
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
File: m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json)
Hash identifier: 8X26AdQT7rdqQhsyUFOeYEoA70uRGDsRc3OrzCx6N8s=
Subject key identifier: 18:17:30:F8:0D:47:AD:84:59:50:19:6D:28:0C:DF:05:51:8B:4D:FC
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
Manifest number: 0C9A
Signing time: Sun 20 Sep 2026 19:49:18 +0000
Manifest this update: Sun 20 Sep 2026 19:49:17 +0000
Manifest next update: Sun 27 Sep 2026 19:49:17 +0000
Files and hashes: 1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: ITbzpJR0GaRqikakkmbUlY6xQm4Mm2eZjh6Hsur5Eyk=)
2: 048E963C92B611F0841D2F21C4F9AE02.roa (hash: f/D6SaNk7dFHnWpFP9ZlB7z7YG6qMADD7jIZSrlkNeI=)
3: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: LF2bKi2VQJjX8hqIZIkNiAJIYK/BhThU4HGuIaSHpaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Validity
Not Before: Sep 20 19:49:17 2026 GMT
Not After : Sep 27 19:49:17 2026 GMT
Subject: CN=6ab038be-461a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:ab:05:84:49:ca:c7:7d:32:35:9a:cd:4d:
75:f2:6a:fc:e1:99:4e:e5:44:3f:f8:19:ed:97:07:
0b:e8:33:47:6a:15:64:d5:13:e1:a4:70:d0:d9:93:
90:47:dd:a9:bc:ff:e8:a0:67:a0:f9:0a:47:f9:7a:
92:a7:d7:94:85:2e:f8:50:c5:02:80:75:6d:c2:ef:
50:c0:b3:f6:2d:ec:12:ed:6d:34:94:1d:4b:53:0e:
7e:25:6a:13:f9:b3:9e:e5:ea:a7:11:a1:a6:77:84:
78:50:07:90:2e:89:35:df:38:68:18:cd:67:7e:19:
95:c8:12:eb:97:8c:99:dc:1d:43:43:50:e4:2b:4e:
62:ca:38:7c:4c:49:e9:01:8a:4f:8d:10:c9:18:51:
34:4c:e6:69:6f:70:86:38:88:bb:93:c0:93:5a:0e:
63:9f:4a:90:c5:aa:6f:74:c9:b9:b7:33:c2:21:f3:
d9:81:34:3f:de:ea:4c:b8:ea:10:be:50:53:86:95:
69:fb:3c:68:a5:a1:1e:f2:db:2a:0b:03:43:26:07:
da:b8:bc:f2:e3:b6:11:d2:9d:ee:9a:61:fa:22:e1:
2d:7d:94:85:fb:eb:de:e4:9d:e6:05:76:ae:34:a4:
ed:33:7d:43:e7:29:c9:8a:25:8e:cb:ca:34:ff:59:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:17:30:F8:0D:47:AD:84:59:50:19:6D:28:0C:DF:05:51:8B:4D:FC
X509v3 Authority Key Identifier:
keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f7:18:07:c4:80:63:03:e2:6b:77:92:21:a8:9e:35:54:b4:
dd:9c:af:ef:d9:d2:8c:42:c7:a3:c6:90:69:86:e4:52:03:79:
78:9b:cf:b2:ac:40:d5:61:fc:a2:75:fa:6d:e7:65:10:8f:7f:
b5:58:a0:89:14:b1:27:3d:04:c9:0c:0d:dc:9d:9c:35:67:e0:
4a:e9:b9:e2:70:fd:41:8b:d5:cb:4f:76:fc:4f:2a:2c:8a:9d:
9f:9d:82:0e:40:f1:33:d1:fc:4c:79:19:d6:c4:c3:48:98:3b:
7f:4a:50:bf:14:0c:a3:5a:18:9d:a5:2f:8f:46:8a:2a:17:44:
3f:f6:a5:b2:46:84:85:af:59:a1:b6:cc:05:de:c7:4a:6c:d0:
cb:b4:f8:8c:af:bf:f7:c5:06:0a:84:f3:73:ed:ca:77:78:86:
e8:a5:14:e6:3f:14:cc:0d:ed:95:55:48:fe:83:83:ab:8e:87:
20:d2:9b:57:5a:09:51:cc:aa:88:ba:df:42:c0:ae:73:c8:d0:
51:5e:5b:9d:6c:be:f8:6a:50:9d:95:99:29:cd:da:0e:88:47:
52:f9:54:8e:01:cb:5f:f5:8d:6e:65:ef:1c:16:ee:4a:78:28:
0d:b2:c6:2c:80:04:44:94:06:65:0e:df:ec:bb:56:9e:ab:0b:
f4:90:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:23:16 2026 by rpki-client