
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier: 4Of4o2nhc/L0xl2WhHNUYAVvshKFwij825cUUGNeVVQ=
Subject key identifier: A8:72:F5:B9:DB:12:4C:94:2A:A0:28:AC:19:80:F4:9E:43:28:1C:54
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number: 0195
Signing time: Fri 09 Oct 2026 05:54:03 +0000
Manifest this update: Fri 09 Oct 2026 05:54:02 +0000
Manifest next update: Fri 16 Oct 2026 05:54:02 +0000
Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: y1DLD1uiC5gFjZdt6A3NN+6hliiqBHPM/5X7qs8c+8s=)
2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: 4Kp8/F948IGItMQRXGhC5wmWo1Mqzonrab9/ibHUE4A=)
3: DF6D4464818211F097447962C4F9AE02.roa (hash: ECp6iTOoC7ugUrkKriIznxv1yN7v34fWx9R69XQA+Mk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Validity
Not Before: Oct 9 05:54:02 2026 GMT
Not After : Oct 16 05:54:02 2026 GMT
Subject: CN=6ac8817b-1472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:fe:7f:60:ad:13:bf:ba:9c:d3:1f:f8:13:
b3:f0:1d:1c:1a:56:94:bb:09:b8:82:35:f8:80:15:
c4:6c:51:70:af:b7:35:bc:e6:c7:90:43:f5:6f:1c:
ee:b6:e6:70:93:33:4c:88:c8:4d:28:13:50:b9:00:
35:f6:58:96:50:62:0f:f7:29:c8:cd:d0:57:65:5b:
48:0c:9e:3a:b7:e9:e3:36:82:05:84:bd:20:06:45:
8d:d1:8f:60:65:ea:6b:8c:e4:64:bf:c0:39:44:4c:
6a:74:80:b2:d7:70:6f:9f:ad:e6:e0:d0:91:7f:7a:
a8:34:5c:40:a6:2c:af:13:63:e2:05:2a:f1:1e:30:
1a:00:b1:0a:8f:db:07:a6:65:00:15:4f:27:2f:52:
ea:d1:cd:28:2b:d9:86:68:59:cb:d5:11:84:a5:87:
19:e3:31:29:15:d0:1a:ee:e3:3d:be:b0:5e:68:26:
0c:6a:75:ac:51:74:6c:01:43:27:67:70:37:58:86:
b3:34:2c:16:fe:7e:af:80:76:9a:49:25:25:2e:07:
af:7a:ef:52:72:af:1d:73:d4:23:6f:2f:0f:c9:a3:
28:c0:8e:15:8a:c2:4a:97:e6:4a:82:a5:dd:5a:6c:
43:12:5a:e3:21:d8:ca:83:f2:29:c2:b8:2c:7f:f2:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:F5:B9:DB:12:4C:94:2A:A0:28:AC:19:80:F4:9E:43:28:1C:54
X509v3 Authority Key Identifier:
keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:be:24:0d:09:64:4b:1e:ca:e5:09:bc:4b:98:30:34:c6:18:
09:19:ac:7b:35:31:0f:46:cd:46:11:3d:e1:dc:de:71:38:d3:
c8:46:64:43:2f:e9:4c:25:f4:ef:d4:b0:d1:48:ef:7b:b3:35:
44:a8:86:67:9d:dc:37:5b:26:54:52:60:33:c7:1b:9f:ce:4f:
f7:24:78:98:e7:7c:5a:52:d6:88:49:c1:c5:c8:67:91:c3:48:
74:c9:12:c6:13:be:94:7a:9a:d2:fd:fb:21:f3:d8:29:89:ab:
f2:02:54:69:2e:1d:4e:90:4c:b5:7f:cd:92:4d:d9:f3:1d:b1:
12:b3:f3:47:31:5e:2f:c5:9b:47:13:21:f8:87:c4:d9:39:ee:
3e:3a:6b:4f:0a:29:bb:b2:49:42:29:9e:b4:67:65:d6:a8:6c:
bb:60:53:a1:a9:b6:7f:13:c3:60:88:a2:35:a8:78:e4:fa:5e:
0a:03:33:0f:08:ed:27:81:d4:f2:e4:6b:29:17:0e:90:9a:2c:
54:ef:8a:48:8a:bf:83:6b:29:20:de:d0:45:20:69:18:0b:b1:
f3:31:f8:1b:5a:8f:bf:83:02:03:8d:b4:45:b3:46:a8:c0:dc:
90:47:9d:c1:29:b6:28:98:c9:79:2a:1e:ad:4f:39:44:82:a8:
38:02:81:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 13:09:02 2026 by rpki-client