
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
File: 60yRrrkBmKp9PHgiHY4Ytwdd77k.mft (raw, json)
Hash identifier: 5NJPyWdcdsKOLuXUb8itvgznW7oI72DQvhqJHnlWcgQ=
Subject key identifier: 24:D3:8B:67:B0:94:A3:53:F2:29:54:B9:03:83:A2:E7:19:21:06:16
Authority key identifier: EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
Certificate issuer: /CN=A91D0F0F/serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
Manifest number: E2
Signing time: Mon 21 Sep 2026 06:30:57 +0000
Manifest this update: Mon 21 Sep 2026 06:30:56 +0000
Manifest next update: Mon 28 Sep 2026 06:30:56 +0000
Files and hashes: 1: 60yRrrkBmKp9PHgiHY4Ytwdd77k.crl (hash: bHaxXAyzy0eV4SFEBhWWGT/mKV6pWve8SyysJRs1k8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl
rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0F0F, serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
Validity
Not Before: Sep 21 06:30:56 2026 GMT
Not After : Sep 28 06:30:56 2026 GMT
Subject: CN=6ab0cf21-35b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:29:a3:e6:4f:b8:46:3e:35:5f:76:dd:a3:
e1:34:ba:d8:07:e3:53:ea:0b:1d:b0:78:9a:e7:27:
e4:2e:fb:d5:31:c1:fa:78:4b:e9:aa:eb:4c:75:c7:
19:cf:14:3f:18:5d:bb:78:b0:38:dd:5f:96:1d:bc:
8f:03:f3:fd:dc:b0:2d:c2:2a:73:91:99:f2:f8:c5:
e2:a2:00:4a:30:37:ea:25:8a:af:5d:22:ef:54:be:
56:ab:f7:0d:d6:16:32:36:01:b7:0b:a2:d8:24:e6:
19:39:f1:75:3f:f3:3b:95:ec:af:54:99:14:3c:aa:
5d:9b:2e:27:c6:ad:eb:8a:75:65:2f:7e:89:93:66:
70:5a:96:ca:92:45:ad:11:6c:f5:6c:0e:5b:24:45:
7e:2f:bb:9a:ab:3a:5a:f0:b7:03:01:35:a0:3d:2d:
fa:83:17:6b:e5:55:fe:f5:c4:20:5c:69:38:20:f5:
71:45:ae:8d:1f:62:30:62:9a:47:18:66:70:81:04:
d1:cb:62:64:de:06:72:f2:4f:da:ff:7d:16:fb:f1:
89:da:b0:ea:c8:49:d1:82:66:de:b7:30:f2:b4:66:
e5:88:d1:fd:bc:41:2c:e0:c8:a2:83:2d:0e:5a:94:
02:00:93:56:9f:39:32:f5:66:37:b6:86:d9:75:1b:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D3:8B:67:B0:94:A3:53:F2:29:54:B9:03:83:A2:E7:19:21:06:16
X509v3 Authority Key Identifier:
keyid:EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:89:dd:05:e1:76:5a:fc:2b:27:ec:f5:64:00:4f:a6:4c:0d:
3f:e3:f1:61:0d:c1:21:f8:b0:5d:db:0c:5e:b0:8f:7d:a7:97:
f2:f7:a6:9c:db:36:b9:11:cd:79:4c:57:77:23:3c:51:99:d3:
7e:56:7a:f0:78:47:4c:04:60:12:c5:9a:4f:41:69:17:9b:10:
1e:9f:4c:8d:87:45:a3:fe:1e:70:b0:ed:26:86:a9:2c:38:80:
e1:ab:b0:a7:67:d5:e3:ae:f9:14:1a:96:e9:d5:4e:a6:e4:64:
ef:7d:99:f2:40:a0:5f:d0:20:b0:a3:51:1f:05:e4:20:32:53:
56:d5:3c:ac:ee:dc:e0:67:f4:77:36:bd:e6:a0:2c:6f:d2:70:
64:b5:ae:0e:03:97:79:c0:ae:f7:ea:98:c3:d2:d2:7b:a4:46:
a5:81:f2:67:e1:06:e7:34:1a:45:af:c7:20:78:c3:76:48:ed:
e2:74:15:f7:41:ef:77:b4:75:b4:6d:a0:07:a2:8b:19:93:27:
e8:41:02:8f:7c:f7:de:d5:70:27:74:89:ac:ea:1e:86:ab:32:
d5:ff:9e:3a:70:28:90:f2:b6:7d:49:ae:b8:dc:7a:70:f2:15:
c1:9f:3c:4b:58:2d:d5:6c:16:87:d8:7e:97:d6:96:f9:03:18:
c9:7c:8a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:45:04 2026 by rpki-client