
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json)
Hash identifier: v6vg2FiGw/V3Iw8j85xdGQCUAk3mVskhBHpJInoZ/no=
Subject key identifier: 95:76:71:F3:9C:9E:E4:11:23:4E:4A:B9:C2:2E:DE:6D:B5:59:21:30
Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Certificate serial: 040C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
Manifest number: 0405
Signing time: Wed 07 Oct 2026 00:31:23 +0000
Manifest this update: Wed 07 Oct 2026 00:31:23 +0000
Manifest next update: Wed 14 Oct 2026 00:31:23 +0000
Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: jbF04Vz+72JNTp5uH8COauwxU9Ap+9+IMwclmAai8+k=)
2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: SFrPVIEcm3Sob1UjztJCMJRsgyH7hMthtgc0D0N7bCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Validity
Not Before: Oct 7 00:31:23 2026 GMT
Not After : Oct 14 00:31:23 2026 GMT
Subject: CN=6ac592db-c80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:4c:85:f7:c1:72:b7:06:d2:04:e2:9f:a0:
46:94:ef:22:2c:55:7c:be:21:0e:39:db:eb:04:af:
f1:8d:d1:90:25:ff:69:b5:64:74:37:13:4f:45:d1:
aa:da:ce:05:40:3d:a5:db:32:70:cf:f9:79:de:74:
eb:24:fb:c2:3c:49:eb:78:a5:cf:38:ef:e4:fc:91:
35:bd:69:21:e8:72:c0:c9:e2:44:cd:3f:f5:a8:f3:
7f:b2:ef:66:73:df:1d:af:d6:41:9a:ae:c7:d3:e4:
ab:ca:05:ea:48:ef:c8:16:10:b9:9a:d5:a2:65:a3:
e7:8d:26:af:53:03:d1:16:c6:a5:0a:19:9d:b3:d1:
1f:52:d0:72:03:d1:8c:0d:13:f7:65:6f:55:07:a9:
60:22:dc:6d:9f:46:1e:8b:52:07:0a:d5:9f:93:ae:
8f:ce:9c:57:f1:8e:e5:fc:81:50:de:77:a9:db:8e:
49:ca:c4:84:dc:a3:61:4f:60:0c:77:70:35:16:69:
a1:ac:fe:cb:5c:28:ff:24:8f:2c:d0:9f:01:83:16:
d4:ce:0d:7a:8e:a1:fa:9d:9d:69:8f:a1:61:04:4f:
68:3a:4c:f3:93:da:4a:45:39:06:85:3a:c8:63:81:
fd:c3:89:89:c2:f3:20:dd:31:5e:79:ff:75:ea:2a:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:76:71:F3:9C:9E:E4:11:23:4E:4A:B9:C2:2E:DE:6D:B5:59:21:30
X509v3 Authority Key Identifier:
keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:09:80:ec:8b:25:4a:f6:a8:94:26:89:e7:e7:73:6e:e0:b6:
35:e6:5b:9a:0a:df:7c:a6:d8:53:83:64:c3:48:50:00:38:93:
a2:44:4a:89:f6:6d:38:c1:6d:71:84:74:83:05:f5:53:4a:99:
ff:bd:14:49:31:29:14:e8:d1:7a:87:b3:d0:42:45:93:5b:01:
14:ef:42:5c:0a:63:f7:10:db:76:59:bf:16:58:5f:14:f8:1c:
69:c2:db:fc:a7:22:12:c0:67:ff:34:8f:d4:79:9a:06:1e:27:
1a:3f:d7:13:4d:3c:33:20:c5:3e:54:21:4e:e9:5e:cd:64:88:
ce:c3:1d:77:e9:58:54:50:cc:8e:28:1b:bf:97:c5:36:7f:26:
ea:69:c9:e8:f7:fa:38:5f:43:c5:3f:18:1c:a7:f6:c1:aa:76:
6f:d8:98:66:a4:29:e3:99:b2:ad:91:06:01:7e:3e:9d:de:b6:
50:ec:e4:86:51:65:d1:49:62:d3:d5:72:b6:d5:08:9a:2f:62:
d4:d7:6c:fe:50:a2:f2:88:77:4a:35:b8:af:ca:7f:c5:0f:68:
0c:de:7b:45:05:32:53:34:81:f7:2a:3f:bf:3f:89:49:e7:f3:
5c:47:6f:38:79:e9:82:19:52:25:5f:8b:a8:1a:b6:ae:fe:83:
34:7d:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:15:22 2026 by rpki-client