
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
File: -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json)
Hash identifier: 3tVFPTpwyIFmW4kWR6DxSO5NFWPXuOGB14/9qYbeIMQ=
Subject key identifier: DC:89:46:78:35:63:70:5E:40:9C:D3:66:FB:10:AA:D2:D0:73:2B:77
Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51
Certificate issuer: /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
Manifest number: 9D
Signing time: Mon 21 Sep 2026 07:17:12 +0000
Manifest this update: Mon 21 Sep 2026 07:17:11 +0000
Manifest next update: Mon 28 Sep 2026 07:17:11 +0000
Files and hashes: 1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: kf63iiYALf7LmS4ZrMLseXvt/kBUTZXnLsM5ElZZArE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl
rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
Validity
Not Before: Sep 21 07:17:11 2026 GMT
Not After : Sep 28 07:17:11 2026 GMT
Subject: CN=6ab0d9f7-37cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:fd:a2:dc:f7:68:d6:20:90:9d:82:37:16:
32:f5:af:b2:15:f2:e1:ab:da:e0:81:53:31:c4:ae:
90:63:bb:08:06:e6:0c:6c:26:37:39:9f:ce:39:b6:
79:c0:d3:34:28:cb:e3:d1:14:25:51:f2:e1:8e:8b:
67:70:08:66:5d:c5:b4:8c:87:af:7c:86:e0:29:bb:
30:f5:38:cc:8b:7b:60:22:ab:18:76:42:54:f6:04:
28:c9:95:08:30:d5:a2:be:b7:93:2f:f9:69:61:d1:
cd:a9:11:f8:5f:23:04:62:99:78:98:5c:27:fc:42:
b3:57:7d:b2:5b:13:34:b2:ba:87:0f:07:28:38:61:
37:01:df:27:66:47:ce:46:64:58:7f:b9:ad:f3:9c:
b9:10:89:9b:d8:aa:6e:f5:90:77:d2:b8:f1:d7:98:
f9:ad:4d:a8:fb:8c:a2:58:0f:f1:53:70:29:d7:b6:
62:0a:f1:50:27:69:1c:f8:74:6a:a3:84:dc:b3:09:
57:c0:a7:6e:8c:1e:55:f3:ab:ca:84:6e:62:79:0c:
89:41:3d:e7:ca:e1:57:79:61:2d:36:2f:3f:e4:3c:
14:47:63:a1:0d:91:5b:c6:03:26:d5:cc:d4:ef:95:
b1:24:a0:87:db:44:80:a2:7b:16:64:2a:bf:12:19:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:46:78:35:63:70:5E:40:9C:D3:66:FB:10:AA:D2:D0:73:2B:77
X509v3 Authority Key Identifier:
keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:c5:d0:8f:99:dd:33:1d:95:bd:9d:82:db:a9:09:43:3e:7b:
5f:91:10:ec:46:4b:b5:44:1d:52:dc:10:54:f1:38:c0:7a:1c:
3c:88:e9:0b:af:76:8f:cb:3b:0e:a5:f8:fb:0d:d9:73:fb:28:
c5:e2:62:0e:56:87:9c:e6:e5:36:7e:4c:c5:38:4e:2a:b3:a7:
56:ea:18:02:19:4a:58:a7:df:f1:b6:aa:3c:60:81:a8:47:d4:
33:48:df:f0:ad:82:12:cc:2b:cc:67:8a:a3:1c:f5:9c:17:b4:
1e:f7:15:0f:d7:dd:08:0c:e2:3f:29:12:b6:15:0c:78:71:52:
6a:54:e7:12:61:97:54:11:6a:d1:4a:5a:f9:5b:6f:97:06:0c:
ae:ae:7e:19:8f:91:cd:db:45:ef:69:de:aa:93:16:9a:32:e0:
78:f9:de:cb:3e:bd:3d:2e:7b:75:c3:0d:28:01:32:9c:72:8e:
f7:fb:00:09:ee:44:80:4b:2b:0c:8b:4f:35:cb:64:23:be:11:
c9:cd:70:c2:7a:7c:e2:f0:28:a4:cb:6c:04:83:49:bc:3b:80:
d8:79:c8:98:52:9d:75:63:84:8e:68:88:0a:14:08:6e:e8:04:
b9:06:e0:a4:cd:c8:fc:a9:42:83:6a:21:ac:7e:4d:e2:33:8a:
0f:46:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:39:30 2026 by rpki-client