
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json)
Hash identifier: vCS59RpjtVIQMnzea/3FfoAt5xM3fdiUIAl8i/bBPg4=
Subject key identifier: 94:F8:CB:F0:62:1B:CD:60:91:28:A5:9C:13:E0:31:77:7C:59:61:1E
Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
Manifest number: 019C
Signing time: Mon 21 Sep 2026 04:18:15 +0000
Manifest this update: Mon 21 Sep 2026 04:18:14 +0000
Manifest next update: Mon 28 Sep 2026 04:18:14 +0000
Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: sD9gN8dOkmaUDC3PkkDKZ3BkOueYklOGBNtyux8qmMQ=)
2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: RzM5XYHpAe7uWEPFy0Uicf76LJbJuN++zhp1wy8rKjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Validity
Not Before: Sep 21 04:18:14 2026 GMT
Not After : Sep 28 04:18:14 2026 GMT
Subject: CN=6ab0b007-b500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:96:a2:b2:1c:c2:a8:fd:9f:b8:b2:9f:39:
8d:4a:c3:40:72:46:d0:0b:e4:7d:25:38:22:bd:1e:
8e:a7:08:02:3d:16:6e:19:03:ce:4e:ba:6a:3f:79:
28:0c:dd:2e:c1:61:20:07:58:f4:a0:74:d1:81:cb:
80:cf:fc:a7:0c:0c:80:fc:98:9f:08:a5:f7:ec:54:
cb:be:c6:ac:45:f2:d8:20:b8:2c:9c:e5:ad:b6:da:
d8:d0:78:5e:d5:77:8d:96:51:32:1e:45:b2:5d:3a:
a0:56:d8:bb:ce:f9:d7:0d:dc:92:b8:17:5e:67:31:
9b:09:80:be:79:8c:39:ac:4f:74:2c:79:c7:2d:1f:
20:3c:88:3e:4b:d1:e4:83:38:b2:8f:a2:59:0c:ad:
8d:cd:3a:5b:01:61:86:23:97:ce:20:80:11:7d:b5:
88:76:5a:94:48:4c:3b:38:55:ed:48:43:ee:72:f8:
4e:0e:7a:ee:e5:21:07:e9:9a:92:0c:a9:6b:8d:dd:
12:b6:5f:8b:9f:88:5b:c7:97:94:c3:9c:01:c6:ab:
45:27:fb:2d:d7:df:2d:d4:8d:96:2c:0b:b3:c9:41:
f6:1f:e4:c3:d6:6d:50:20:6a:f0:92:45:cd:a4:5b:
a9:12:e7:e0:8c:69:e1:48:d9:95:54:ea:6e:60:4e:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:CB:F0:62:1B:CD:60:91:28:A5:9C:13:E0:31:77:7C:59:61:1E
X509v3 Authority Key Identifier:
keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:91:30:e1:75:fc:e7:b0:f4:1a:15:03:59:b3:be:f0:60:05:
90:ab:7e:0c:0a:06:ba:e2:b4:e0:65:12:4d:32:fc:b2:59:e2:
f5:72:92:2c:1e:b5:60:1a:51:cb:b1:92:be:6d:6d:57:4e:bb:
22:25:3e:6e:36:64:c8:44:56:3c:5b:ff:f7:14:96:ec:d1:b5:
a4:7e:16:9a:23:1f:72:31:b2:a2:44:f0:0b:05:b1:d5:a1:8e:
cf:07:79:0b:52:a9:88:56:c0:f9:49:8e:5e:a7:9a:0c:ff:a0:
0b:6f:52:7f:66:20:a0:67:d4:35:ee:e0:3d:89:c6:ee:6e:4c:
f1:ab:72:4c:ac:ce:4a:a2:dd:8b:4c:17:d5:8e:40:64:c0:40:
b3:84:22:d9:f0:fc:db:e8:86:54:8c:c8:4a:d5:2c:d6:fb:c8:
df:71:8f:46:fa:09:02:45:5b:b7:96:af:9b:19:b6:d5:e2:0f:
1a:d2:7f:18:20:53:ed:c5:52:9b:56:08:d5:32:87:d1:c5:f0:
5b:94:76:10:b6:df:20:2e:c6:5b:a7:e6:0c:2e:61:dd:99:45:
f1:03:cf:5c:2b:30:62:16:3c:97:3d:8e:67:fc:78:15:2f:e9:
33:7d:8f:0c:06:a2:db:d5:87:3e:f5:03:ae:07:c7:3c:ad:48:
49:d0:46:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:27:10 2026 by rpki-client