
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json)
Hash identifier: /JkLYmHb9r3JoxGSHh0FQ13YIY2cavnaGNsxHVWJaUE=
Subject key identifier: B7:31:ED:92:44:EE:8B:26:88:0F:D5:39:77:2C:DC:90:D7:14:09:90
Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Certificate serial: 09B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
Manifest number: 09AC
Signing time: Mon 12 Oct 2026 20:05:41 +0000
Manifest this update: Mon 12 Oct 2026 20:05:40 +0000
Manifest next update: Mon 19 Oct 2026 20:05:40 +0000
Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: FtzxwJ5YUVrNELMKW6dJpeoSS1mRUjB0K3nfqcDreOQ=)
2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: K8ifKpf1OxSentj2ShFOfGXT/u0aCJtaC2BhvsjDEzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Validity
Not Before: Oct 12 20:05:40 2026 GMT
Not After : Oct 19 20:05:40 2026 GMT
Subject: CN=6acd3d94-d2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:64:06:3b:fc:98:ac:29:1d:09:fa:af:d2:
6b:ce:08:9c:6c:ff:b8:3a:4d:80:80:05:23:08:e0:
71:e3:99:93:24:a1:31:c4:5b:f4:59:62:94:4a:a2:
97:8e:bb:4c:84:1a:55:27:a6:be:8a:62:2a:97:d6:
05:73:df:37:5a:c7:28:bc:74:05:dc:eb:a2:2a:af:
0d:c2:44:bd:b9:44:1f:62:ab:e9:99:a8:70:77:1b:
56:ae:fd:ee:eb:e0:58:7b:ce:be:5d:9a:7e:c2:fe:
b7:f1:3f:00:c4:7a:7e:eb:8e:64:ff:1e:81:09:1d:
40:51:3e:39:4b:e4:18:cb:63:27:e4:7d:4a:e3:c3:
cd:41:d4:91:5e:37:1a:c2:7b:5a:6d:b8:5b:3a:60:
62:b7:7a:e1:94:2b:c7:8d:f8:53:72:b7:a8:7f:60:
95:e0:06:de:10:33:81:93:90:74:de:81:98:56:95:
6c:5d:8a:70:10:3d:89:70:db:fd:14:21:83:6d:c8:
02:9d:55:b9:0d:99:05:ed:0d:f9:84:a1:3b:a6:51:
47:85:10:b2:67:6d:8d:28:98:ae:93:ec:0b:66:dc:
20:98:68:3e:38:49:a8:9e:de:dd:27:92:99:d9:b1:
6a:3e:d6:64:aa:7d:5a:f6:e1:b9:b2:49:4f:41:63:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:31:ED:92:44:EE:8B:26:88:0F:D5:39:77:2C:DC:90:D7:14:09:90
X509v3 Authority Key Identifier:
keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:44:4b:38:f1:c1:f4:19:c9:52:38:9e:7b:3b:06:be:37:f5:
3c:4c:47:f5:59:e0:b6:ff:32:ee:06:ee:8a:ce:9a:81:65:10:
1d:30:63:f5:a5:7a:47:ee:8a:50:38:85:d7:25:71:5e:32:eb:
e5:2c:39:c0:62:6c:ea:ba:6b:92:09:20:0a:28:76:5e:d2:7b:
76:07:84:7f:0a:8b:a6:04:c8:49:bb:6c:b9:b6:a2:b8:2e:b0:
71:b0:ad:60:43:f3:80:08:34:1e:0d:41:c9:b2:ec:09:5d:69:
8c:04:0b:f9:c4:f0:ad:a5:72:2b:1e:35:b6:8e:2e:59:39:58:
f6:08:09:4f:f6:9b:77:cc:75:4f:62:0f:5e:a7:9e:4f:64:e0:
c3:70:64:00:82:90:ef:18:9a:ad:67:ec:ba:4b:29:83:76:8e:
e6:cb:a9:ca:e9:f6:a9:77:90:64:6f:7c:94:ee:9f:9c:5b:1c:
e4:01:66:8b:f2:bf:37:74:91:e9:3f:7f:b9:dd:0d:d9:17:95:
bc:52:2c:61:76:8f:f8:8f:63:6e:32:b0:c0:32:24:79:be:41:
c6:6e:ab:7d:58:38:63:f3:ed:e5:4b:9b:95:f5:3f:40:58:db:
dc:2e:05:25:68:f4:db:7c:ea:4b:9e:23:05:10:87:5f:f9:f2:
5a:71:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:43:50 2026 by rpki-client