
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json)
Hash identifier: XiB5dmnKn/Rp2iUqj/aVeHZHtem8Vov2jN9H0DRaLgE=
Subject key identifier: D3:BB:6D:95:C9:28:AC:4B:E5:BD:19:29:8F:CB:58:92:14:8E:29:DD
Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Certificate serial: 0B04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
Manifest number: 0AD5
Signing time: Sun 20 Sep 2026 19:22:40 +0000
Manifest this update: Sun 20 Sep 2026 19:22:39 +0000
Manifest next update: Sun 27 Sep 2026 19:22:39 +0000
Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: tS3taW6sEW20gYFHmVkfpeBOqw8CjRYsIDFyHeJybvU=)
2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: 2i8qGpQRreTsgSwr4uVW47W52ezT0jaL1HVor/4n178=)
3: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: rwF3ZHk/RVRSDVzAmZzOpcusN8aav7XVfExqPCMX7pc=)
4: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: OH/GXZ1q60s4R0UMX3ULerkxFMV9QJvIeVjbm9pioBQ=)
5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: Ftvy/rpA0Vj85hMaB0gzuwhB0x0hLyn+6aJiSOLoMmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2820 (0xb04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Validity
Not Before: Sep 20 19:22:39 2026 GMT
Not After : Sep 27 19:22:39 2026 GMT
Subject: CN=6ab0327f-c248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:c2:36:93:23:3c:1b:2a:d1:e5:a6:12:d8:
b0:bd:83:da:51:bd:6d:c0:fb:74:57:75:31:d7:62:
92:8d:f6:30:b6:2d:53:47:59:44:d2:f9:a5:bb:0b:
f7:0c:25:58:8c:9b:8c:da:78:6b:30:0d:26:27:be:
20:bb:15:5a:57:d0:82:ce:60:c1:5f:05:38:96:bd:
90:d4:d4:4f:0a:47:01:80:58:73:9b:0f:81:96:2e:
36:ec:33:aa:2c:f2:ca:be:3d:eb:b6:88:1f:6a:62:
fc:21:13:02:08:c4:87:eb:17:a9:9b:79:c6:f2:7e:
e0:33:31:70:35:cb:dc:51:a0:f6:51:d6:32:cd:c7:
c8:6f:a0:5c:2b:e6:dc:81:87:00:85:0a:a9:19:18:
da:40:0d:2d:2a:76:87:5a:93:0e:5a:00:a2:ff:a1:
6f:7f:5e:0f:7b:e6:ce:a9:aa:de:d1:95:ee:01:1f:
af:21:cf:aa:30:de:7b:d1:f6:4c:f0:c4:4a:d8:1c:
27:91:e9:02:92:f5:8e:b8:22:8f:42:66:c0:24:01:
77:f6:9c:6a:ea:17:35:de:3f:47:2c:d1:6c:c0:08:
9e:fe:34:58:c2:c7:98:ca:f2:a6:10:2e:0c:63:a6:
10:89:8d:dd:f0:80:bb:7f:7a:22:01:68:c2:59:be:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:6D:95:C9:28:AC:4B:E5:BD:19:29:8F:CB:58:92:14:8E:29:DD
X509v3 Authority Key Identifier:
keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:0a:07:71:fb:68:91:8e:e2:d8:ef:0d:60:8e:e8:6c:db:91:
07:93:ff:3b:da:d5:7e:b8:d7:87:1b:e9:ec:e9:5f:d8:57:87:
e2:44:2a:6d:ae:53:10:aa:4b:b2:02:aa:d7:14:c2:c4:34:b7:
42:31:47:ab:43:72:a7:6d:18:50:ac:4e:d8:7d:40:0f:73:87:
15:42:c5:3a:15:97:87:e3:d7:71:2c:2b:4e:f7:40:63:9a:da:
e5:d2:47:88:f1:3a:cb:e1:e2:e2:6c:34:a3:9a:14:22:43:5a:
ce:a2:60:a1:ea:4a:79:2a:53:1d:fd:de:fe:93:54:ca:6e:7e:
1f:ce:86:5d:57:a6:cc:0d:e6:9e:12:83:80:b7:13:f8:9d:ad:
65:16:90:dc:54:c0:03:95:c5:67:e4:f0:a4:12:84:53:a8:82:
9c:d0:77:df:d2:19:78:6e:78:1d:2b:a6:bf:44:bb:42:7d:e1:
fb:90:82:d3:98:d2:75:35:8d:fc:98:34:c3:85:f5:0e:4a:d3:
5a:5a:16:f3:f4:e3:a3:54:00:fd:50:dd:a0:de:42:22:3d:75:
49:90:bb:04:f9:68:60:47:82:5e:09:86:67:20:6e:42:7c:da:
4c:49:dd:6b:19:a0:87:96:78:f3:41:95:ae:a7:36:c0:d5:1e:
f5:1f:fe:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:54:36 2026 by rpki-client