
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json)
Hash identifier: i/EQZUhe9hdMgL2KqT2BXuXFaEQKh0vas5KzvpzfTqE=
Subject key identifier: 5F:17:01:75:DA:DB:CD:EB:97:6B:12:99:D6:BD:B6:71:C0:F2:19:07
Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Certificate serial: 09B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
Manifest number: 09AC
Signing time: Wed 04 Nov 2026 20:10:05 +0000
Manifest this update: Wed 04 Nov 2026 20:10:05 +0000
Manifest next update: Wed 11 Nov 2026 20:10:05 +0000
Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: XlzPQZ9Fi+G3s92s75HUTPAySCLB3WZj9W/gHmLgfU0=)
2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: EaEIkoL8X3Bs8catDydmdxqS40jl2dudc0xm8Au52PE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 20:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Validity
Not Before: Nov 4 20:10:05 2026 GMT
Not After : Nov 11 20:10:05 2026 GMT
Subject: CN=6aeb911d-f286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4d:78:67:3c:03:19:42:b5:bd:45:97:90:5a:
e8:d2:ca:27:9c:03:28:b1:ec:f3:87:60:fa:b0:aa:
22:45:11:c9:9d:ab:af:0d:04:f6:92:31:b8:47:f2:
2f:95:3e:69:bf:8c:6f:a5:bc:ea:76:fb:13:35:6d:
1f:57:7f:e4:d6:dc:0b:b2:1a:ce:22:76:78:9a:e0:
4f:38:bb:58:46:6e:86:4d:fa:10:0f:1c:bb:8f:4f:
da:7f:61:74:9c:86:e3:01:1e:39:77:b3:6e:49:2a:
a8:f7:8d:87:53:ff:3d:6c:3e:3b:88:16:f0:e0:f8:
48:32:41:44:c4:f0:55:7f:b4:12:cc:8f:5c:b1:27:
8f:13:08:a9:53:df:eb:a6:b7:fb:0d:79:e9:ce:57:
9d:fd:f4:be:59:13:3a:a2:72:46:3d:9c:96:de:19:
80:e3:39:98:0a:4d:de:58:f1:2b:2f:0b:5e:58:1f:
16:1e:c4:b2:8c:94:2d:eb:f9:4b:84:3c:db:24:16:
65:ab:53:af:ed:a2:53:44:73:d6:71:85:01:6f:cd:
2d:1e:86:88:e6:ee:32:e1:40:4c:e7:a0:d6:65:8c:
fa:10:cd:30:3b:c6:5f:68:d8:5b:a2:b3:bf:62:e9:
89:a5:a1:1f:aa:10:e2:32:bf:f3:bd:11:e7:c4:02:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:17:01:75:DA:DB:CD:EB:97:6B:12:99:D6:BD:B6:71:C0:F2:19:07
X509v3 Authority Key Identifier:
keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a5:3a:ba:43:75:ca:ce:41:e1:55:3d:e8:7c:96:70:9d:cd:
bd:cc:ea:04:9f:02:5c:db:a9:05:30:ec:de:17:94:b0:64:01:
3f:a7:55:bb:69:1b:c3:54:c9:0a:06:aa:d7:62:c1:fd:9c:00:
7d:99:f2:33:3b:83:84:7f:5c:4d:90:81:24:69:1c:fd:40:09:
54:1c:05:b6:a5:5a:5d:a0:16:bd:d7:c8:fb:0e:72:e1:2c:d5:
c0:24:d7:f3:f9:fb:b9:9e:11:c9:3f:15:ab:c5:ce:f7:d1:14:
9d:e1:10:fe:b5:29:a5:a6:18:1a:ea:fd:eb:b5:7b:6c:b0:3a:
6f:57:2a:ff:44:88:8d:22:b1:40:00:df:5d:c0:a5:18:6e:07:
e5:ee:e5:5d:d0:26:cf:0b:5a:f4:e4:58:55:33:24:fb:83:61:
a8:23:de:97:ea:ee:d0:3c:75:84:83:c3:05:64:fc:b3:29:40:
82:47:e5:fb:94:92:d7:87:fc:b6:01:b9:68:bd:fb:dd:1b:0e:
00:97:06:b3:5d:b5:26:72:65:ef:6b:af:4d:8b:a9:88:47:8a:
2a:69:78:7e:74:49:d8:14:4c:d3:a9:f3:e9:a8:28:48:bc:08:
1f:46:dc:42:00:24:10:d0:b6:59:77:f3:7d:20:06:5d:20:ce:
e7:41:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:47:42 2026 by rpki-client