
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
File: -94EjDgE9v13dFfXTlx8bq-XMcc.mft (raw, json)
Hash identifier: yTc4DaBRsIoiplEe1J2WrmqzigXSdfRJTQ4pq0z1FFY=
Subject key identifier: 8A:E8:0A:66:1C:79:CA:3A:BA:29:35:0D:4C:D3:71:C4:72:6F:97:E9
Authority key identifier: FB:DE:04:8C:38:04:F6:FD:77:74:57:D7:4E:5C:7C:6E:AF:97:31:C7
Certificate issuer: /CN=A91F7113/serialNumber=FBDE048C3804F6FD777457D74E5C7C6EAF9731C7
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
Manifest number: 32
Signing time: Mon 21 Sep 2026 08:39:09 +0000
Manifest this update: Mon 21 Sep 2026 08:39:09 +0000
Manifest next update: Mon 28 Sep 2026 08:39:09 +0000
Files and hashes: 1: -94EjDgE9v13dFfXTlx8bq-XMcc.crl (hash: 6cOIQ98BdYNnFCUVSPLzEG+XzH0cvpqscQKSvzSykJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.crl
rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7113, serialNumber=FBDE048C3804F6FD777457D74E5C7C6EAF9731C7
Validity
Not Before: Sep 21 08:39:09 2026 GMT
Not After : Sep 28 08:39:09 2026 GMT
Subject: CN=6ab0ed2d-2820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:97:fc:00:4f:86:7d:eb:7b:93:1d:48:34:
d9:ff:46:42:c3:f9:80:c5:bf:65:1a:b2:be:1e:0c:
87:b5:aa:74:38:f2:83:5f:19:b0:6b:eb:0f:81:cb:
30:c3:5c:31:4a:01:e5:6e:89:17:3c:ab:78:5c:8b:
6e:ce:f2:cb:78:c9:04:23:69:8e:7a:46:dc:6a:dd:
70:00:db:82:58:7a:6e:d0:ec:b7:77:37:46:1c:83:
fd:12:a7:77:57:0b:91:b1:11:a1:d5:6c:6e:c8:05:
7e:18:61:8b:fb:26:0d:1c:c3:fa:98:1a:c9:fb:09:
99:4c:dc:e5:8c:81:67:ea:4c:c4:40:50:c7:fb:68:
86:29:11:3d:10:0d:24:64:b9:ec:c4:71:30:f3:91:
a2:2a:6f:31:38:a9:ca:1a:e5:93:c4:14:1c:e8:98:
4a:7d:2e:91:05:82:82:0d:26:80:c4:9c:78:e5:01:
bb:d2:a0:6d:bc:73:51:e9:bf:7f:26:2e:6d:45:5c:
51:5e:08:4e:07:dc:4c:b7:c4:08:c2:2a:42:59:2c:
e2:4b:9f:d2:60:aa:7f:41:a7:34:2a:e6:c4:86:1a:
82:a9:d6:68:4a:6d:2e:3a:d4:5a:12:db:d2:b6:78:
45:03:4f:b6:e6:0b:1d:8f:20:11:34:cc:d0:57:61:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E8:0A:66:1C:79:CA:3A:BA:29:35:0D:4C:D3:71:C4:72:6F:97:E9
X509v3 Authority Key Identifier:
keyid:FB:DE:04:8C:38:04:F6:FD:77:74:57:D7:4E:5C:7C:6E:AF:97:31:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e4:40:d0:26:52:e4:15:3d:c9:35:b3:d9:40:b8:55:4a:0a:
82:e7:57:ec:bf:94:eb:82:83:8d:be:c3:6c:27:e6:4c:00:e5:
