
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json)
Hash identifier: bAIg+B2g17JJImcdF/sJxt1L5x3dyZ4DOcOj44rcypU=
Subject key identifier: 5B:5B:D1:C2:84:A5:7F:9E:D2:D7:EB:3E:6A:72:00:DB:CE:D6:08:54
Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Certificate serial: 05EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
Manifest number: 05D7
Signing time: Sun 20 Sep 2026 22:53:31 +0000
Manifest this update: Sun 20 Sep 2026 22:53:31 +0000
Manifest next update: Sun 27 Sep 2026 22:53:31 +0000
Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: TpsdYMO7FRsY5tZV8PGkEG8J1Jn8/Z98Xdr1ojZIFng=)
2: sqGj_F7T0xSvuoydrD7DOYOYmL4.asa (hash: WjE8a7bssxFoeRxVqoTfMjV9rANOzfHTYw3K71/tV5E=)
3: E66070EE36F911F0B0111510C4F9AE02.roa (hash: KwF38ZBP8Utf4qS1kbQsJebYoDtue89xp1vHyUdKSU0=)
4: Sfnoau1p4nQyCYhdbS1yqwztDEs.asa (hash: oeHwimBa5repKOUMjgvQtcXZEIdBswSyYd5r0iIeCns=)
5: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: nMAueD71AbMo3NTxzg/tId7Satepp1btvdBVnm0IwvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl
rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1516 (0x5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Validity
Not Before: Sep 20 22:53:31 2026 GMT
Not After : Sep 27 22:53:31 2026 GMT
Subject: CN=6ab063eb-dd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:df:e5:fb:71:2f:f6:01:6a:ad:d6:95:5a:a9:
37:62:e7:b1:64:eb:52:5c:11:b8:5d:9e:14:6b:89:
33:cf:df:17:76:a1:d5:23:dd:5e:c3:b5:73:a6:79:
24:c8:5c:2f:4e:57:97:ff:e8:78:e8:d3:99:3a:fc:
7e:de:56:8f:fb:05:4d:42:1b:7f:cb:d8:a8:8c:a3:
c1:92:90:d6:c1:8a:f5:66:5c:74:77:af:12:07:52:
da:49:2a:ca:c6:16:66:c5:7b:ea:78:ed:dd:b8:a8:
ba:f2:9e:a5:b9:a0:6d:78:8e:3a:2d:61:6a:42:09:
f6:c7:48:b1:a0:dd:f4:58:68:97:f7:da:7d:eb:f6:
83:21:93:1e:6d:be:53:3a:0a:3c:f8:3c:eb:49:67:
2b:a5:b5:ea:5d:7c:41:2d:12:50:9f:aa:3c:dc:ea:
9a:ec:da:ed:78:c6:e6:6d:60:d8:95:db:e5:85:52:
56:4c:b7:98:67:53:bc:9f:fd:9c:2a:c7:fe:43:72:
44:73:d2:bb:d3:25:26:73:94:31:66:d1:06:10:67:
8e:ce:56:0a:3e:26:84:3b:28:8f:fa:a2:e8:e8:04:
d8:ad:7c:ff:72:26:a5:c5:6f:16:82:b1:62:8c:f1:
7a:4c:a7:c7:93:f4:34:f0:f7:04:22:3e:21:af:4b:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:D1:C2:84:A5:7F:9E:D2:D7:EB:3E:6A:72:00:DB:CE:D6:08:54
X509v3 Authority Key Identifier:
keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:25:fa:d8:39:94:1d:fb:a9:ec:b0:cd:68:d6:3c:5e:cf:f2:
0c:8c:77:57:2a:c3:ae:ae:9c:45:84:fa:08:29:ab:54:7b:42:
50:ab:23:d9:76:fe:f7:81:57:5b:57:ac:95:25:01:b8:35:45:
d0:7c:08:62:31:d7:da:b2:c5:a9:80:66:2a:97:1e:60:2c:b1:
ac:f5:2c:78:4f:77:96:93:26:19:10:c4:a0:c6:fb:6b:8a:48:
08:2c:f6:0d:dc:4c:34:92:2d:69:94:af:d4:47:4d:a4:5d:2f:
96:73:df:53:23:6d:19:20:7f:01:c5:91:4d:98:ac:df:fb:5a:
3f:af:71:16:b7:f8:f6:a7:a2:d5:47:3d:a6:58:fe:76:d4:15:
dd:29:0d:68:ac:80:fd:d2:c2:44:17:ab:3a:b9:c7:20:71:4d:
77:82:7c:ff:1a:84:83:28:22:ab:f0:81:a3:05:65:68:5e:47:
3e:09:f6:04:0d:1d:34:67:07:af:cc:52:49:8c:e1:62:20:be:
4c:b3:46:2f:58:c5:14:8f:a9:e5:5c:40:72:04:ff:be:05:61:
8a:a9:5f:ca:ff:25:9d:44:69:43:16:1f:ad:14:9f:b6:d5:bc:
cd:05:92:dd:df:41:fe:c9:31:5e:6e:44:ab:03:29:ed:5b:53:
a0:c8:92:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:03:17 2026 by rpki-client