
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier: n9GjUFEmR0X2oF341L1651rA1IsRJGSYOzOk6q+BMr8=
Subject key identifier: FF:49:63:76:82:41:0A:8B:14:9E:42:33:F0:E4:D5:D0:3C:9D:4B:45
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number: 011C
Signing time: Sun 11 Oct 2026 06:39:11 +0000
Manifest this update: Sun 11 Oct 2026 06:39:10 +0000
Manifest next update: Sun 18 Oct 2026 06:39:10 +0000
Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: j7oGBcnuY/MUTzP4dzSuGtJGccT+UHaHIBjmNT64GyU=)
2: 7020A3F6FB6411F0B417A8544B6F56BC.roa (hash: 4UhFxMbmNDYDd2dRJ6HbabaSlexlrVw5pQFQ3FGsJWs=)
3: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: 6asIBObx3rTPpOx29VJORSW0mgsSB8Fi+FtlmzaJ7TI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Validity
Not Before: Oct 11 06:39:10 2026 GMT
Not After : Oct 18 06:39:10 2026 GMT
Subject: CN=6acb2f0f-81cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:7d:7f:c1:4f:1c:d5:83:1a:73:68:bf:25:
88:e4:fb:99:88:dd:66:a6:a4:12:fe:ab:13:19:86:
d6:f7:0a:06:94:5d:c7:39:56:23:a6:0f:97:9a:e4:
0f:2d:9e:ba:47:30:31:93:45:3f:9e:17:8f:08:e6:
7c:86:51:a7:1b:5a:9e:6d:0e:03:ab:50:6d:4b:2d:
e8:1e:1c:5d:f8:7b:50:dd:dc:aa:d0:7f:1f:4c:89:
23:d4:cb:e9:df:cb:d4:c5:0a:bf:b2:46:42:52:25:
10:76:15:9e:bc:c0:a4:d8:44:a1:45:d4:09:f3:a0:
b6:73:3b:7c:8e:c4:58:3c:c7:73:2a:05:24:e0:a6:
55:28:2d:aa:13:3c:10:5e:39:fd:09:d9:14:bd:ce:
20:6f:d6:5c:75:6c:6f:a2:cd:9b:b0:f3:27:d1:b1:
29:ab:74:24:37:50:28:90:5a:cd:7b:82:d4:21:3c:
d7:c9:52:4a:e3:dd:43:29:27:f8:58:d3:5a:f6:22:
f0:ee:c1:14:db:33:39:99:b3:aa:c1:47:7d:c2:37:
c6:b7:10:33:df:b2:01:42:24:9f:f4:e6:2e:23:f0:
9a:a1:3f:22:7e:80:1e:0c:96:ca:54:48:dc:23:7b:
fa:d4:14:e7:b6:0d:dd:d2:14:55:a9:00:56:6f:5d:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:49:63:76:82:41:0A:8B:14:9E:42:33:F0:E4:D5:D0:3C:9D:4B:45
X509v3 Authority Key Identifier:
keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:0d:23:1b:67:fd:76:10:60:fc:ba:ff:4e:f4:67:d5:2e:3a:
f4:3b:41:74:dd:4d:be:40:e0:66:3c:cb:f4:d9:44:d0:23:93:
0e:97:32:a0:20:3c:3b:67:03:2e:45:94:27:fe:7b:05:e6:e9:
6b:26:fa:52:2d:1b:14:43:60:c2:c4:b7:5f:48:07:ea:cb:5f:
2f:06:38:70:33:6c:42:f5:0e:7c:32:9b:ae:48:e5:8a:de:e4:
bf:82:f4:ac:02:d5:a5:a0:15:33:7b:16:41:eb:f2:11:59:2b:
ca:a5:4e:ef:7c:a1:8c:41:af:c6:72:c0:96:2f:5b:6f:3e:91:
17:95:25:ae:c1:7b:42:04:45:0c:66:fe:d3:c2:6f:ff:c5:d4:
6a:e6:3a:62:fe:17:21:4b:59:d9:12:a6:33:04:c0:79:c7:28:
15:d9:18:bd:15:77:0d:a0:91:6b:cb:fd:47:fe:89:23:a9:47:
5e:3d:39:5e:90:50:8d:f1:c2:3a:d8:ff:af:16:c9:6f:c9:ae:
16:60:f9:21:a5:cf:d6:89:55:07:fa:70:f7:68:19:bf:bb:b7:
19:b0:6c:bc:a3:09:d9:88:de:42:7d:67:df:08:51:11:89:ce:
b0:4d:47:20:41:81:3b:ae:14:70:1e:26:1e:71:e6:d8:54:a8:
fd:ae:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:24:39 2026 by rpki-client