
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json)
Hash identifier: 5ZIgEn9BuLEaR3EmxeMPhwbh/tkJef4iOhCD5jfY34E=
Subject key identifier: B7:81:B2:A8:8F:E5:BC:20:D2:07:03:73:8B:FD:9C:94:64:65:C4:F5
Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9
Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9
Certificate serial: 0EBB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
Manifest number: 0EB0
Signing time: Sun 04 Oct 2026 17:45:15 +0000
Manifest this update: Sun 04 Oct 2026 17:45:14 +0000
Manifest next update: Sun 11 Oct 2026 17:45:14 +0000
Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: 1+SjvhU7RNaiaVCKb47tQasX0AiN4501Pqs2TUr4eEE=)
2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: o6Xw5xLS8YVW62CrGPTjvjmk2nm6Ne1ncHaH7pEqVM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl
rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 17:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3771 (0xebb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9
Validity
Not Before: Oct 4 17:45:14 2026 GMT
Not After : Oct 11 17:45:14 2026 GMT
Subject: CN=6ac290aa-6d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:82:f5:e7:e8:9d:5e:39:4a:26:fa:7e:b9:
58:ab:2d:2a:c5:23:4a:43:ab:55:7c:07:5f:13:c8:
45:49:4b:11:e3:63:f7:dd:ba:e4:bd:8d:73:e6:79:
2d:bf:b6:6e:5e:d4:ca:5f:39:e6:c9:dc:2c:b6:c0:
dc:93:d5:de:6c:47:35:94:67:9a:0c:d8:c3:03:23:
e4:91:2d:a9:e8:9f:0b:b7:a2:a3:f8:1f:f2:2f:17:
0d:55:60:c6:ce:58:27:0a:8b:6b:08:e1:28:e8:02:
ef:5b:42:37:a3:89:7b:e4:93:09:b3:8c:a7:22:e1:
50:b6:e6:23:18:71:8e:94:cd:2b:40:b6:0e:2c:f1:
7b:80:e6:23:de:ac:98:3d:83:3b:03:ad:f3:ce:ff:
2d:64:4b:08:71:43:69:7d:a0:a0:1a:04:a3:79:55:
df:5b:c2:a7:d9:f4:da:45:21:e3:ef:f7:02:09:6c:
13:e6:8a:b3:37:ee:8b:2b:64:3a:2e:05:25:19:bb:
17:17:0a:2b:44:14:15:52:90:15:b1:ca:91:14:a4:
b1:1a:aa:1d:30:88:75:97:06:d3:0c:35:1d:af:cd:
a7:8e:4e:37:63:d9:d3:3b:cc:f1:cf:db:5f:10:63:
2b:0c:c8:30:ef:59:3f:99:26:5c:6c:5d:44:07:b5:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:81:B2:A8:8F:E5:BC:20:D2:07:03:73:8B:FD:9C:94:64:65:C4:F5
X509v3 Authority Key Identifier:
keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:36:6b:30:36:06:cd:8b:77:79:e4:13:79:a0:f1:75:ab:86:
c4:df:85:ed:aa:b0:ff:b2:67:19:eb:c9:3c:a4:e3:0f:79:42:
ac:50:3b:92:5a:dc:30:91:06:b5:b0:3d:2b:72:04:e2:f5:ae:
44:87:eb:40:0f:49:65:ef:a9:2a:85:e7:d9:f4:f2:19:a8:2b:
54:46:d2:b8:9e:dd:bb:be:d6:d8:24:bb:35:f4:0b:a4:2e:c5:
33:e5:40:db:84:9c:af:68:b3:62:ed:a1:02:f2:e6:d0:9f:ff:
89:da:77:1c:c4:02:fa:07:99:da:91:a7:9a:de:9b:6f:d1:ee:
81:7e:91:54:44:ba:90:aa:0b:ac:61:1f:93:30:11:ff:31:ac:
53:ca:ab:b4:2c:e4:54:c0:c0:65:9e:38:4f:04:8c:04:13:ce:
af:0c:77:ca:10:39:05:56:88:bb:d1:94:58:7f:16:0f:fd:49:
58:63:34:43:1d:36:e3:41:51:d6:fa:09:53:83:0d:a1:8f:cd:
46:42:0d:f3:82:7f:08:b4:82:62:2a:7b:ec:db:09:e7:cb:bc:
52:e3:c8:c9:9c:fa:62:49:a4:f9:77:bf:27:5c:b4:c4:66:e1:
86:d3:36:53:85:83:b0:24:2a:5e:51:e4:cc:18:25:ca:3e:dc:
ef:39:00:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 10:28:49 2026 by rpki-client