
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json)
Hash identifier: LzrGyQjw1++pDPhB4zhaXvM2CQACEuhsiWEcUdogAqg=
Subject key identifier: 7E:B4:01:AB:FF:10:11:4A:64:FB:37:72:9B:34:58:DB:98:3D:A1:29
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial: 0510
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
Manifest number: 04EE
Signing time: Sat 10 Oct 2026 23:53:27 +0000
Manifest this update: Sat 10 Oct 2026 23:53:27 +0000
Manifest next update: Sat 17 Oct 2026 23:53:27 +0000
Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: QRV5+iBT/YPl7edKWzUKM6GlvfDAl7X9zktfATwDJzk=)
2: 55DFA64492D711F18635C2A96211F970.roa (hash: djt66eXRykHBM3V8fZJrRs+bzF9etdDuyzOhtNwvhh0=)
3: A8BE9FFAB50011F1B3BDAF644111F970.roa (hash: 5gVUR1LzJSjsrME038vobJbhlEsjKxPYEroo5GUJ9Fk=)
4: 488DBEDE508011F1A55F3568A4833773.roa (hash: 0IdhV/KCNA/ojcwThaYzEeluJBUJZFZ2dd7XnSYNWPA=)
5: F1CD29047C8011F19A00D38478A30FBC.roa (hash: hC97lom9DKTata6nuBTwWb1tpOUqOikEDUgwzjzb3oA=)
6: FE7B43E0702611F18D33291E5EA30FBC.roa (hash: Q+eArnfIDLtygrr6Aol5UteYep7GUE2spzZ7FznPuig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Validity
Not Before: Oct 10 23:53:27 2026 GMT
Not After : Oct 17 23:53:27 2026 GMT
Subject: CN=6acacff7-57cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:b0:23:15:8d:a4:86:f0:79:ce:d5:9a:13:
17:42:2b:0d:4e:ba:a4:de:78:31:c0:16:f4:cf:92:
21:70:84:be:51:be:fc:32:cd:72:f1:d0:09:8f:92:
2c:00:a3:f4:6e:f8:1e:62:3a:07:bf:b0:5d:c3:76:
74:b4:6f:27:55:c3:bf:b3:09:be:62:b8:2f:f6:e0:
b5:8b:09:91:cf:86:2f:6d:89:de:04:8b:86:fc:ab:
44:a6:1d:11:eb:e7:67:31:26:46:46:14:02:97:63:
73:c6:35:83:02:41:79:c1:42:bc:58:ac:0e:39:5a:
cb:53:03:82:98:7c:bf:b3:cd:16:a6:c0:de:cf:a0:
f8:a4:3f:7c:f0:af:28:7b:02:8a:9b:87:65:63:71:
f0:e0:12:cd:e1:16:34:d0:84:70:d8:0e:4a:48:f7:
7e:8c:66:bf:ed:bc:89:86:2b:17:ea:3b:e5:7a:92:
56:f2:11:6f:45:52:94:16:c3:fc:55:4d:bb:83:a4:
a9:59:fd:31:bd:6c:ef:27:8f:6b:ed:c5:98:cd:f8:
33:3a:98:2c:8a:64:d5:53:e5:98:0e:54:3b:1c:c1:
21:37:dd:9c:67:05:1b:8f:61:f2:f0:a3:6c:47:53:
c5:2d:ab:08:01:1d:a3:cf:36:9f:73:19:ae:4d:8c:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B4:01:AB:FF:10:11:4A:64:FB:37:72:9B:34:58:DB:98:3D:A1:29
X509v3 Authority Key Identifier:
keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:7e:e1:b0:58:93:7f:0f:1b:ba:44:4b:b3:e7:c7:02:56:b8:
4d:ca:0b:47:f9:d8:da:16:03:4a:ed:64:24:71:ea:57:cd:eb:
86:93:d2:d2:49:d9:89:2d:ec:70:43:3a:82:cf:ef:cf:7c:e5:
dd:86:c0:d3:5a:a3:ca:92:a5:62:cc:4f:4b:9e:4f:3b:03:14:
bb:4d:4b:94:93:73:e8:c2:00:16:79:bf:14:95:ba:1b:a4:9c:
9f:84:50:e8:8b:96:50:e9:44:d2:93:fe:28:be:9c:c9:eb:69:
27:af:a4:f9:f8:aa:50:84:da:fe:3d:12:0a:66:84:41:fd:8e:
28:46:83:12:d9:0c:97:ec:65:08:27:6a:a4:51:a9:6d:97:da:
9f:aa:26:58:39:43:ee:d3:bb:69:64:43:83:25:aa:c7:00:bd:
fd:b4:65:0e:d6:20:43:69:cf:66:06:3d:1d:d9:ac:a8:8c:fa:
8a:1f:97:4a:96:69:e1:30:a8:d9:43:98:00:14:5a:d8:0b:40:
92:3b:58:37:31:2d:64:61:20:ea:fb:6a:fd:a5:b0:0d:13:f4:
93:a3:93:ba:b8:c9:80:b9:ed:63:99:05:a1:19:b0:2c:7e:e6:
82:78:4c:f9:8e:d8:1f:19:d2:77:82:4c:88:78:b6:cd:d4:c9:
6a:68:88:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:11:45 2026 by rpki-client