
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
File: P484Yw9NPXDt2eXJHjbsSO-5_WI.mft (raw, json)
Hash identifier: t7XXZ3vywy7j40TUOGdECmDf9LSAhGTCMGdrcg4O/A4=
Subject key identifier: 58:19:2A:1F:06:8B:FF:C2:94:14:3E:6F:83:9E:9E:04:8D:40:9F:32
Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
Manifest number: A7
Signing time: Mon 21 Sep 2026 07:11:34 +0000
Manifest this update: Mon 21 Sep 2026 07:11:33 +0000
Manifest next update: Mon 28 Sep 2026 07:11:33 +0000
Files and hashes: 1: P484Yw9NPXDt2eXJHjbsSO-5_WI.crl (hash: 2K9+QeCtwQutbrCyTkdLNyh4uuoi2aWnUwD/EAmJ8+Y=)
2: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (hash: 58sEBeu/Lw41bnGWkn+BoX7gGqJ3oc1042/9t7Bx+7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Validity
Not Before: Sep 21 07:11:33 2026 GMT
Not After : Sep 28 07:11:33 2026 GMT
Subject: CN=6ab0d8a6-27f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:d4:77:a8:ef:85:dc:fc:12:d8:75:d4:89:
40:24:1c:0e:2e:73:2d:2f:e4:c3:27:ab:fa:5b:41:
df:37:72:e2:5f:4e:83:38:22:e4:f0:44:b3:ab:6f:
b8:9d:07:27:33:bb:1a:c1:6d:11:3b:f1:8b:2a:83:
f3:43:6d:12:bb:86:38:ae:4f:b2:19:37:2e:bf:5a:
04:0e:24:98:09:2e:ca:4a:e6:22:5a:e8:07:4b:05:
97:7d:96:cc:78:65:fa:e5:cc:9d:ca:29:84:2c:bc:
4a:23:4b:89:d6:ec:1a:cb:06:17:43:17:32:b6:ee:
16:c0:a4:a2:71:24:79:57:37:cb:35:c1:93:7d:73:
28:1c:0b:df:f9:36:09:cb:1b:6b:5c:ad:df:2e:36:
4f:43:a1:d1:83:68:54:b0:ac:1e:7c:e2:2a:2b:a6:
bf:2a:8a:9e:83:d8:dc:45:bd:b6:b9:02:54:40:4a:
cf:ea:3d:d8:50:6b:3f:27:50:43:38:cd:29:6c:85:
b7:96:26:fe:c8:d0:a1:e4:78:f6:76:09:45:44:f2:
3f:75:27:04:5c:56:ba:05:b8:6e:ab:e1:d5:d0:db:
ca:3d:54:ba:17:24:b7:33:11:7e:10:3a:55:6f:58:
ad:da:c5:21:13:ae:4b:c8:41:a8:b0:95:67:0e:5e:
75:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:19:2A:1F:06:8B:FF:C2:94:14:3E:6F:83:9E:9E:04:8D:40:9F:32
X509v3 Authority Key Identifier:
keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:10:71:e3:9a:bf:94:1b:f3:23:6a:a1:ad:6c:62:45:fd:88:
eb:bc:a3:73:85:80:52:2c:6d:ca:4b:44:24:e5:00:54:1d:89:
5f:44:bd:8e:3f:05:84:06:1e:86:e5:b1:78:b9:d9:78:f7:5d:
c4:24:f3:d1:c6:b7:87:a0:da:c1:65:1e:6c:67:f0:d7:d6:86:
14:db:2e:1d:22:92:28:1c:37:85:0f:1f:12:cd:0c:fd:de:29:
cb:d4:bf:7f:a8:58:50:a7:e1:3c:84:a7:df:41:31:2f:d9:bd:
dd:a8:d4:08:69:56:fe:70:12:f2:01:b8:d5:04:96:c7:04:89:
a3:44:a7:54:79:2b:95:c6:78:ca:4e:7c:a6:49:fe:01:04:62:
a7:20:7a:1a:86:d0:4b:75:ab:ff:fc:0c:67:0d:5d:99:e0:90:
05:b0:e0:59:f9:65:23:ea:bc:21:62:a8:98:30:bf:97:df:44:
fe:20:b7:76:fe:0c:67:cc:d5:7b:bc:e6:d6:91:9f:d4:67:34:
5f:b3:0c:e1:9e:c0:41:6e:a4:0a:4a:6a:ea:0b:64:38:ac:8c:
89:2e:a8:b5:43:3e:98:4f:7f:d0:70:38:31:42:fa:4a:fa:e9:
2e:58:a0:ad:53:03:15:6c:4c:c6:52:1c:e1:5a:9a:77:fc:25:
51:5e:92:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:22:19 2026 by rpki-client