
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft
File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json)
Hash identifier: eEtOeFYJni06/Tp/QHDMs0g+KT2enzjt1Rn8M/J7oSo=
Subject key identifier: A9:A2:CD:BE:47:85:F4:45:6B:AB:54:2D:35:BB:E7:D5:B5:0A:EE:47
Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48
Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948
Certificate serial: 12BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft
Manifest number: 129F
Signing time: Thu 08 Oct 2026 17:08:29 +0000
Manifest this update: Thu 08 Oct 2026 17:08:28 +0000
Manifest next update: Thu 15 Oct 2026 17:08:28 +0000
Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: FIj6tSJ1x5fMMdWmnFfdlyg5hL6ulMy7puKSb0sl5z0=)
2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: x14FGM59KBAJVApiuTvfAAn5zOSyd0j7HZF03bpVJMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl
rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4796 (0x12bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948
Validity
Not Before: Oct 8 17:08:28 2026 GMT
Not After : Oct 15 17:08:28 2026 GMT
Subject: CN=6ac7ce0c-e388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:f4:c9:a4:99:d8:7a:3f:b6:7f:ba:81:c5:
7b:dd:1c:4f:35:a2:63:a6:a0:03:a6:d8:d5:d3:e5:
92:85:e5:95:39:19:0a:8d:7b:ed:c5:ec:3b:e0:99:
73:b2:66:74:6f:9c:c0:d3:20:56:ac:86:09:52:39:
e4:72:a3:36:b9:f3:ca:af:14:4a:8b:8b:a2:1c:5f:
52:e5:4a:99:a3:e8:f7:d0:24:e5:51:f0:54:ea:e6:
12:9d:85:d0:87:4b:98:6e:63:52:56:2e:b6:19:e8:
c4:3b:60:4f:fe:66:12:e0:b8:6b:df:10:f2:c3:e9:
67:c9:80:d4:c5:97:0a:15:d8:50:5e:34:6f:d9:2a:
f3:21:ea:83:06:67:14:99:11:91:8b:be:18:4d:f2:
30:fa:a8:69:f1:2c:26:dd:1f:0b:af:08:1b:4d:7c:
ce:99:e4:28:18:f0:c0:0a:e0:16:31:9d:5e:9c:5c:
78:5d:19:53:47:52:dc:c1:4e:ff:78:1e:bf:8b:bb:
4f:50:60:24:7c:bf:b6:a9:65:c8:ed:ca:c3:4e:a3:
8e:87:2e:1e:46:aa:cc:16:8c:00:6a:b1:2b:38:86:
cc:d7:fd:ab:11:2e:d5:52:3c:3c:59:09:88:4c:d8:
31:08:4b:22:5d:df:ca:30:9d:06:09:cb:df:a9:d9:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A2:CD:BE:47:85:F4:45:6B:AB:54:2D:35:BB:E7:D5:B5:0A:EE:47
X509v3 Authority Key Identifier:
keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:60:1e:3e:8d:c2:e2:ec:5b:b4:d4:76:74:1f:a7:af:06:64:
09:26:13:16:73:29:2a:c5:da:ff:40:ca:72:76:9c:95:56:f3:
a4:c5:4e:46:75:6d:c4:14:17:b1:e9:ee:de:3f:73:f0:0b:73:
36:f0:a7:1a:2e:c6:74:1c:70:fc:84:e1:fa:fb:3f:f0:19:56:
5b:2f:78:6e:dd:29:7f:72:f5:0a:05:b9:07:e2:78:ba:b4:10:
2b:95:15:64:d5:25:ea:98:af:22:e7:95:5e:f9:41:43:38:a6:
01:eb:d9:36:ce:bf:fb:81:7f:19:03:24:0e:cf:6f:d3:da:3c:
c4:2b:83:f0:9e:d1:99:6a:1b:90:c5:0e:41:5d:96:08:32:d2:
9c:53:d5:a9:75:c1:01:30:9a:5c:94:4b:37:89:98:18:de:34:
4b:58:4e:4b:c2:38:85:bd:8d:fa:6b:b7:23:9c:0d:05:84:be:
2b:1e:9b:87:c6:b1:e4:fb:67:a2:0b:f3:4b:6b:39:74:0b:99:
87:fa:e6:3b:13:ca:a9:3c:8c:cd:54:35:36:be:74:89:77:35:
ad:be:4b:b8:00:73:5a:94:f1:0a:f8:a6:56:dc:63:43:b7:7f:
d7:26:6f:36:f3:e9:83:08:90:b5:70:66:1b:60:9d:7e:7b:d5:
93:f0:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:38:23 2026 by rpki-client