
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier: 9lCXk4UdbBqECq9h+NXqHIqKMNM6HSwzM7eWcIU7kd0=
Subject key identifier: 61:61:31:D4:29:39:C8:B4:C5:4C:E3:79:F0:48:B9:AF:19:41:33:A1
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial: 0667
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number: 0606
Signing time: Sun 20 Sep 2026 16:16:02 +0000
Manifest this update: Sun 20 Sep 2026 16:16:01 +0000
Manifest next update: Sun 27 Sep 2026 16:16:01 +0000
Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: WO0p0OSbqv1yvzCvNm3VKVLxheOA6QOadR+wsYx3/Lk=)
2: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: SB23MH7egYKIQ17nCj+xHe+4JVPIgfw/s/SRgDFUT6Q=)
3: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: CFOJdfAQAwrs7SLJek/PgQnllBP7mK7ufRDP4foqiCw=)
4: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: /rUJMh30ecAZJtef/1j5fUYrkpMN5VcKfJkxNOsXqME=)
5: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: 4cXqlRer52ZWlIOSKIID7G64udphrDhp88IgkcR8MHE=)
6: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Validity
Not Before: Sep 20 16:16:01 2026 GMT
Not After : Sep 27 16:16:01 2026 GMT
Subject: CN=6ab006c1-66e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:aa:1c:67:46:c5:b6:00:cc:a8:0e:21:0c:
aa:43:a8:6b:c7:24:f9:01:ba:74:88:9c:0e:95:6e:
3f:9f:1e:44:6f:bf:3e:b7:14:58:8c:c5:72:98:13:
74:dd:2e:f7:c8:f8:63:ff:4c:71:40:06:47:04:ad:
18:aa:06:02:7c:a4:14:8f:2e:c8:bb:05:f6:53:ff:
3b:11:df:9c:33:33:3a:95:01:cb:79:f5:74:ba:f5:
63:3e:c8:b2:bb:93:9f:ea:dc:66:f7:58:5c:ec:21:
e0:8f:77:6d:c3:78:6e:c4:2f:d3:66:60:a1:33:df:
34:bc:c8:4a:ed:21:6c:1e:f0:5e:3f:9a:8e:75:71:
78:0a:89:62:b7:e1:18:fd:c3:5a:e3:c1:44:13:c6:
26:e3:06:16:73:58:bf:a0:f9:a0:fa:a2:d4:5a:88:
67:3e:3c:49:f0:b5:be:c9:cc:38:f7:18:14:75:c2:
ea:a2:94:f7:73:cf:ef:6f:15:42:ba:8e:16:23:8e:
14:0e:64:e5:13:c4:f9:c9:51:7c:28:47:41:76:30:
14:cc:cc:4d:2d:32:1b:72:06:58:5a:16:8b:3c:ac:
2d:c6:a3:9b:53:a5:ff:3d:8b:56:42:03:8e:f9:39:
4b:cf:02:54:32:80:10:21:7a:00:27:b6:a6:87:ea:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:31:D4:29:39:C8:B4:C5:4C:E3:79:F0:48:B9:AF:19:41:33:A1
X509v3 Authority Key Identifier:
keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:76:5e:bf:1c:07:31:bd:f3:ff:b5:c3:e0:70:0a:b1:d5:6a:
e0:0a:58:da:dd:b4:ea:2a:50:e0:0c:1c:03:0e:75:8f:ea:b8:
ee:03:e2:a7:e8:8a:56:fa:01:c7:8c:02:f1:20:47:3a:29:a1:
22:83:54:81:46:b9:a0:1b:7e:02:96:3d:a4:9f:7c:e0:fc:d5:
7d:79:88:10:67:52:02:89:95:38:80:82:f1:51:e5:e8:22:06:
b4:a0:58:14:d1:b9:00:17:61:74:28:04:42:f5:07:b7:b3:fc:
37:b1:59:56:b6:9d:d8:cc:50:32:e4:c4:0c:3d:31:71:95:6c:
31:49:4a:b7:53:7f:56:99:e0:de:77:3c:8e:fe:8e:be:44:ff:
ef:d9:5f:ab:37:3e:6f:9a:b3:9d:bf:0e:ab:76:a4:1e:ec:31:
5f:e6:a1:e3:05:f9:85:94:1d:98:29:39:28:f3:cc:b9:29:5a:
31:df:9f:67:3c:ff:2e:12:48:42:9b:0d:03:fb:5b:6f:a6:b7:
10:c1:e3:89:99:d6:09:7e:78:26:2b:c4:a5:4c:00:8f:ee:82:
b9:b5:d2:b6:4a:de:13:d2:17:2d:c5:15:28:56:ec:a4:ba:81:
d6:7f:30:32:b7:a3:8b:e0:9a:2b:58:6d:8d:a6:ae:12:7d:da:
cd:bb:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:57:53 2026 by rpki-client