
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json)
Hash identifier: 0bvoSpUJUgD4Jy9TdSVXXYy5i6bQOg8rZBt5EtjDPJk=
Subject key identifier: D2:05:D2:6D:D2:99:24:6B:76:30:72:96:29:01:82:C6:3C:F6:9C:1E
Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D
Certificate serial: 0913
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
Manifest number: 0CFA
Signing time: Tue 06 Oct 2026 20:21:28 +0000
Manifest this update: Tue 06 Oct 2026 20:21:27 +0000
Manifest next update: Tue 13 Oct 2026 20:21:27 +0000
Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: 3nOsMoivJbqO4sBju6XYiCXr9thGeub30Fn18VAj7iI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl
rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D
Validity
Not Before: Oct 6 20:21:27 2026 GMT
Not After : Oct 13 20:21:27 2026 GMT
Subject: CN=6ac55848-a8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:d8:59:c3:08:27:80:65:a7:d4:9b:f1:57:
97:24:eb:fa:0d:51:ed:7c:2f:49:1d:83:f1:97:f0:
f2:b8:9b:c9:04:ce:aa:04:e7:e8:ac:19:ad:79:e9:
3e:ca:82:37:65:c0:f9:37:d7:4d:b6:df:40:f0:4e:
87:c4:b2:dd:4d:f2:62:f2:57:61:ac:35:71:13:50:
5c:08:76:e3:b9:62:f0:0d:07:be:df:9d:0b:01:7a:
c7:4a:c3:bc:a5:b6:35:2b:d6:f0:e7:66:8b:08:9a:
4e:c1:ad:ee:49:e9:74:ba:24:06:ac:ba:37:a4:3e:
c3:fa:ea:42:a1:11:00:81:f9:16:3e:67:dd:6a:f8:
8e:b8:a2:18:59:e4:29:67:30:c3:5f:db:df:cf:3c:
74:3f:5d:da:85:5f:be:32:52:00:7a:00:13:06:6a:
bf:81:09:dc:3e:f1:bb:b6:f3:6d:38:51:d3:48:84:
3a:2c:da:dc:db:bf:56:e5:bd:5a:d6:51:bf:89:21:
f6:b1:a3:98:97:73:e5:91:af:32:e4:d1:91:ed:ca:
77:1b:3c:0d:41:e8:ae:58:7a:73:7d:2a:ab:cd:e2:
93:d3:8a:0a:f9:ef:10:fe:57:4b:1c:5f:7d:33:c1:
ad:9f:b4:65:ef:c1:b9:13:e4:e5:e8:67:8a:fa:55:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:D2:6D:D2:99:24:6B:76:30:72:96:29:01:82:C6:3C:F6:9C:1E
X509v3 Authority Key Identifier:
keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:1d:d6:51:cd:8e:39:55:73:6d:11:f5:e8:1a:8b:5d:e4:c9:
03:20:c7:b1:14:a3:e4:b3:fc:5a:9c:89:f0:78:84:31:9f:1e:
22:32:cd:7e:d8:ff:9b:4c:91:a6:83:56:f7:ff:29:99:b8:c8:
d4:6c:46:d0:4f:d0:0e:9d:f5:ec:7b:7e:a4:31:cf:e3:0d:8c:
6a:62:43:b6:cf:c2:ae:8f:27:a3:0f:af:02:a1:0e:b6:1c:cc:
1a:6e:23:5f:ad:43:e9:4b:cd:b1:20:41:d1:87:4b:67:bd:67:
b5:79:bc:7e:c6:6c:e2:98:61:68:2c:70:de:4d:b8:47:60:88:
a2:9b:17:1a:35:13:2b:71:57:03:89:ff:b6:05:de:72:84:13:
56:3d:94:ef:19:07:0c:25:07:02:34:56:e1:50:ef:38:fd:ee:
95:9c:12:a6:a6:10:e7:c8:ef:3e:5e:ac:ca:ee:90:f3:d9:de:
68:51:a9:fd:cb:d9:e7:f0:4b:b7:88:70:ca:c0:d5:10:b1:40:
5c:fe:aa:d0:0a:5f:d2:b4:2d:be:12:d3:75:1c:7b:71:89:d4:
67:02:09:44:73:d0:bc:1e:6b:7f:19:0f:1c:5d:d0:ae:28:82:
3c:30:40:ef:72:89:0a:39:10:d6:3d:ba:77:c3:2b:14:c4:bf:
e2:f7:c3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:48:14 2026 by rpki-client