
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
File: aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft (raw, json)
Hash identifier: Js0MNlZe75S4XRWnVtzQekEZDa66wpbITo1z6t6c/6Y=
Subject key identifier: 47:BE:5D:6D:28:5A:7C:98:48:B5:50:F4:A3:29:9E:E5:CD:37:63:D0
Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98
Certificate issuer: /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98
Certificate serial: 080C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
Manifest number: 0804
Signing time: Tue 22 Sep 2026 21:00:13 +0000
Manifest this update: Tue 22 Sep 2026 21:00:12 +0000
Manifest next update: Tue 29 Sep 2026 21:00:12 +0000
Files and hashes: 1: aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl (hash: CI7gCFQpS66LbgcGHCX9fcDThIaI+0nummU6rpstExQ=)
2: DE524D283F0511EBBB4C174FC4F9AE02.roa (hash: it4vcFbKLmTJCt2q1TtUbEDLsD8jVRyUqj9yP9gE96M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl
rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BEE, serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98
Validity
Not Before: Sep 22 21:00:12 2026 GMT
Not After : Sep 29 21:00:12 2026 GMT
Subject: CN=6ab2ec5d-8b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:64:f7:69:28:58:0c:08:d9:7e:db:59:d9:
c6:da:e6:34:ff:c7:3e:80:5e:2f:f3:52:d7:68:21:
29:01:66:0f:34:fe:ea:7a:56:23:54:a7:3f:72:bc:
84:29:c1:d0:6a:7a:72:54:7b:b8:15:f1:6d:d3:ec:
74:a3:fe:b4:fa:6d:ca:5f:2b:2d:09:d9:1a:7d:97:
69:96:1c:19:fc:6c:db:0a:0f:e3:c6:61:bd:a2:62:
f5:1f:08:f5:a3:07:b6:44:8e:2e:19:3b:07:64:98:
be:03:01:83:47:fc:49:57:87:2b:f0:76:35:3b:47:
a2:09:8d:41:08:ac:55:2e:26:5a:3b:51:4d:64:0e:
a9:8c:1c:99:6c:3b:eb:26:fd:62:c8:4e:ce:29:49:
f0:5d:e8:55:1f:1f:ab:27:5d:d1:16:ab:d3:db:09:
5f:b7:ee:9a:c1:5b:68:ab:2e:c3:d0:72:9e:04:21:
f0:d8:8d:8a:04:94:2d:fd:83:46:61:78:f7:19:f2:
1a:65:0c:e7:3c:4f:d6:90:8e:50:0a:35:d5:eb:91:
d2:84:9b:48:91:41:a0:6b:9d:25:2f:c5:ed:c8:a0:
29:93:62:4c:9d:30:03:5f:94:44:6f:3e:0c:cf:92:
11:2e:99:80:f9:20:98:16:a6:cf:86:df:6c:7f:54:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BE:5D:6D:28:5A:7C:98:48:B5:50:F4:A3:29:9E:E5:CD:37:63:D0
X509v3 Authority Key Identifier:
keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:14:80:99:cf:e8:3c:3b:3b:d2:60:bd:56:04:cf:9e:bb:
ad:1f:32:0a:23:8e:47:2b:1e:0e:f0:1f:3c:95:94:fb:1b:e1:
c6:96:eb:d2:e5:07:b2:ae:95:ee:6b:c7:cb:e2:be:b8:44:8b:
5d:ac:58:d7:9a:ad:02:87:3c:4f:72:08:90:59:95:d2:70:54:
95:ff:e7:e5:44:ba:70:04:8e:df:47:b2:79:e2:2a:5b:ec:93:
78:ca:28:a2:bd:e7:76:ca:54:82:aa:14:30:0c:1a:8b:41:da:
85:7b:92:be:3e:11:e5:c0:b5:91:72:d1:6a:a7:a5:ff:2b:76:
db:d9:6c:76:6b:c6:37:d3:1f:a9:bc:4a:67:ae:82:bc:5e:80:
84:0c:8e:59:ec:49:2b:b7:b0:bc:f9:de:b0:85:89:52:68:ab:
50:e6:c4:99:07:56:67:3e:64:da:1d:09:00:58:81:3e:35:93:
94:ec:4e:c3:db:98:9d:65:29:87:b0:c6:63:68:8e:d3:0a:1d:
80:ef:5b:d7:e6:59:49:71:22:40:95:5d:c4:3d:ea:bb:a9:d7:
92:a0:99:87:a6:2b:ae:4a:a4:cb:8c:c3:d4:a6:ca:be:5f:aa:
49:27:72:8b:4d:bf:0c:10:92:b6:61:74:3b:17:d5:c2:d3:f8:
ee:06:b6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:34:54 2026 by rpki-client