
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json)
Hash identifier: DKRAredCiqA6bpdi89r0p+POGsJIClCmKGmFnYOu5Xs=
Subject key identifier: 89:02:8A:94:4A:07:32:23:17:88:AD:C3:6C:A3:E8:4E:CB:65:73:90
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial: 043A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
Manifest number: 0433
Signing time: Mon 21 Sep 2026 00:03:48 +0000
Manifest this update: Mon 21 Sep 2026 00:03:47 +0000
Manifest next update: Mon 28 Sep 2026 00:03:47 +0000
Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: ffVu+GqXfcjT1wUkRpM0ZBrZXJ9gKXEC7khh15H9lfc=)
2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: acpBj/fZ/lNO+jE72RL9W85WiLHEc7BOknabYLCBTPc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082 (0x43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Validity
Not Before: Sep 21 00:03:47 2026 GMT
Not After : Sep 28 00:03:47 2026 GMT
Subject: CN=6ab07464-a0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:b3:e2:91:5c:43:6d:3e:2c:7f:76:7f:64:
01:5d:02:b3:9f:db:0f:96:2e:ce:ae:63:9c:42:db:
97:06:f4:11:cf:c4:6c:15:03:5d:43:5a:ef:a3:e6:
44:f1:2a:b2:cf:ea:5a:8a:e8:3b:3a:8b:52:85:8f:
61:cd:1a:fc:d6:8f:67:4b:6a:e0:8c:65:3a:26:5c:
5f:37:e3:c4:61:de:63:6d:c3:c8:ab:78:c5:90:f6:
88:7e:07:64:a3:7c:dc:49:9b:a8:04:bb:54:7c:8d:
8c:3a:d4:f4:65:94:1e:63:61:93:ef:43:3d:42:20:
14:3e:a8:63:46:2b:78:c9:75:87:98:e6:70:a1:b0:
3a:34:88:b8:42:a9:82:13:4f:24:81:6b:8f:d8:c0:
19:36:0d:34:09:70:8e:be:0e:50:8c:de:cd:7d:2b:
94:90:da:2d:fe:26:80:e0:93:02:7d:b2:87:ba:7b:
c9:64:f4:99:3e:d8:18:eb:49:4f:9c:c1:59:3e:f2:
cc:5b:99:14:f8:65:3f:88:44:04:1d:c2:b5:33:4a:
8d:f3:3a:77:1c:49:3e:f4:36:27:c9:ad:b0:c9:9f:
5e:d0:da:a9:68:14:eb:2e:22:75:9f:24:7c:ca:00:
00:74:4b:7c:cc:8e:1c:b1:ff:4e:03:71:e2:58:cd:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:02:8A:94:4A:07:32:23:17:88:AD:C3:6C:A3:E8:4E:CB:65:73:90
X509v3 Authority Key Identifier:
keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bf:62:dd:dc:8d:ad:51:8e:70:f4:ed:04:40:03:ac:ee:c6:
b8:a6:91:05:55:41:4c:f8:d7:9a:34:3f:2c:65:a7:58:73:96:
85:d3:28:4f:e2:d7:12:bf:92:67:f1:ec:2c:f5:86:9b:26:da:
a1:7c:4b:4a:c7:b8:9a:50:a8:f7:60:7c:bf:f2:11:3c:4e:21:
6f:e9:2d:9a:97:b0:cc:92:51:55:be:6c:a3:56:b1:f4:c1:40:
91:74:49:0d:81:f6:36:85:da:a0:68:ff:36:d0:75:3a:f1:04:
89:b0:6d:f4:f9:e4:9e:4b:d0:8e:3c:13:ca:81:71:42:e0:ae:
28:30:a7:da:26:a8:6b:06:39:37:8c:72:f6:8f:51:36:60:65:
1c:3d:a5:50:0f:0a:49:26:ee:d4:ca:c1:9e:ce:a6:c4:f4:e1:
f2:b1:d0:e3:b9:71:a9:ef:18:d7:5f:9a:18:1e:66:52:60:dd:
56:6f:00:a0:c2:24:15:87:de:96:25:7b:3e:69:11:cc:b4:17:
b9:fb:41:21:39:43:64:56:09:08:58:ba:6e:f2:38:be:e4:e1:
60:52:a1:d9:38:a4:14:6f:c4:65:1b:5f:b4:ad:bf:7e:4b:f9:
5e:0b:cc:89:fa:f8:b3:52:17:9b:d4:18:11:3a:c1:34:57:3e:
38:56:03:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:36:33 2026 by rpki-client