
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
File: AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json)
Hash identifier: aITgW/DmXlsNWeEayDRlwaSK1WqtzXzH4Ac34q19tec=
Subject key identifier: 69:3B:77:5C:20:3B:80:3A:26:7D:7F:11:59:B0:CF:58:9C:68:AB:31
Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8
Certificate issuer: /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
Manifest number: 0133
Signing time: Sat 19 Sep 2026 05:41:08 +0000
Manifest this update: Sat 19 Sep 2026 05:41:08 +0000
Manifest next update: Sat 26 Sep 2026 05:41:08 +0000
Files and hashes: 1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: X/kt0DmTQ4LX+SbXRhUqtKCEvqLaB8vskQWthRdYoks=)
2: 7970EAA266DA11F084325D42C4F9AE02.roa (hash: h1LWEJUQvaATUOdZkytyIfaI4klq2FxoFoCocLW2Bpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl
rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C09EA, serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8
Validity
Not Before: Sep 19 05:41:08 2026 GMT
Not After : Sep 26 05:41:08 2026 GMT
Subject: CN=6aae2074-6650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:e3:b1:89:51:81:65:8b:99:a7:62:b5:7e:
d9:29:f3:d2:65:b2:28:95:38:58:da:8a:d9:2c:12:
28:79:43:1e:a3:2b:90:f7:57:9a:0e:a6:79:14:3e:
44:58:29:10:c9:27:26:ea:ee:5a:83:c8:6b:2d:53:
cc:52:9f:86:8d:48:95:53:30:30:b8:48:32:69:8a:
df:08:3d:09:dd:a2:10:53:62:a7:bf:91:ce:7a:8f:
9a:a9:45:16:a1:e8:ef:70:9e:6f:90:6e:dc:3e:ef:
6a:f8:07:76:2f:11:bd:70:56:e6:1a:6f:31:f5:8d:
ae:4e:83:f6:da:1d:e3:81:2e:39:35:e6:73:57:92:
15:3f:24:ce:70:25:c2:99:30:43:d0:fb:ec:77:1d:
a4:ef:b8:51:c2:eb:7f:ca:80:2f:6c:76:64:b5:b5:
80:c1:33:bb:c7:69:79:33:16:29:a4:f9:81:1d:3c:
66:04:68:34:6c:6f:72:7a:37:0f:09:ef:2e:2a:3d:
52:c8:ee:6a:da:63:9b:2b:48:1b:e5:ad:7c:31:10:
ad:5d:85:ee:93:db:28:2a:a3:a3:d9:e1:c8:29:96:
be:26:79:5b:5d:c4:94:68:5b:1e:27:6b:de:68:3c:
e1:61:6d:db:a4:c1:6c:2f:80:82:22:15:3f:fe:a1:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:77:5C:20:3B:80:3A:26:7D:7F:11:59:B0:CF:58:9C:68:AB:31
X509v3 Authority Key Identifier:
keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:53:26:01:5a:82:6c:64:0e:ce:78:9b:cd:5a:d4:ef:dd:9e:
f4:05:a8:7c:2c:a0:64:87:9e:1d:1b:77:00:25:b3:3f:88:f1:
db:17:85:a6:08:5d:e6:f1:e1:a0:8b:f6:ff:da:d1:41:69:a4:
87:28:11:d8:2a:b7:f3:79:4d:96:a3:aa:64:33:0e:0a:07:bc:
25:45:99:c3:53:44:24:29:ce:80:36:c9:19:da:53:52:3f:a4:
5f:ab:df:00:03:c5:93:0a:06:cd:dc:47:5d:f8:dc:8c:eb:2d:
dc:3f:ba:70:92:a3:90:23:4d:27:8e:8b:c7:9d:0e:21:cb:ad:
ff:45:1d:2a:01:1f:be:94:e7:9e:75:70:ca:a7:ea:3f:07:b7:
b1:c8:09:1e:8e:41:c9:26:40:64:be:9c:61:98:3c:aa:4e:dd:
c7:f6:25:89:b6:23:e9:28:45:69:24:64:f0:27:90:3a:7b:e2:
5e:65:d3:78:ae:54:f9:ab:26:4c:1e:d9:80:ee:15:39:69:9e:
4b:5b:a7:f5:1f:9f:f6:fc:a1:fa:31:9c:ce:1e:b7:40:ac:c4:
18:4e:c8:49:a2:4c:97:13:71:09:26:6a:72:e8:e6:11:2c:64:
37:25:aa:ee:0b:4e:99:37:ac:f9:2f:5b:36:4e:29:7e:45:ce:
47:70:d5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:41:41 2026 by rpki-client