
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json)
Hash identifier: UAwauea74IvsPtKLj4OGaCg2yl5sP+tSsY/T4+8NtW0=
Subject key identifier: 82:6E:9C:E3:E3:92:64:64:41:FA:77:CA:EF:E6:9C:09:C4:24:98:BF
Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
Manifest number: 01EB
Signing time: Sun 27 Sep 2026 03:50:31 +0000
Manifest this update: Sun 27 Sep 2026 03:50:30 +0000
Manifest next update: Sun 04 Oct 2026 03:50:30 +0000
Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: 1sK4O3b/ouBnbC9q5VFQKlkV8lcbMRLCFMpmgKLOoNI=)
2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: IIgjx5hMDfgzrpHDFYnjfbNSp51tU2xzdb1oFbQHBNY=)
3: 27977B04816611F1AB207D5289A30FBC.roa (hash: UyFIb241AuLpbDftlAbio/XfDKLk0wTp953m8m4bfaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666
Validity
Not Before: Sep 27 03:50:30 2026 GMT
Not After : Oct 4 03:50:30 2026 GMT
Subject: CN=6ab89287-52b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:c0:70:6f:79:02:e7:84:1f:45:89:3d:00:
fb:b9:31:ee:3b:b4:aa:e2:18:e9:f1:9e:73:59:d2:
3f:b1:50:ad:bc:8e:14:db:e9:68:93:22:3f:0d:60:
12:06:72:29:9a:8a:a2:b4:fd:68:50:fd:82:98:3f:
93:7e:64:b9:9d:b5:55:10:03:f2:af:2b:d9:cb:8d:
ae:92:0d:ec:31:37:a4:82:83:66:60:eb:0b:f4:ba:
c7:55:c2:8a:47:89:9f:30:e0:ef:0e:58:b4:58:95:
20:fc:9b:41:40:c9:00:0f:93:2c:35:66:03:e4:8b:
da:e5:f3:34:b5:95:c3:e3:e7:cb:37:d4:2c:e5:91:
4c:9f:b3:15:05:4d:ed:cc:83:2f:bd:bd:5e:7e:ce:
9d:83:3c:04:01:27:d7:1b:6e:7a:cd:9a:bc:2e:af:
b4:84:24:88:ff:89:89:43:61:3a:f9:a8:ce:76:c3:
0e:6f:9f:ad:cf:dd:d5:69:99:a1:86:80:ee:64:fd:
48:86:b6:08:9b:4c:e3:78:a4:c8:ee:72:53:27:d6:
d1:c8:6a:b4:e4:e7:80:03:97:f5:0f:27:70:14:61:
f8:5f:4c:38:bb:22:19:bc:dc:c6:14:f9:01:fb:79:
59:5e:9d:88:f8:3c:12:1e:f0:48:04:0c:1f:f1:12:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6E:9C:E3:E3:92:64:64:41:FA:77:CA:EF:E6:9C:09:C4:24:98:BF
X509v3 Authority Key Identifier:
keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9c:78:34:2c:40:4c:9e:ef:5b:ae:00:d4:e9:31:65:ea:5a:
5e:4f:b3:36:cc:24:25:0f:b6:5c:d7:ee:73:0d:3a:c5:b4:41:
ec:f5:ae:fa:52:fd:95:f5:72:d4:00:e6:d3:39:41:06:59:7d:
8d:68:0d:22:af:29:34:07:7d:8d:73:ee:5e:af:fc:cb:07:39:
e7:4e:51:03:85:93:f6:1d:48:bd:c5:6b:e4:23:bd:37:03:98:
d3:7d:e7:29:06:07:0f:2e:86:58:10:60:aa:f4:79:03:13:76:
e0:fc:c5:06:71:9f:b1:dd:1b:47:f7:ca:c2:ae:b1:80:ad:cc:
9c:71:71:63:90:e9:0a:39:16:1d:df:93:0a:dd:1c:d9:62:f8:
fc:e6:af:4c:a0:23:fc:1b:66:09:91:9b:cb:a9:ef:b1:27:58:
06:f2:5a:0f:32:4f:cc:ff:fa:e9:41:fa:16:39:1f:d3:79:84:
b9:cf:f5:b5:99:42:fb:f0:f8:38:84:c4:0d:fc:af:ef:68:31:
0e:d5:bf:07:65:37:e9:ff:35:f8:a5:b8:83:e0:8b:0a:4a:90:
26:91:e6:15:87:b2:7f:9b:09:18:cb:57:2c:36:63:98:46:08:
29:3f:01:ac:fa:7f:86:5b:a1:30:08:fb:cb:7d:6a:08:89:a0:
73:4a:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:38:03 2026 by rpki-client