
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft
File: 9ezJNiwdO3OCT11Cma2_q0r4TY0.mft (raw, json)
Hash identifier: v4AtEQAsx8J9y1wHvNlOzp//xb4Gi46BnDWnx8g3tQ0=
Subject key identifier: 13:C4:AB:EB:02:82:B9:F9:7E:74:05:A5:6D:D4:3B:60:F5:C8:7C:B5
Authority key identifier: F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D
Certificate issuer: /CN=A91D2432/serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft
Manifest number: 2E
Signing time: Fri 25 Sep 2026 08:57:05 +0000
Manifest this update: Fri 25 Sep 2026 08:57:05 +0000
Manifest next update: Fri 02 Oct 2026 08:57:05 +0000
Files and hashes: 1: 9ezJNiwdO3OCT11Cma2_q0r4TY0.crl (hash: coSkVcnUmDD4cT91CbRhMC8R0kA8XZSFy9dsx2gjGfY=)
2: 8197428E8A2F11F1979432C96D11F970.roa (hash: 3agLE6eYwjBLKD73jdTnpcDMyC6z3gyTK8QJXd1hgRY=)
3: D07522FE831D11F1B418DC1191A30FBC.roa (hash: dzwge0kLLVVM1zxaXdNhUuJZI22hm2h7bCabK14OXlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl
rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2432, serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D
Validity
Not Before: Sep 25 08:57:05 2026 GMT
Not After : Oct 2 08:57:05 2026 GMT
Subject: CN=6ab63761-dd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:ef:e5:0b:a8:d3:9e:b7:cb:b4:6d:65:87:
51:43:5d:f3:b4:8a:84:16:5a:9b:df:a8:24:c9:cc:
d4:79:4d:47:53:2b:4d:72:88:24:de:d4:f7:ef:66:
d0:fa:bd:96:f9:ec:03:c4:36:f0:20:e0:22:b1:dc:
45:45:40:c1:17:ed:ca:29:24:2c:0e:6f:2e:27:45:
85:9b:8c:d4:c8:67:2a:be:c7:dc:dd:48:f6:8d:3f:
5c:3c:83:f0:56:3d:4c:9e:13:73:d7:86:b0:89:82:
c0:89:d8:b5:3c:9c:88:4b:73:59:27:28:a3:b9:7d:
0c:3e:2c:eb:b3:d1:23:29:3e:ac:f2:30:df:b3:16:
45:17:d0:d7:ae:d1:b2:10:89:fa:11:c0:24:b6:1c:
23:32:bf:69:d4:b1:d1:6a:78:46:42:63:fa:0d:55:
dd:d5:03:4f:4e:49:23:ee:ce:0c:cb:81:15:67:eb:
04:db:68:c7:b7:9f:a0:ba:06:e1:a5:55:1d:92:20:
e7:f5:8a:d5:e1:fa:77:e1:56:34:43:dc:6e:10:6b:
46:ac:cc:67:bb:9e:80:59:c0:4e:10:d7:42:d8:85:
9b:ff:cf:6f:00:d2:bc:24:47:47:45:0b:1c:bb:4c:
67:f7:fb:ab:29:53:33:ef:05:a9:5d:3c:5f:be:ca:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C4:AB:EB:02:82:B9:F9:7E:74:05:A5:6D:D4:3B:60:F5:C8:7C:B5
X509v3 Authority Key Identifier:
keyid:F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:35:6b:d9:3a:3b:17:42:bd:3c:36:ea:fa:e1:98:5e:08:51:
8f:1d:a4:e3:81:a2:00:ff:d3:da:59:d0:9f:5f:4a:5e:c6:dc:
f2:bf:1d:a7:74:09:92:28:1c:0a:a7:3c:c3:ed:de:83:30:84:
74:3d:84:a2:6a:91:5c:98:f7:39:a1:8d:89:38:44:2b:0d:84:
7c:15:42:eb:43:a9:0c:c1:0d:ad:42:e0:9f:45:0e:6d:36:d5:
c4:ed:e9:60:c1:68:c2:87:02:bc:9b:b3:5f:9f:54:04:a9:03:
bd:26:b3:e5:7c:aa:47:9d:2d:28:d3:db:29:08:7a:b4:21:1a:
68:06:7a:4a:27:9a:b1:6b:ac:39:e2:e9:1a:36:4e:ab:a0:cd:
d7:d8:e1:e8:f0:59:3e:33:7e:21:fe:62:96:93:15:5a:9b:6a:
c6:58:1e:01:81:57:3c:f4:a4:b4:81:72:a4:af:51:60:5f:92:
c7:bc:70:73:df:bc:19:1d:ce:68:b6:d3:4e:66:86:63:8d:72:
e8:33:16:f3:a1:1e:64:fe:af:14:01:8f:44:f6:c7:86:72:f2:
0d:92:cc:ef:d1:09:05:12:19:8c:2c:9a:fb:cb:1d:4c:11:b8:
c3:b2:84:3e:28:78:88:e7:c7:d9:81:4b:79:50:26:85:d9:e8:
21:7c:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:18:31 2026 by rpki-client