
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft
File: CQyLgW7CLSTWcV6m09s0cv3SkY0.mft (raw, json)
Hash identifier: nF6Bhufu6/Rf70+Y+vrs1CSk1eYaDZSw2YXL5f4qw5s=
Subject key identifier: 9A:E5:5B:30:A3:B9:31:13:8F:6A:0A:BF:B8:03:7D:13:13:8A:7D:57
Authority key identifier: 09:0C:8B:81:6E:C2:2D:24:D6:71:5E:A6:D3:DB:34:72:FD:D2:91:8D
Certificate issuer: /CN=A91E60BE/serialNumber=090C8B816EC22D24D6715EA6D3DB3472FDD2918D
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft
Manifest number: 0A
Signing time: Sat 19 Sep 2026 09:14:32 +0000
Manifest this update: Sat 19 Sep 2026 09:14:32 +0000
Manifest next update: Sat 26 Sep 2026 09:14:32 +0000
Files and hashes: 1: CQyLgW7CLSTWcV6m09s0cv3SkY0.crl (hash: y04gWeBn7x6zUSkEpj9lGEa/kfY32peQpYP59LJ5u+o=)
2: 4-oiypFfIpguVhrn4YIqmnwHJho.asa (hash: nNsZolbMm357b3YPMufDx88k9OIE5utNMxj3ie7geC4=)
3: mU--buUUTmUNCuDGU6LmNbyW7jY.asa (hash: R1QnryZE+6vurfUuE0WUq4spgNvCBH4X3l8NtzsEP1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.crl
rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E60BE, serialNumber=090C8B816EC22D24D6715EA6D3DB3472FDD2918D
Validity
Not Before: Sep 19 09:14:32 2026 GMT
Not After : Sep 26 09:14:32 2026 GMT
Subject: CN=6aae5278-0719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:47:b6:0d:26:37:16:96:03:59:b0:14:74:
c3:cf:c0:d2:cd:a7:e1:f4:c9:37:64:9e:aa:65:7d:
b7:b1:ad:b4:3c:dd:4a:c5:6b:20:b2:0f:02:cf:dd:
49:96:09:5e:ab:8e:2d:f4:fb:9f:47:c3:23:71:64:
ed:4f:f0:40:89:c9:6f:04:fa:76:f7:0a:7d:0c:37:
92:d7:6a:f5:7d:94:92:eb:1c:a5:4f:bb:fa:b6:25:
4c:44:17:cc:6f:9c:28:ad:31:a5:ec:c3:55:4d:72:
19:91:35:14:98:41:af:af:fc:7b:60:ec:5f:c5:bb:
70:a5:b3:63:21:4a:a9:34:19:0e:98:47:3a:47:aa:
de:a3:c0:0d:c5:dc:f8:12:c0:8b:0f:d0:b8:0b:f9:
c0:88:9f:4a:14:8d:f2:d3:b5:0a:32:d4:8d:fd:e7:
d8:f2:f8:6a:a5:47:22:ee:e5:f2:6c:63:5a:08:b3:
7e:ca:59:d1:e8:09:c3:af:34:c5:bf:c3:58:16:08:
c5:4d:9b:bf:d6:7d:49:78:f1:89:2b:d2:f7:df:e6:
cd:78:33:56:25:87:d9:16:ae:77:fa:ff:44:4f:3c:
d4:d6:ac:90:89:03:11:59:42:63:19:92:14:80:c5:
f5:ff:76:2c:ff:c8:0e:a8:b6:53:ce:d8:1b:22:b0:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E5:5B:30:A3:B9:31:13:8F:6A:0A:BF:B8:03:7D:13:13:8A:7D:57
X509v3 Authority Key Identifier:
keyid:09:0C:8B:81:6E:C2:2D:24:D6:71:5E:A6:D3:DB:34:72:FD:D2:91:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CQyLgW7CLSTWcV6m09s0cv3SkY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E60BE/9A009132AB3A11F18367D5166D11F970/CQyLgW7CLSTWcV6m09s0cv3SkY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:2d:4f:f7:3e:14:56:eb:1b:e4:b1:d1:f7:97:19:27:ea:bd:
ef:7a:b4:a6:a9:e5:d8:61:7b:f5:ec:8a:ce:68:36:4e:55:80:
ee:9c:07:d1:ee:be:cb:bb:7f:87:56:92:4f:7e:1f:ac:e6:b6:
31:a7:cf:51:f8:f3:07:7d:1d:20:76:ad:b6:79:89:9f:6a:14:
74:63:be:d8:e9:1b:78:70:f1:40:91:4c:cc:b0:62:b9:41:3c:
b9:09:e9:b7:bb:a2:d2:44:7b:22:56:e4:39:fd:21:a9:f8:07:
21:3e:c9:dd:66:43:99:52:44:37:10:03:a2:8a:fe:72:f0:94:
63:30:73:0a:59:c8:74:ee:a1:45:d8:3e:c0:88:75:9c:59:b4:
5b:99:62:69:9d:ad:04:2f:9e:97:46:80:a7:fa:b6:d2:21:52:
e1:1e:06:50:d0:db:dd:ab:71:be:52:02:ab:1c:a8:b1:fe:7f:
82:fa:a0:06:16:3d:75:3f:d2:01:40:bf:60:84:6b:c8:38:7d:
23:76:d6:f0:e9:94:49:3a:2f:bc:e2:05:df:4d:20:ec:65:ab:
36:d4:07:14:9a:e4:14:fe:51:9a:dd:c4:49:f1:9a:cb:d4:0a:
83:9c:76:70:a8:65:a1:22:31:cb:39:9e:ac:10:e0:64:24:38:
95:b3:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:26:24 2026 by rpki-client