
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
File: nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json)
Hash identifier: nZ+RRItL4lHn4fAfDw5jIaonKSCrg2yIBHo2rdeko5c=
Subject key identifier: D9:F5:A9:A0:3E:8D:CE:8A:E9:EB:B8:8C:E8:A0:89:3C:38:E3:70:B5
Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48
Certificate issuer: /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
Certificate serial: 3579
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
Manifest number: 52C9
Signing time: Sun 20 Sep 2026 15:12:21 +0000
Manifest this update: Sun 20 Sep 2026 15:12:21 +0000
Manifest next update: Sun 27 Sep 2026 15:12:21 +0000
Files and hashes: 1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: +RolZfSWVbLu937eG4k7O0IrZ2LgxynAL9+dCFyAIj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl
rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13689 (0x3579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
Validity
Not Before: Sep 20 15:12:21 2026 GMT
Not After : Sep 27 15:12:21 2026 GMT
Subject: CN=6aaff7d5-3415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:3f:58:7d:6f:da:67:4c:db:7d:2f:8e:9e:
ce:f3:49:6d:7b:79:ed:a0:f8:28:02:46:df:87:0f:
54:b5:d6:74:8b:af:38:f7:b9:bb:cc:56:14:f8:6d:
37:5a:bd:58:51:94:52:cf:67:55:ac:b1:2e:c4:ec:
8a:43:13:b3:9d:5c:e9:dc:b0:5a:93:95:a5:3b:89:
a7:4b:a0:a0:9e:13:0c:a9:dc:6b:50:7a:31:c9:54:
0d:a5:ef:1f:41:27:39:30:89:15:90:27:b4:ec:d6:
cc:db:8a:0e:09:10:d5:0f:6d:5c:58:f5:fc:d3:05:
ed:41:68:8b:8f:19:fc:1a:fa:5a:0b:9b:90:b7:94:
77:4f:19:9d:aa:ac:5d:89:06:57:b1:1d:6e:9a:a4:
81:22:36:76:b5:d1:c6:82:c2:11:e5:f0:8a:0e:66:
53:ae:d0:c6:b6:d8:0b:b5:1f:8c:27:b1:c5:88:6c:
af:1e:a2:b0:79:7c:90:ea:55:e9:92:8b:93:48:fc:
43:d2:cd:ef:30:bf:32:37:1a:af:8e:78:74:4c:6a:
fa:c4:7a:b0:4f:aa:89:42:53:47:e5:8a:19:d3:3a:
9c:b5:35:f2:8f:db:d3:57:8e:0d:01:26:84:3c:c3:
5e:f4:b3:ac:cb:92:d6:fd:c2:75:9b:ba:83:3a:24:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F5:A9:A0:3E:8D:CE:8A:E9:EB:B8:8C:E8:A0:89:3C:38:E3:70:B5
X509v3 Authority Key Identifier:
keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:66:89:82:2d:7a:63:00:53:d9:ac:1d:0f:95:73:0a:cf:a1:
bf:c2:17:5c:ff:9c:95:59:85:89:00:7c:02:45:31:2d:47:9b:
5b:dd:d5:3c:0c:d8:2d:38:a3:8c:e3:22:37:3d:6f:df:26:0a:
38:ca:1e:1b:8e:b8:f6:09:e7:94:6c:15:93:ef:8b:5c:e1:bf:
59:b7:d1:52:49:c8:9d:f4:69:97:3d:f3:6a:ad:b4:56:9c:d5:
fb:4f:52:5e:f6:a9:2d:cc:46:74:da:ab:82:9d:79:29:8d:41:
fa:94:26:ab:31:fe:a4:d4:66:0e:01:45:fa:9a:a8:b9:e4:c7:
4c:9d:b8:52:f6:e8:da:c7:39:16:ea:4f:87:72:bc:63:27:0d:
0e:2e:0a:6b:99:e4:17:af:57:4c:c6:29:b6:01:93:49:39:f9:
ca:43:b8:b2:e3:e9:55:c1:fa:d8:7b:53:f3:c2:bc:73:71:b6:
92:65:46:1e:12:9a:75:86:b5:b7:d6:a6:ec:3e:6f:12:f2:b3:
73:bb:d4:80:50:04:95:19:67:5c:34:28:a0:71:24:27:12:7c:
d3:d7:26:b6:ab:ff:80:75:60:0d:b1:4c:44:cd:6c:cf:8d:fe:
ce:95:48:7e:dc:3a:76:68:34:aa:0c:9a:64:70:cd:3a:d4:99:
7b:bd:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:40:47 2026 by rpki-client