
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
File: F6I2W2QK2rIDQznh5f80TkeLWJg.mft (raw, json)
Hash identifier: ihehGyp/Ge0uzehpPdT3VmCI1KH5WuiLPoXfucfmMkA=
Subject key identifier: 88:EB:0D:D4:1A:28:60:62:C8:B4:0C:0E:0C:EA:38:5C:B5:3D:E5:E1
Authority key identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98
Certificate issuer: /CN=A91E1BB0/serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
Manifest number: A0
Signing time: Fri 25 Sep 2026 07:20:19 +0000
Manifest this update: Fri 25 Sep 2026 07:20:18 +0000
Manifest next update: Fri 02 Oct 2026 07:20:18 +0000
Files and hashes: 1: F6I2W2QK2rIDQznh5f80TkeLWJg.crl (hash: D5U9UCGvQaXlAENgd69BjjJ9CALvtzTd97ABpoKRMoo=)
2: CAA5A90CC47811F0833DFF5DC4F9AE02.roa (hash: H8pE2g5ZUOoAMl+wWqQ1EZjDZWZf77Qbks8/czGrNQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl
rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BB0, serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898
Validity
Not Before: Sep 25 07:20:18 2026 GMT
Not After : Oct 2 07:20:18 2026 GMT
Subject: CN=6ab620b3-1f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:c7:d8:f9:25:52:92:9d:e6:31:9e:c4:a7:
b2:6d:70:58:7b:ea:0f:4b:72:bf:71:40:d7:6c:16:
b4:38:0c:3c:58:aa:e0:9c:fd:ca:4c:e8:06:13:fa:
b6:f3:30:44:9b:dd:ba:09:db:7c:d2:20:5a:77:6d:
37:bd:c2:2c:2c:bc:53:67:22:34:c3:30:8e:57:da:
bd:a6:d6:eb:2b:3d:97:16:68:b3:41:18:6f:e0:b4:
4a:e9:a3:eb:34:b2:ec:f6:cb:67:27:24:d8:9a:77:
7c:5e:f9:a0:29:ad:be:da:2b:b0:e9:36:6a:d9:9c:
20:8c:9d:74:f4:22:21:4d:a1:b9:08:da:f6:5a:91:
50:92:54:cd:f6:b3:41:03:3f:a8:91:11:07:9f:74:
73:91:4b:22:e9:ac:14:ef:9e:ad:0c:79:7a:53:fb:
96:0c:b9:63:0b:bb:fd:ce:33:65:d0:33:51:d3:5d:
0a:fd:aa:62:4f:d5:8c:eb:54:5b:5e:86:dd:dc:80:
89:66:f7:3f:45:35:90:07:e9:2d:84:ae:8d:3d:a6:
d3:e4:97:7a:d0:b4:18:ed:af:58:87:12:85:26:89:
9a:fd:84:b7:80:9e:75:70:71:67:67:07:90:11:9b:
84:d8:c9:72:6a:9f:c9:dc:66:41:6b:f5:97:c4:a2:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EB:0D:D4:1A:28:60:62:C8:B4:0C:0E:0C:EA:38:5C:B5:3D:E5:E1
X509v3 Authority Key Identifier:
keyid:17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:ca:76:35:81:da:7c:34:4c:ac:aa:17:0c:a1:ae:bf:76:e0:
b7:11:82:32:2a:06:f2:9a:aa:a5:cc:5f:61:50:7e:08:3e:77:
89:7d:d2:97:f4:e0:8f:27:42:8c:0a:44:78:a6:2c:c8:27:ad:
54:51:76:bd:70:9b:51:c6:51:21:19:d4:59:b2:63:9c:4b:4d:
eb:e2:ac:03:49:f5:1b:02:33:1c:43:13:3c:14:21:42:6a:19:
40:49:cd:d5:ab:57:8a:c4:52:f5:8f:bc:76:40:2f:56:29:ea:
73:69:00:c1:14:71:32:30:17:21:3d:d2:0d:26:52:a1:5a:9c:
32:dc:62:8b:13:de:96:66:35:2e:a1:63:4f:e3:1f:da:74:88:
0f:34:68:00:0f:3d:6d:40:06:32:ee:eb:f0:8d:08:86:ad:ad:
7c:09:54:46:30:f1:dd:c3:f5:ec:31:18:ab:01:71:32:1a:fe:
cc:10:ab:93:e1:d2:8d:55:54:46:92:1e:cb:e9:fa:f5:56:47:
2b:f1:c0:f8:e8:e8:48:00:da:91:1b:a9:91:45:74:0c:55:56:
27:80:3e:b8:df:b2:c4:05:18:a5:8e:a2:74:c4:49:39:4f:01:
e2:aa:cb:c9:b4:f7:36:64:12:09:9e:25:9a:a2:2b:5f:70:14:
c1:91:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:42:22 2026 by rpki-client