
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json)
Hash identifier: khUiTQKFcFFBeLCkS1h+h4QoweSjmBLD3YzCUmHgCmM=
Subject key identifier: 12:C2:25:02:AB:F8:33:1C:C1:39:A3:F2:F5:8A:8E:2F:58:0E:16:35
Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
Manifest number: 0132
Signing time: Mon 21 Sep 2026 05:37:38 +0000
Manifest this update: Mon 21 Sep 2026 05:37:37 +0000
Manifest next update: Mon 28 Sep 2026 05:37:37 +0000
Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: QLV7n/heW2yo2Nbb1AGWx1U4o+PIksKYqvDnKW863+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl
rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
Validity
Not Before: Sep 21 05:37:37 2026 GMT
Not After : Sep 28 05:37:37 2026 GMT
Subject: CN=6ab0c2a2-d7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:ce:9f:c0:bc:0c:bc:03:2a:fc:1f:07:ea:
36:77:9f:c5:c7:23:8c:61:37:7a:f1:53:9e:76:78:
44:5b:9a:2c:b3:ee:7a:dc:5f:b6:0a:9b:b2:cc:e8:
18:32:2c:40:12:de:76:1a:8d:28:56:1a:52:ed:0d:
da:88:22:07:0d:87:27:ce:59:d5:99:5e:04:2e:b1:
3d:1b:b2:70:66:d4:dd:44:37:b8:13:da:83:b7:e6:
ee:b6:7b:0f:2a:0b:45:67:1d:36:a3:a3:5a:78:d0:
05:81:fb:ab:4b:1e:2e:d1:5d:13:35:40:36:54:3a:
35:58:d5:75:58:15:03:c6:6f:ca:0a:42:ce:af:a3:
73:e1:50:5d:26:21:59:23:ae:c4:66:ca:b2:72:5b:
c0:87:54:2e:0a:b7:b1:62:8a:fb:3e:42:6a:0e:ff:
3f:0f:67:75:d5:40:1d:58:de:0a:f3:7a:d9:a6:a4:
4e:0f:3e:f9:d4:7a:f1:58:a6:ec:9c:61:7a:98:1f:
80:d1:2c:63:50:8e:46:3d:82:26:f9:f4:b6:55:ef:
0e:35:42:5f:65:40:e1:dd:a5:eb:2f:c9:da:b4:ab:
ba:1e:2a:f3:a7:ad:79:8e:09:69:dc:78:cb:79:28:
f7:b0:4b:02:d7:43:c4:28:d8:e5:4c:ed:f2:7b:83:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:25:02:AB:F8:33:1C:C1:39:A3:F2:F5:8A:8E:2F:58:0E:16:35
X509v3 Authority Key Identifier:
keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:5d:af:1e:ef:e5:dd:8b:49:05:7b:c2:e6:eb:b7:09:47:e7:
4e:65:ad:bb:5f:f6:4e:10:7a:17:ac:21:48:ac:c6:bd:d2:06:
4c:07:b2:c2:4e:e4:d7:08:be:a8:0b:a1:dd:a7:c5:44:a8:57:
48:87:eb:f0:54:13:02:73:b9:17:71:0e:87:f0:bc:6e:76:61:
8a:99:c5:cb:f5:6a:d0:50:e1:4b:bb:26:41:e5:d4:36:3a:24:
61:29:e4:39:9f:77:68:df:cd:6a:da:a6:30:f7:9b:b3:7f:46:
14:19:2b:01:97:72:9c:8a:0e:86:84:52:ba:4c:bb:6c:61:65:
fe:0e:39:e2:f9:67:af:ac:f4:26:a4:75:43:10:43:e9:c2:78:
3c:2e:5c:45:e9:88:b1:d3:d7:a5:16:61:82:07:3d:19:c4:f2:
cb:8a:28:e0:ee:59:24:50:1d:7d:83:a7:c6:e7:22:21:6a:bd:
b5:73:cb:28:f7:b9:65:96:38:51:99:6f:56:6b:70:33:ec:02:
07:4f:81:53:1f:4f:e1:cb:77:d7:6e:9b:62:2f:20:30:e1:0b:
a7:46:df:8b:f0:73:f9:81:d4:58:74:da:80:d6:0c:7b:c8:6b:
12:25:47:94:97:fc:18:3a:e5:b0:fa:30:04:6f:ac:58:12:67:
47:c8:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:50:30 2026 by rpki-client