
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json)
Hash identifier: tzigqTLfEXq+Hdbst2Gd+Bwfx2Ge8jnMInzuH+GVIuI=
Subject key identifier: 84:25:77:0C:CA:63:B5:26:82:E4:BC:B0:07:7B:92:14:28:07:7C:2C
Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
Manifest number: 01A2
Signing time: Mon 21 Sep 2026 04:10:54 +0000
Manifest this update: Mon 21 Sep 2026 04:10:54 +0000
Manifest next update: Mon 28 Sep 2026 04:10:54 +0000
Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: 9zjexBxODIg1TF5vmrryPKYYCK3+7NSDUYjfbzLZaAM=)
2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: MNX1ee3x9dbW8bZLPIUDq7Oc9qNdTCehADLERsWmUlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7948, serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD
Validity
Not Before: Sep 21 04:10:54 2026 GMT
Not After : Sep 28 04:10:54 2026 GMT
Subject: CN=6ab0ae4e-37be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:b0:c7:a2:7e:32:81:12:55:8b:cc:e9:1f:
2c:18:68:0d:b0:c1:63:35:78:9d:3e:88:b8:54:21:
8c:53:e5:a8:be:23:34:83:ad:ca:d1:1f:82:d9:03:
6f:ca:3d:b6:82:2c:fd:3e:49:f9:93:e2:39:0c:b3:
40:65:62:bd:a2:b8:22:4a:a2:d0:c1:33:a9:f5:73:
88:c8:85:8d:95:bf:e7:ea:c4:5f:97:21:20:99:bb:
30:c0:44:d0:7b:58:db:99:61:d1:23:26:56:dd:1b:
ea:e6:a8:f6:65:d6:bd:ba:ac:ee:ee:13:33:86:e3:
4a:be:b3:d3:3d:e5:a6:f0:9d:3f:a2:29:21:85:2f:
cd:ae:8f:32:3e:03:b2:05:6e:4c:b3:23:0d:e8:41:
83:88:e9:b2:20:fe:42:22:ae:ee:9f:9e:fc:da:51:
53:94:d7:fb:60:c2:7e:bb:59:19:24:8d:b5:2d:d5:
2f:35:81:ed:25:f1:84:46:e8:88:7e:e4:32:3a:85:
05:8d:ff:0e:ff:1e:2f:31:0c:97:74:51:dc:df:a2:
26:86:4c:4c:26:84:3a:ce:d0:a8:e8:33:46:37:ca:
3c:b3:5e:b0:72:c5:2f:e1:12:e7:a4:71:84:44:c0:
d8:fa:6a:48:5a:82:45:79:dc:58:06:54:e8:18:f9:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:77:0C:CA:63:B5:26:82:E4:BC:B0:07:7B:92:14:28:07:7C:2C
X509v3 Authority Key Identifier:
keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:d3:a1:1c:95:85:72:30:34:81:00:9b:e2:2f:0f:58:20:ca:
7e:ed:1e:f6:b0:7d:61:2b:5a:92:e2:c0:15:3e:90:92:d9:ed:
ba:f5:d9:71:9c:51:7c:74:bd:6d:c0:d2:5c:7c:b7:98:a5:5f:
ef:99:84:db:ce:1a:3d:90:97:01:b8:ca:e8:e2:bb:2d:a0:2a:
44:f8:87:e6:27:75:64:e2:72:27:57:42:d1:98:43:cd:9b:9c:
e0:e7:be:46:20:f8:78:8f:8b:23:52:61:54:d9:7b:01:60:8f:
ac:f4:b2:93:8a:82:d6:cc:0f:0b:6d:18:b0:eb:ad:7a:ad:f3:
f3:fd:76:91:5a:6f:3c:a5:c0:87:50:48:dd:aa:85:16:f2:ed:
f2:6d:ee:17:c9:be:23:ff:43:cd:f0:c4:cd:c6:56:88:50:81:
35:b4:f5:f9:e1:28:54:bf:cf:3f:94:f6:02:ad:b4:3e:da:9a:
40:6f:34:d4:78:41:f1:a8:fc:11:da:de:f4:4a:35:17:90:e6:
b2:63:e3:39:37:ad:73:74:88:5c:2f:ff:c8:7e:2f:3b:cf:af:
fe:1c:b2:a5:2a:ab:ac:0c:04:31:2f:b8:a9:21:3e:98:97:db:
ef:d7:22:73:5a:44:e5:f1:9b:36:54:c6:95:8d:25:47:ab:0b:
0f:48:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:42:22 2026 by rpki-client