
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json)
Hash identifier: 4HOq9WhfK42S5dM8OL/Dj3KrdE+KvBmbkPHpwIyxw8k=
Subject key identifier: 4E:AF:CF:57:DE:75:6C:AC:7F:94:67:06:6A:55:8D:80:AB:D9:5E:A8
Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
Manifest number: 0102
Signing time: Mon 21 Sep 2026 06:08:49 +0000
Manifest this update: Mon 21 Sep 2026 06:08:48 +0000
Manifest next update: Mon 28 Sep 2026 06:08:48 +0000
Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: 7wCMJaRbQZKm8A2VfFmpSi/w9TNwtfXR223b0+ue2IQ=)
2: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: KPvqeYEjrP3rW7z9OSGAJVN9ZK2zCwOeNm8vtT/hE1E=)
3: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: GMRoxaiJwQd4I9blwc313RSuAiLyK99JqZt/L1LzUaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Validity
Not Before: Sep 21 06:08:48 2026 GMT
Not After : Sep 28 06:08:48 2026 GMT
Subject: CN=6ab0c9f1-5de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:0c:93:57:ab:26:62:8c:a2:b8:13:88:dd:
81:a2:ef:9a:ff:14:89:d7:72:bd:a2:62:1d:72:aa:
80:20:c3:a9:46:25:6d:d4:23:32:50:9f:4e:d6:78:
02:41:3c:41:34:b2:69:6f:ce:d1:1c:65:7a:87:1f:
42:a4:56:bf:61:d8:e5:7f:2e:db:19:bc:f3:ad:f9:
ce:79:a1:68:e2:e9:9f:99:4a:75:89:30:82:89:a0:
4c:fc:d4:f0:24:39:b9:42:43:ae:49:78:e1:3c:3c:
e3:32:42:76:eb:be:5b:5c:c2:45:06:b3:54:44:8c:
1e:fc:8d:af:e5:f1:6c:11:ea:6c:50:a7:41:1e:7b:
d2:31:07:d3:81:41:e3:41:21:f7:8f:45:75:08:91:
2a:61:59:26:e8:95:2c:bf:ac:63:48:ca:0a:ac:f0:
68:14:28:67:0f:b4:48:99:72:cd:fa:f3:27:48:25:
1a:e7:22:5a:69:a0:b1:07:46:f9:2d:90:39:99:60:
8f:1e:e1:be:9c:c0:a0:ed:0d:5b:08:96:b1:d1:60:
a4:4e:ef:93:d3:41:cf:8b:ec:d4:4c:d9:ea:6e:b9:
9d:fb:e1:b1:20:41:48:74:d1:08:bc:2d:7a:26:e7:
ae:7e:6f:0f:e4:4b:6e:9a:91:0d:7b:7e:21:a7:5c:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AF:CF:57:DE:75:6C:AC:7F:94:67:06:6A:55:8D:80:AB:D9:5E:A8
X509v3 Authority Key Identifier:
keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:80:cc:29:5a:cb:74:01:e1:e3:95:c9:b1:20:7b:b1:ca:96:
59:4a:81:69:fb:56:fa:cf:32:21:0b:e1:39:05:b1:16:4f:95:
09:4e:24:36:9a:f6:03:b1:c7:c1:e1:ef:49:82:21:ba:f1:2e:
43:71:0d:e8:54:5f:3a:45:19:a9:da:8f:0b:b3:29:5d:43:59:
db:87:6d:22:57:a6:b0:f1:1c:77:7f:50:23:26:c4:55:b4:f0:
7d:55:03:bd:62:43:67:9c:6a:f2:b0:e0:2b:a3:b5:cc:5b:ca:
a8:66:26:df:e8:09:60:0e:f2:bc:1b:7a:24:cc:c8:35:46:eb:
d0:ae:9a:9a:82:66:b5:28:b6:d3:ae:9c:76:30:6e:34:37:49:
2e:8b:c7:92:59:d3:b4:1c:36:28:5b:79:0f:a0:a5:6e:10:fe:
cf:d2:ab:e4:13:a0:b9:36:b8:fb:73:de:36:b8:db:a4:bf:84:
75:ad:0e:1f:9d:70:81:33:38:40:f2:0d:a8:96:a6:6b:88:f2:
e0:a6:a7:75:69:f0:5e:9a:7b:0b:56:d3:2b:d7:42:79:05:00:
da:a6:a7:82:c4:41:df:d4:11:47:3c:e9:0a:7e:fb:a0:e0:5e:
af:4c:0a:a5:19:73:52:ec:9a:5d:60:c7:11:b8:50:c1:03:9c:
4e:d2:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:39:18 2026 by rpki-client