
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json)
Hash identifier: 76iGYTt/SgkJUsrTTpgAfynhjuQfh2NQNuz1SAMaKk0=
Subject key identifier: 2C:41:35:20:71:6B:F8:FA:5B:B6:F9:CA:AA:00:92:72:7C:F9:0A:22
Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF
Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
Certificate serial: 0183
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
Manifest number: 0183
Signing time: Mon 21 Sep 2026 04:35:47 +0000
Manifest this update: Mon 21 Sep 2026 04:35:46 +0000
Manifest next update: Mon 28 Sep 2026 04:35:46 +0000
Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: uGX8RQner0lgq0cU/dpE2XrLbDRGtbsCmbtQC8jS1iM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl
rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
Validity
Not Before: Sep 21 04:35:46 2026 GMT
Not After : Sep 28 04:35:46 2026 GMT
Subject: CN=6ab0b423-1e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:e6:4e:32:1d:99:c7:ce:94:fe:d6:14:d2:
d2:45:7a:1b:eb:30:67:63:c3:13:02:51:46:2a:05:
2a:d9:07:d5:d7:e3:fc:6b:a1:e4:10:d9:4d:a7:19:
5f:ee:94:b0:24:7b:06:86:55:7d:71:b4:af:e9:af:
7f:55:1f:0e:d3:70:88:3e:5f:f5:50:be:b0:30:39:
6d:93:27:7d:36:6b:89:f5:3c:52:f6:04:44:4a:8a:
7c:81:46:f1:38:ae:f8:12:f0:5b:4f:a5:f4:99:7b:
cf:11:1d:e8:86:df:07:7e:0c:93:fd:09:fb:81:17:
d1:ab:86:0f:77:cb:63:c6:88:59:d6:74:6a:a4:41:
f1:7a:67:53:d3:f0:5f:11:04:f8:78:e6:d7:e4:4c:
c3:91:97:0f:99:d3:cf:49:09:5e:67:27:81:70:57:
ce:05:43:45:e3:a9:d4:1e:12:f8:89:59:17:75:83:
a4:f2:a4:e6:be:47:4e:9a:b0:53:14:69:a4:71:67:
16:c3:29:57:a5:5b:9d:b3:46:0e:d6:c6:ef:65:2b:
a8:56:76:05:a4:85:54:bf:79:ba:15:d8:4d:0a:d9:
e6:7b:97:33:fc:9a:7b:4e:42:0c:49:ae:2a:86:71:
4e:2e:aa:9c:41:8f:17:3c:9f:43:32:ab:f6:d9:57:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:35:20:71:6B:F8:FA:5B:B6:F9:CA:AA:00:92:72:7C:F9:0A:22
X509v3 Authority Key Identifier:
keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:38:68:6c:e0:5c:2e:08:6d:55:08:a4:be:60:22:f8:3e:a4:
f7:a5:52:70:6c:ae:cf:3d:12:e7:73:66:df:3c:20:32:ca:d4:
07:da:d9:f4:44:72:28:cd:90:72:6f:de:ae:d0:87:42:04:8f:
1b:5c:a7:66:cc:a0:dd:a2:a0:13:c7:03:87:ad:55:0a:45:0f:
e1:e6:e4:b2:0e:2c:fa:4a:87:1b:b7:a8:d9:41:e1:88:3d:6e:
99:66:ee:5a:bb:80:1f:7b:06:94:e6:1f:05:c2:2b:de:62:e5:
14:f2:2c:28:79:fb:9a:a6:13:b5:b0:df:7c:d2:97:60:d9:c9:
03:3c:74:f1:60:7a:dc:5e:93:3c:c2:66:af:1e:78:22:c4:46:
d8:b0:ab:a6:33:bf:07:94:23:57:cf:94:2f:05:ca:6a:75:b2:
a9:a0:94:bb:76:00:3c:da:b6:42:af:78:5b:63:f6:35:f8:2d:
3c:42:a3:fe:3f:b9:43:01:72:33:b6:d6:c3:40:53:55:fd:81:
c9:8a:b8:07:6d:45:6e:1e:2a:5d:5e:ac:d3:af:19:99:cf:58:
30:e0:00:e8:51:93:78:6e:26:01:af:0a:5f:4a:b3:98:74:1d:
2c:0c:b1:94:f5:8e:58:e5:68:fe:4a:23:df:ec:34:b2:3d:b1:
4b:d7:f5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:58:31 2026 by rpki-client