
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
File: mtiSjq8lxRyzsyEdSba6ufC59n8.mft (raw, json)
Hash identifier: Ih0Ru0IvuUILaZKss8fOHOF7vGMMPvWFIQf9AoWzzZc=
Subject key identifier: B0:61:8B:1E:2E:7F:15:69:AD:EA:93:2B:63:40:0A:59:27:BC:C0:79
Authority key identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F
Certificate issuer: /CN=A91EBD8F/serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
Manifest number: 91
Signing time: Sat 19 Sep 2026 07:29:01 +0000
Manifest this update: Sat 19 Sep 2026 07:29:00 +0000
Manifest next update: Sat 26 Sep 2026 07:29:00 +0000
Files and hashes: 1: mtiSjq8lxRyzsyEdSba6ufC59n8.crl (hash: zmCVfov4ofgxwFTBVppLAUjPvXjwcADxVa9ulR07oQ8=)
2: 805F9336DF1611F0ADE7C949616F56BC.roa (hash: Ifqu/imW1CpJtOK3B5gKpgSp1ZH+G/n9WtAUtx4GCTI=)
3: 80EEB89ADF1611F0ADE7C949616F56BC.roa (hash: T0uD7GQksTME+qhX3xTaNiGDGWI7HGkb3DLPjDo3u3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl
rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBD8F, serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F
Validity
Not Before: Sep 19 07:29:00 2026 GMT
Not After : Sep 26 07:29:00 2026 GMT
Subject: CN=6aae39bc-5467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:6e:cf:a1:5e:a6:e0:db:9f:de:b5:68:a7:
82:97:0c:2b:33:3a:bd:e7:67:d6:29:87:eb:ab:fd:
84:e2:03:a3:ce:9c:7b:13:ef:aa:79:18:4e:05:9d:
ae:f2:8e:de:02:6f:ed:69:97:5b:fa:c0:ba:67:68:
26:51:1d:fa:f9:ad:37:d8:56:a0:6d:4d:c2:7f:de:
84:e6:e5:10:5a:02:90:3d:66:46:17:10:ca:87:89:
e2:c8:52:b6:83:93:33:d9:1d:88:2b:57:15:85:10:
8b:22:77:35:ce:1e:41:88:2b:57:59:c8:6a:cf:f7:
76:05:f1:1b:47:dd:ae:ec:ce:dc:17:a6:6d:d8:74:
dd:bd:9b:50:33:02:ae:b1:81:3b:8c:d6:25:e6:e9:
fa:38:a0:ee:74:e3:83:d1:f7:f2:e6:03:a3:fb:ee:
87:6e:24:62:e0:ca:8b:7c:d1:ae:3b:96:ba:15:9f:
e2:60:2b:1d:65:6b:dd:45:59:89:08:2f:06:45:46:
27:d6:4e:33:d6:ed:69:98:92:56:71:49:9b:20:ba:
24:12:6d:7a:79:4b:03:65:b8:24:7f:a5:6e:3e:b1:
f4:d4:d8:2b:03:f8:e6:52:4a:c9:f6:b9:18:76:94:
bc:f0:58:d5:c9:88:be:fc:f7:ac:5e:05:18:77:b8:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:61:8B:1E:2E:7F:15:69:AD:EA:93:2B:63:40:0A:59:27:BC:C0:79
X509v3 Authority Key Identifier:
keyid:9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:af:61:02:5d:47:f1:d5:a3:6d:17:64:f5:1b:03:64:9c:df:
1b:06:9f:26:1e:ae:7c:54:94:6e:ff:4d:08:99:47:90:f5:ca:
24:1c:76:ea:e4:3c:a9:8a:95:bc:c9:a4:27:75:ce:5e:d7:4c:
54:28:96:e3:e7:17:bd:a1:83:65:b9:d5:7a:8f:9e:7c:72:c1:
e8:df:a1:98:87:d7:9a:08:a3:0f:41:85:b6:e5:81:ad:91:31:
33:71:64:fd:40:15:d4:03:56:f6:9d:84:31:25:24:e5:ad:de:
12:86:ea:b6:c7:3e:ff:41:53:97:2f:57:0b:e9:40:7a:f0:4f:
be:f4:70:20:24:91:03:19:3e:23:90:69:5a:49:4c:a8:ea:b6:
dd:cc:ee:af:bb:19:ee:c5:f3:8c:f5:5d:b2:c8:4b:55:93:a4:
c9:ec:9c:c8:f2:78:08:5a:fa:e6:aa:f0:aa:8c:0f:dd:29:1e:
3e:0e:f0:0c:f6:c7:c6:af:2f:fa:5c:23:1b:41:63:30:b3:1d:
15:33:5f:72:5c:f4:bc:c9:97:c3:2b:fa:5e:f6:1a:ca:e3:4f:
1e:fd:8d:ac:3c:b8:2a:d6:62:b3:29:1c:39:44:86:f3:90:14:
c7:e6:98:33:2d:58:e7:28:74:a5:e9:36:a2:d2:c9:26:b0:9b:
2d:1c:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:04:40 2026 by rpki-client