4c:ee:c8:bc:82:bc:e0:34:33:44:4c:c4:ef:df:b1:b4:16:77:
e3:f8:fc:a4:63:08:24:ea:af:6e:54:59:7e:53:48:1d:92:8b:
8d:8d:0f:89:ad:ff:77:4b:90:bd:ec:06:ae:bf:2e:77:e5:81:
05:7c:c3:ae:eb:66:4d:8b:42:c7:b4:18:26:ba:de:2c:69:ca:
dd:56:10:57:4f:11:0b:77:0d:9a:4e:42:8c:8e:7e:13:21:53:
ef:65:be:64:66:d6:3e:02:b2:73:cd:8a:5f:01:24:86:72:5f:
c0:52:d3:30:11:6b:3a:ee:26:21:b3:81:19:ef:db:fd:47:f3:
ac:fc:05:9b:c8:44:10:65:8a:65:0b:fd:a1:29:cc:b2:e4:08:
7d:c6:00:c1:2a:01:33:69:33:dd:13:44:5b:db:9d:c7:e2:f6:
0a:b2:12:e1:fe:05:04:1a:66:7e:68:d8:9b:3e:82:cb:f6:8d:
b7:60:42:a3:e8:be:65:1e:b6:42:4f:be:34:ba:5f:0f:6c:93:
ef:b6:d4:19:68:e8:56:f0:33:33:69:56:cf:1c:ff:07:c2:fb:
4e:ea:7b:1b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NzExMzExMC8GA1UEBRMoRkJERTA0OEMzODA0RjZGRDc3NzQ1N0Q3NEU1QzdDNkVB
Rjk3MzFDNzAeFw0yNjA5MjEwODM5MDlaFw0yNjA5MjgwODM5MDlaMBgxFjAUBgNV
BAMTDTZhYjBlZDJkLTI4MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6/5f8AE+Gfet7kx1INNn/RkLD+YDFv2Uasr4eDIe1qnQ48oNfGbBr6w+ByzDD
XDFKAeVuiRc8q3hci27O8st4yQQjaY56Rtxq3XAA24JYem7Q7Ld3N0Ycg/0Sp3dX
C5GxEaHVbG7IBX4YYYv7Jg0cw/qYGsn7CZlM3OWMgWfqTMRAUMf7aIYpET0QDSRk
uezEcTDzkaIqbzE4qcoa5ZPEFBzomEp9LpEFgoINJoDEnHjlAbvSoG28c1Hpv38m
Lm1FXFFeCE4H3Ey3xAjCKkJZLOJLn9Jgqn9BpzQq5sSGGoKp1mhKbS461FoS29K2
eEUDT7bmCx2PIBE0zNBXYdFHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiugKZhx5
yjq6KTUNTNNxxHJvl+kwHwYDVR0jBBgwFoAU+94EjDgE9v13dFfXTlx8bq+XMccw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3MTEzL0Q2NzI5RjhFNkFE
NTExRjFBMTU1OEY5RTZDNDdBODg4Ly05NEVqRGdFOXYxM2RGZlhUbHg4YnEtWE1j
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLTk0RWpEZ0U5djEzZEZmWFRseDhicS1YTWNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3
MTEzL0Q2NzI5RjhFNkFENTExRjFBMTU1OEY5RTZDNDdBODg4Ly05NEVqRGdFOXYx
M2RGZlhUbHg4YnEtWE1jYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB95EDQJlLkFT3JNbPZQLhVSgqC51fsv5TrgoONvsNsJ+ZMAOVM7si8grzgNDNE
TMTv37G0Fnfj+PykYwgk6q9uVFl+U0gdkouNjQ+Jrf93S5C97Aauvy535YEFfMOu
62ZNi0LHtBgmut4sacrdVhBXTxELdw2aTkKMjn4TIVPvZb5kZtY+ArJzzYpfASSG
cl/AUtMwEWs67iYhs4EZ79v9R/Os/AWbyEQQZYplC/2hKcyy5Ah9xgDBKgEzaTPd
E0Rb253H4vYKshLh/gUEGmZ+aNibPoLL9o23YEKj6L5lHrZCT740ul8PbJPvttQZ
aOhW8DMzaVbPHP8HwvtO6nsb
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:11:24 2026 by rpki-client