon 21 Sep 2026 02:52:28 +0000
Manifest this update: Mon 21 Sep 2026 02:52:27 +0000
Manifest next update: Mon 28 Sep 2026 02:52:27 +0000
Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: 1VWv2b8hBuDa8zSer0dQd9LJCPI6gFc++m1msXbNKOs=)
2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: CsyZRvBZjt0dHAYffGH8YRNAMUomFdDHqloAHzosLdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:52:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Validity
Not Before: Sep 21 02:52:27 2026 GMT
Not After : Sep 28 02:52:27 2026 GMT
Subject: CN=6ab09beb-4575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:2b:6a:55:41:73:92:37:39:fa:d9:b4:77:
bd:a7:5b:4d:71:ec:71:32:ec:1b:c2:c9:38:52:24:
51:88:05:03:9c:18:d3:b3:7b:80:e2:4a:cb:f4:db:
cb:a3:ab:50:ab:0c:57:b3:e1:e6:a5:44:67:f6:c3:
e8:a8:ef:f4:d6:39:4d:6d:26:ce:fc:91:cd:43:f3:
ea:a8:dd:42:85:93:6b:75:09:6f:4f:d5:9c:16:6e:
04:8f:74:f8:ce:18:0a:55:62:9e:31:c4:e8:ad:cc:
a7:1b:62:cb:41:b8:cf:93:20:b0:23:33:5a:42:a4:
70:70:1e:42:36:76:09:4b:a6:10:6a:1c:04:05:4a:
d1:c5:b3:8c:bb:d7:c0:f2:9f:7a:36:e4:b0:bc:3f:
60:ab:6f:3f:93:43:08:f9:14:bf:6c:c7:fa:99:e5:
87:70:45:d9:53:d9:cc:ad:62:5d:ae:11:86:b6:1a:
30:fb:6b:bd:18:1b:61:78:e3:d9:5b:d4:6c:5a:f1:
5e:08:42:45:96:a4:8d:d7:be:3b:5c:46:2f:89:0b:
e7:b3:01:c7:92:89:7a:a0:89:29:7d:9c:18:b8:8a:
46:6e:dc:98:ff:f8:f7:5c:f2:6c:81:67:2e:26:dd:
6e:d2:d0:d7:cb:86:d3:e6:a6:d0:64:20:95:08:12:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5B:3E:7C:3F:E9:ED:FA:4B:E0:66:42:86:55:06:3A:26:2C:29:69
X509v3 Authority Key Identifier:
keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2d:6a:55:3b:88:fb:65:e1:3c:8d:7a:a6:b1:f1:81:2f:ce:
c0:3f:79:09:58:31:b5:81:9e:36:fa:b9:5f:ba:78:5b:ec:77:
d1:81:ee:d6:07:ae:0c:bd:bd:9c:2b:71:1d:37:d6:a6:af:70:
ec:6a:a5:01:ff:0c:16:21:d7:7a:43:47:eb:9b:39:59:20:6a:
e1:09:ae:6c:c2:4d:0b:0b:de:0b:df:02:1a:ca:62:9d:47:5e:
73:26:a6:fe:a7:d0:6e:a5:23:bc:2d:11:e8:af:b2:57:cc:77:
c1:05:f3:00:80:b2:a4:7a:32:17:02:6d:ec:bb:a6:66:03:81:
46:c3:98:b7:2e:9f:76:b2:81:88:c6:d3:ef:28:94:42:01:13:
70:7e:16:31:a9:c7:6b:83:ee:34:df:c2:e2:57:06:be:e9:b3:
34:eb:70:4e:a9:69:7c:9f:0c:5e:da:52:11:f2:5f:f2:03:cc:
dc:81:58:c7:b8:5c:28:c5:f0:c4:76:cf:48:68:0c:8b:60:5d:
be:42:f6:22:0f:e3:fe:86:59:8d:88:28:11:32:ba:1f:82:b6:
58:bc:99:e6:00:1f:2e:0a:a7:2c:38:dc:0b:f0:9d:5f:58:90:
d1:c4:aa:5a:f6:8d:0d:02:12:8b:73:dd:c5:6c:d8:cc:0c:83:
14:58:72:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:37:13 2026 by rpki-client