
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json)
Hash identifier: yqXfDgr3NN4DBd7yc7VcRtJ7/kcW19AgMrgIp83UaIw=
Subject key identifier: 04:E8:58:B6:D8:7B:EF:66:CB:A6:82:1A:6B:17:4A:42:0C:01:97:9A
Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
Manifest number: A6
Signing time: Sat 19 Sep 2026 07:14:50 +0000
Manifest this update: Sat 19 Sep 2026 07:14:49 +0000
Manifest next update: Sat 26 Sep 2026 07:14:49 +0000
Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: QGeIrWLlMt7jev0EakrIE6/4vWwwoAS2j9u74biBrlU=)
2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Validity
Not Before: Sep 19 07:14:49 2026 GMT
Not After : Sep 26 07:14:49 2026 GMT
Subject: CN=6aae366a-45e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:2f:7b:05:a7:33:c6:27:5d:9a:22:2a:a8:
6f:bd:62:19:30:0d:6e:51:17:34:3c:f0:d2:78:be:
d7:b4:15:27:d8:6a:8d:cb:91:ef:c2:f8:ff:ed:ce:
2e:dc:d1:88:69:26:cd:f1:78:5c:8b:0b:f3:6f:20:
ad:06:6e:29:c5:62:3c:7c:93:42:f8:f8:36:19:25:
bb:e0:4d:dc:a0:30:fb:8b:b6:83:4b:69:21:b3:d1:
28:77:28:e6:49:a9:ad:37:c7:9d:6c:a9:09:0a:a2:
1e:c4:5b:1a:67:08:ff:08:38:d3:79:29:e8:ba:ae:
56:57:c6:38:95:29:02:1c:65:8a:c8:92:7f:05:24:
5d:2c:20:04:65:b1:22:72:f5:48:3c:91:03:70:84:
22:66:54:8b:a5:7f:cc:01:37:21:47:13:0f:84:c0:
81:84:c9:29:d7:2b:b4:07:25:fc:01:a0:e1:64:51:
0d:06:84:67:d9:ee:d6:6d:b8:e8:f9:e4:05:59:ec:
17:57:8a:11:d8:f6:17:a6:a4:ab:b2:8a:fe:b6:b3:
cf:bc:22:eb:b3:9e:72:39:61:a0:4e:ff:a9:5d:7b:
de:99:79:7b:e4:b2:db:67:82:72:3e:3d:09:fc:c8:
45:6e:2d:27:af:e0:57:65:02:0c:4a:9d:4f:8b:d2:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E8:58:B6:D8:7B:EF:66:CB:A6:82:1A:6B:17:4A:42:0C:01:97:9A
X509v3 Authority Key Identifier:
keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:33:52:dd:47:cd:93:63:dd:d7:92:2f:01:83:b9:0e:08:4e:
c7:6b:1d:0f:9f:f6:8d:57:96:a5:10:a8:65:e9:41:6b:46:e5:
b8:52:84:1c:2d:f6:ed:73:43:83:eb:14:52:18:fb:f4:43:6c:
21:21:c8:dd:da:0a:c0:bf:1c:2c:91:cd:da:fd:6f:43:e5:6b:
de:03:53:74:d6:af:53:60:43:64:c7:69:fb:34:86:65:be:09:
36:30:ab:c1:18:12:f5:cc:14:1c:95:8d:7e:d7:86:78:64:ce:
57:ce:ac:4d:af:93:9f:74:a7:d3:aa:c8:62:a9:6e:a8:d5:c0:
1e:e9:08:d5:ac:b8:3e:69:08:e6:98:1f:3c:65:27:01:56:ce:
a8:b9:7b:3d:16:50:d5:ba:81:d3:ba:3f:55:91:88:80:46:a9:
b6:9a:e7:2a:56:3c:64:e9:77:ec:01:8b:f7:0c:d0:69:32:d0:
93:d0:f0:38:41:97:70:2b:62:53:da:2b:27:8b:e0:c5:2d:47:
bd:e0:77:e3:a6:c1:99:cc:e5:35:b9:58:6c:6d:13:95:5d:28:
d1:83:8d:11:5f:41:45:af:1b:96:d7:03:84:c3:49:bf:79:d7:
87:76:82:87:82:46:85:8d:50:64:e6:1f:0e:93:5d:b9:5e:d6:
f5:4b:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:12:17 2026 by rpki-client