
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
File: 64mHxSCv7Nwk9ByG_Gut08Fvpio.mft (raw, json)
Hash identifier: qMzno1+vQT8O0PBAjnSjKVoKykbJDRNi+3bypDEOg/E=
Subject key identifier: 90:6A:60:19:DF:A6:BA:7E:5A:93:9F:F8:01:F2:43:AF:39:DE:05:FE
Authority key identifier: EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A
Certificate issuer: /CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
Manifest number: 0157
Signing time: Wed 23 Sep 2026 04:58:59 +0000
Manifest this update: Wed 23 Sep 2026 04:58:59 +0000
Manifest next update: Wed 30 Sep 2026 04:58:59 +0000
Files and hashes: 1: 64mHxSCv7Nwk9ByG_Gut08Fvpio.crl (hash: EI72PsOdlVEaBjKC5qsiIXf2NBnUT7b8pD4cIEMCfyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl
rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1C73, serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A
Validity
Not Before: Sep 23 04:58:59 2026 GMT
Not After : Sep 30 04:58:59 2026 GMT
Subject: CN=6ab35c93-febe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:d5:cf:c8:cb:f9:bf:f2:4e:92:bb:74:9f:
99:7c:15:84:81:e3:a0:95:27:d3:c5:48:3a:3a:7a:
8b:d2:5e:ab:90:4e:63:b4:9f:1b:c0:80:71:83:e6:
b1:a8:17:9d:59:50:1c:9e:5e:95:ab:51:d1:96:62:
ad:4f:24:97:93:f6:51:10:c1:8a:25:12:21:d6:27:
07:51:49:0e:95:58:56:c3:a5:97:47:d6:11:12:72:
88:0f:0d:2b:35:e8:e5:89:3d:89:7d:48:9d:7a:86:
be:c5:be:1e:3e:21:fa:46:b5:f6:a9:24:73:cf:c6:
06:7b:ee:4e:6a:d9:68:40:39:26:b0:6e:7b:26:da:
a2:bc:03:91:ad:56:28:2d:c4:d1:f4:a6:0e:5e:83:
f4:3e:b4:49:d7:52:4b:1f:5c:34:12:01:0f:72:36:
85:f2:2e:e6:c0:fe:63:99:9e:a9:ab:81:55:8a:b5:
e9:f8:97:cd:32:3e:d1:8b:8c:34:87:66:b5:ed:10:
39:e1:38:23:89:06:f5:7e:73:0c:29:7e:f6:77:66:
03:48:6b:2e:e8:de:e2:44:39:d2:e4:71:49:96:3d:
b2:2a:51:97:aa:0e:fe:c8:3b:6e:89:09:6a:c9:4b:
21:29:e9:62:60:70:4c:ab:48:63:5d:95:66:ae:5b:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6A:60:19:DF:A6:BA:7E:5A:93:9F:F8:01:F2:43:AF:39:DE:05:FE
X509v3 Authority Key Identifier:
keyid:EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:93:91:af:42:25:45:ca:19:5c:ad:23:4c:29:96:ad:66:56:
89:70:1e:a0:c0:f5:8c:3a:0d:5e:37:48:2a:ed:13:6b:93:a4:
d3:4d:6e:9f:76:13:09:36:ce:37:60:c7:bd:e0:c9:82:f3:8e:
ab:11:9e:f7:d8:3d:c5:3f:f0:f8:73:77:1e:1b:7d:b5:98:00:
3e:ae:6c:0e:78:aa:cb:7f:2b:9e:2b:b6:e2:f5:f5:de:37:d2:
5c:8c:48:9e:1c:0b:de:12:77:ae:b7:b7:a2:ee:31:dd:74:84:
50:78:ed:bd:51:7f:a1:dc:4a:42:88:1c:5a:d0:f5:64:84:15:
56:0f:28:77:60:0d:4c:0a:c3:93:85:e1:6b:39:d6:80:90:d0:
54:e7:e7:99:54:0a:1b:18:f1:33:37:31:d0:60:56:a1:85:0d:
e2:85:02:01:49:e4:b6:7b:ca:4d:78:13:95:80:e4:31:8a:4e:
51:18:0d:14:4e:a1:ba:9a:5a:00:d5:10:da:71:9a:a9:c6:d9:
d6:d9:c0:40:16:64:02:ae:76:f1:85:ab:10:80:87:b1:3d:1b:
a1:d8:ec:09:38:d4:be:d2:68:2b:2e:da:53:04:5c:42:75:42:
30:aa:8d:47:18:36:1f:0c:c4:24:b6:a7:e7:65:a6:98:9d:f2:
5a:ce:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:51:26 2026 by rpki-client