
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
File: n23iTD7GWLEeatCvFdv-DKPb9mg.mft (raw, json)
Hash identifier: 8TIs+zy3xfCGueq1LMGIrpqM4LxCHryasb5tzjXb5eE=
Subject key identifier: 01:B4:B5:AB:94:AC:A9:70:26:18:5F:EC:56:E5:33:14:72:BC:CC:24
Authority key identifier: 9F:6D:E2:4C:3E:C6:58:B1:1E:6A:D0:AF:15:DB:FE:0C:A3:DB:F6:68
Certificate issuer: /CN=A91D2DDF/serialNumber=9F6DE24C3EC658B11E6AD0AF15DBFE0CA3DBF668
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n23iTD7GWLEeatCvFdv-DKPb9mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
Manifest number: 04
Signing time: Mon 21 Sep 2026 09:15:58 +0000
Manifest this update: Mon 21 Sep 2026 09:15:58 +0000
Manifest next update: Mon 28 Sep 2026 09:15:58 +0000
Files and hashes: 1: n23iTD7GWLEeatCvFdv-DKPb9mg.crl (hash: FNdkGUzaZVzsW2E4AsBySLjyTCIH6VlLMF4aGVBF/Rs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.crl
rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n23iTD7GWLEeatCvFdv-DKPb9mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 09:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2DDF, serialNumber=9F6DE24C3EC658B11E6AD0AF15DBFE0CA3DBF668
Validity
Not Before: Sep 21 09:15:58 2026 GMT
Not After : Sep 28 09:15:58 2026 GMT
Subject: CN=6ab0f5ce-6052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:e2:07:a4:11:52:b0:80:96:f6:63:55:38:
fc:9f:22:73:6f:6a:81:16:b5:cd:b7:e6:4b:1e:c6:
18:48:10:e9:6b:c5:0e:e6:9b:74:15:a5:1c:45:ab:
6b:b7:b5:fc:ff:ea:52:5e:f2:01:73:3a:96:8f:57:
1d:5b:0f:52:76:21:0c:85:9a:5e:a3:71:a6:ea:94:
49:2b:8c:83:31:aa:86:dd:8a:7a:5a:9f:81:00:6a:
d3:66:90:4a:45:ba:49:a7:b6:68:6e:cb:12:5a:95:
55:02:bb:12:2a:c0:c3:40:9e:50:c5:3d:ad:16:10:
55:f6:c8:40:fb:d0:56:19:f3:56:2a:5b:81:3c:b6:
ce:23:25:6b:e5:d7:c3:78:12:a0:0c:c6:2c:e5:fc:
5b:df:5d:40:69:36:e3:d7:e9:6f:88:bc:a3:75:eb:
56:46:6c:28:25:eb:4f:32:46:00:0b:56:4a:fb:a9:
32:c3:a6:ec:51:7d:45:8e:84:84:e7:35:8a:f3:46:
91:ed:3e:65:7c:f1:f1:f3:0d:e9:65:22:50:f4:a0:
c0:0e:7a:44:0d:7d:3e:cc:b0:4f:45:0f:f3:fd:b7:
26:5c:d0:a9:e5:87:fa:b5:0f:4c:55:e1:61:d6:87:
fd:b7:8c:5e:33:75:ee:45:4b:a2:67:a1:ed:71:a6:
e3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B4:B5:AB:94:AC:A9:70:26:18:5F:EC:56:E5:33:14:72:BC:CC:24
X509v3 Authority Key Identifier:
keyid:9F:6D:E2:4C:3E:C6:58:B1:1E:6A:D0:AF:15:DB:FE:0C:A3:DB:F6:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n23iTD7GWLEeatCvFdv-DKPb9mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bd:24:5e:03:e5:7a:be:af:1e:9e:b0:61:79:5b:55:e5:46:
93:f9:2d:4e:27:40:41:48:3e:6d:2d:90:11:23:58:b7:9a:89:
53:45:95:81:58:17:cb:f4:68:16:dd:33:c4:0b:12:70:95:e1:
d2:e9:db:0f:7e:7c:87:38:7d:a4:82:9b:6f:e5:6b:b9:f6:32:
ce:8e:5d:f2:26:c2:f4:dc:8b:18:ae:93:3e:31:0d:6f:42:df:
b6:b2:c9:54:3c:18:1f:4d:73:cd:5a:c4:39:08:2a:a8:86:22:
7c:5d:c9:56:a2:ec:94:62:65:fe:5d:f3:39:63:92:67:5f:e5:
1e:09:b0:4f:40:1e:b1:e6:54:f5:b1:57:42:a2:3a:81:30:b1:
7c:88:0c:46:a6:34:03:59:6e:76:1e:51:6d:e7:ba:76:b5:12:
99:fa:15:00:7f:33:1e:f7:5c:0e:c9:d3:7a:c0:a0:89:1c:e5:
ea:8e:ce:82:76:7d:71:e4:1d:18:c1:ba:f6:9b:71:8b:0a:63:
41:c6:38:11:98:48:79:c7:6e:22:71:fb:c8:1d:0a:72:eb:b0:
5a:52:49:56:20:ae:45:e9:7d:e7:f5:81:b8:dc:0b:59:9b:2a:
bf:73:61:8d:9b:42:a1:e7:0e:e3:25:47:c5:f0:ca:41:0b:b9:
2f:7a:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:05 2026 by rpki-client