
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier: M685xnMbQXdATL67S3dciOM5aQPxV6cGt/V5rnUCbtA=
Subject key identifier: A8:D8:B3:5C:22:24:56:3B:3C:42:74:BF:18:C4:61:8C:32:D8:8A:7E
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number: 0182
Signing time: Wed 23 Sep 2026 04:28:03 +0000
Manifest this update: Wed 23 Sep 2026 04:28:02 +0000
Manifest next update: Wed 30 Sep 2026 04:28:02 +0000
Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: CXvjh7IRlI4X2JssC7Syiq9E4W+/0pu4b4RPetjPT+A=)
2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: QHT2EqJHyPujaDEriJMd/9h9fPZLETh+MJuliPGlg9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Validity
Not Before: Sep 23 04:28:02 2026 GMT
Not After : Sep 30 04:28:02 2026 GMT
Subject: CN=6ab35553-c6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:13:2a:4a:0e:fe:2c:0f:2f:a4:e6:22:6b:
a5:da:f0:69:eb:76:b0:9f:f4:fc:8a:14:23:ad:95:
e2:a0:1a:70:19:8f:8d:7e:40:d8:63:4c:20:09:4e:
26:4e:9f:2f:b0:67:ef:f9:6f:cd:36:61:49:e8:15:
59:e5:87:bc:a8:ba:10:11:a0:01:fb:bc:30:99:de:
09:3d:10:47:57:89:a5:68:09:73:de:e6:c7:db:5f:
99:41:4d:0d:04:19:07:79:a0:4a:98:12:53:b4:21:
52:f7:28:77:49:00:de:7f:b9:a8:db:00:e0:7d:67:
c4:9a:10:75:27:4b:c4:f2:3b:85:d6:24:db:18:75:
4f:94:4d:5d:b2:55:15:ee:bd:18:b7:7f:35:87:dc:
a2:70:22:e2:fe:62:bc:fe:cd:30:0d:73:a3:f8:51:
b6:47:4d:25:d7:f4:59:3a:85:b3:eb:5f:7e:8c:a3:
69:00:fb:6b:19:93:f7:46:6a:68:31:08:28:61:12:
9d:2a:87:9e:8b:67:a8:58:a9:0c:04:51:d1:7e:42:
dc:9d:3b:1d:e0:fa:1a:14:bf:f9:30:f0:eb:fb:cb:
bb:ff:a2:0c:52:96:5b:ec:1d:4b:bd:00:f8:8b:08:
cd:7f:c3:29:c5:67:33:a2:ac:70:9b:b7:51:50:ee:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D8:B3:5C:22:24:56:3B:3C:42:74:BF:18:C4:61:8C:32:D8:8A:7E
X509v3 Authority Key Identifier:
keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:32:e1:03:87:de:8b:cf:89:49:62:78:66:b6:d4:60:0e:f7:
79:12:84:fe:2d:8d:4f:d4:0f:cb:80:6a:d8:dc:cc:b4:d6:83:
ff:1e:af:f6:55:c1:ff:83:32:99:d2:a8:29:da:2a:f8:80:9d:
f3:4e:84:3b:ce:90:d2:11:33:a2:54:fd:83:04:93:92:fd:13:
5c:1d:42:56:14:aa:60:2c:ac:d0:ea:f9:31:e4:78:2a:24:e6:
bc:1d:b9:56:a4:2d:cc:5b:4d:e1:76:9f:69:ed:5d:2b:a9:6c:
6d:50:86:fc:67:13:d2:d0:88:98:f3:0f:5d:24:bc:97:69:c1:
90:71:f0:a5:4e:40:e1:60:94:51:dd:01:6a:db:43:c0:4e:18:
c4:ad:de:69:7d:17:6b:b0:4a:9d:dc:6b:7f:a1:d1:f1:dd:c8:
09:22:ff:9c:a6:96:6f:3a:8d:d1:27:2a:de:b5:f0:29:94:98:
2b:72:ac:a5:54:ad:8a:25:f3:e1:d9:9e:ce:b0:e5:db:63:44:
f5:70:43:20:ff:13:ad:d9:c8:56:93:0c:54:19:fa:36:9a:bf:
30:9f:7f:11:e9:83:71:5d:0e:2e:de:eb:f2:9b:4b:56:f3:6b:
21:ce:bb:e3:ed:b1:0d:38:6e:6c:5b:d7:1e:83:61:40:02:04:
76:9d:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:23:28 2026 by rpki-client