
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json)
Hash identifier: 3qtZX1+2z3zge4WYVY0e7EZgmoUlLxpNLWmhWi4vQt0=
Subject key identifier: 33:D6:E9:B4:A5:81:4C:03:13:75:82:04:3C:19:0A:74:6E:9D:A3:28
Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Certificate serial: 0952
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
Manifest number: 1C06
Signing time: Sat 26 Sep 2026 17:05:59 +0000
Manifest this update: Sat 26 Sep 2026 17:05:59 +0000
Manifest next update: Sat 03 Oct 2026 17:05:59 +0000
Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: 1HydQFT+FyP28yK2p7XmBavquqrdLIfFsxGgRL4h7AA=)
2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: onIQBBgaYqQQQF/MByH2Uc0IXjytJM2CNUv7KzbvAOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Validity
Not Before: Sep 26 17:05:59 2026 GMT
Not After : Oct 3 17:05:59 2026 GMT
Subject: CN=6ab7fb77-2abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:c0:2d:ba:6c:0d:1f:dd:6e:8d:25:44:3b:
d5:13:71:b0:df:05:09:82:45:b0:d2:44:ac:62:52:
ba:77:2c:77:70:7b:40:98:ad:76:33:42:91:b5:ae:
5a:a5:ec:77:75:5e:bf:00:55:c9:73:54:04:49:18:
2c:ee:21:c0:76:72:46:ac:e5:3e:94:ed:00:99:27:
d5:55:b5:b5:cd:13:3f:5e:82:c4:f4:94:f0:2d:b6:
c5:96:9a:ed:1e:0c:23:ce:4f:36:54:2b:08:97:c0:
f8:2c:1b:bf:8d:fd:11:af:cb:76:8f:38:53:23:7c:
1f:d6:eb:c1:38:88:d3:d6:44:06:18:d2:61:c4:52:
6f:02:15:da:05:25:86:e5:a5:fa:97:d6:70:04:dd:
32:d1:3f:a5:5d:28:0e:ae:a6:a6:0b:86:72:6a:9b:
b3:f8:00:5b:af:92:3a:bf:9f:e8:17:c3:d3:07:af:
61:35:1d:99:6e:72:35:1a:b2:90:42:85:38:5d:0e:
73:e2:60:fa:40:a9:e1:7f:e6:9b:06:61:a4:a2:df:
e0:a3:66:37:77:07:53:e0:63:fc:8d:58:34:0b:32:
77:d7:45:7b:e8:d4:7a:a4:e0:84:20:49:b3:69:00:
13:89:47:5b:06:6a:3c:9c:59:dd:1c:d3:df:d8:0b:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D6:E9:B4:A5:81:4C:03:13:75:82:04:3C:19:0A:74:6E:9D:A3:28
X509v3 Authority Key Identifier:
keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:13:bc:9d:72:71:02:68:7c:59:e9:9f:e7:f6:7a:6f:66:98:
79:d9:51:66:68:4c:c7:5f:cc:89:9e:85:6d:2d:fa:87:98:e5:
93:a6:40:22:15:0a:92:32:1b:2a:d6:86:08:d8:bf:e2:ac:b5:
7c:0b:34:2f:af:81:4b:5f:33:00:81:4a:88:98:d6:52:cf:a4:
d0:e6:71:26:6c:a6:d7:e7:4f:25:b9:c5:ce:df:c4:17:1a:5e:
95:90:ea:25:7b:e6:1d:f1:c7:5e:b1:e5:e1:05:34:bb:e2:b2:
56:ed:34:80:f7:28:f6:82:c1:6d:ba:47:d2:5c:c7:19:42:89:
3c:58:e8:7e:d2:9a:93:ab:b1:21:4b:a1:0a:78:f2:8b:2e:5a:
2b:8a:a1:42:40:03:b3:20:c8:6e:2f:8f:53:15:78:26:4f:6d:
31:af:9a:93:0e:bf:fd:d0:8b:40:bd:e9:dc:1f:cd:93:36:5b:
80:e8:03:5b:69:f4:6b:78:b2:f6:a8:f1:ab:48:6d:19:23:03:
32:87:e8:dc:11:e3:0e:7d:c5:5b:e2:1d:a5:f4:0d:f0:35:bf:
0f:94:c1:86:79:d9:e4:27:96:5b:3e:8f:02:28:de:8c:6f:79:
86:aa:fd:fd:b7:89:67:87:cb:d9:84:aa:88:ae:b3:16:a2:f7:
ba:ef:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:41:32 2026 by rpki-client