
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier: nuzEftrDGsHpLVfrRxHjfmpqXFtwM3wPvMFlE+lpXcI=
Subject key identifier: 21:FB:E0:D8:DB:0C:3C:1D:41:33:56:C4:22:D4:97:B1:7F:83:A1:65
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial: 0333
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number: 031A
Signing time: Mon 21 Sep 2026 00:55:28 +0000
Manifest this update: Mon 21 Sep 2026 00:55:28 +0000
Manifest next update: Mon 28 Sep 2026 00:55:28 +0000
Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: ciwvhvX7P8G74VztuG/OKZxd1H2B44mQ7fnum2EU9eM=)
2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: N8hOIX9lBnkWNR17KITPRqZldmiFlqdcpwwzsFLdg0U=)
3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: yGk/vqcwYlqrGgMj3fbRLifOH/23m2bl0HS4VWGoMYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819 (0x333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Validity
Not Before: Sep 21 00:55:28 2026 GMT
Not After : Sep 28 00:55:28 2026 GMT
Subject: CN=6ab08080-ffa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:fa:18:c9:e0:5f:4f:57:ea:db:84:f7:84:
94:77:24:06:84:a3:51:7c:e3:63:7b:7a:a5:35:be:
7e:97:b1:0e:40:21:99:68:f8:83:cd:e3:85:c2:d5:
e9:ff:9c:44:b7:1b:bf:e2:90:33:95:62:e2:5f:08:
59:25:25:ad:16:37:3f:52:ca:e0:49:30:3b:0d:83:
5c:d4:8f:ad:7f:7a:ff:68:47:c1:cf:3f:93:68:38:
6a:e4:92:53:2b:95:da:66:5f:f6:c1:23:03:ff:56:
90:bd:4c:d3:da:4b:bf:e6:2d:84:da:f5:cf:f8:8b:
a4:44:a1:23:3b:a2:1a:ad:6b:06:6e:8f:48:57:73:
6d:e4:d5:9b:c3:a6:54:33:a2:01:9b:76:ee:77:06:
5e:da:36:bb:7f:b2:c9:f1:5a:3a:7b:23:3b:22:b6:
02:73:20:2a:41:d3:d8:a1:46:b2:d0:e7:46:2e:5c:
1a:93:be:40:e1:a2:ee:50:27:84:a1:ad:7b:84:fb:
c6:99:1e:14:49:40:f2:0b:6d:83:49:0a:b9:b4:b6:
9c:95:eb:79:96:31:3f:5a:93:89:50:6b:07:b5:b4:
1c:e7:35:c6:4b:44:54:61:1d:ee:43:f0:61:d4:cc:
02:38:03:07:72:70:4e:f7:39:d1:1d:da:e8:8b:9a:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FB:E0:D8:DB:0C:3C:1D:41:33:56:C4:22:D4:97:B1:7F:83:A1:65
X509v3 Authority Key Identifier:
keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:01:00:1a:38:01:22:78:2e:b3:15:d9:2b:38:3a:eb:4e:aa:
20:80:db:11:b7:3b:be:51:01:08:c0:db:a1:5c:95:be:de:a5:
f3:8a:4d:3b:d7:76:af:2f:67:ba:2a:7a:61:d6:11:ba:79:9a:
58:df:b6:a9:61:1e:de:60:d9:ea:d3:8c:61:ce:7b:c2:35:c8:
57:1e:38:79:c1:3b:86:78:41:32:6c:d2:67:c5:c2:bc:91:0c:
d9:9a:77:af:8d:85:19:95:28:37:1a:2b:5b:e5:a5:b6:27:53:
54:d3:29:60:a9:63:f3:a8:4f:41:43:d2:7c:72:ce:b1:be:1f:
25:67:67:b5:ae:c8:79:53:9f:4a:eb:8e:11:b0:a9:b6:5c:24:
71:75:12:cf:03:c5:a4:ef:71:a5:d5:81:c2:12:ce:b8:36:76:
bd:c3:0b:38:2d:42:08:e0:54:48:b3:a8:9f:cb:b9:a7:6d:a3:
01:c7:1a:68:07:5a:43:7a:ff:12:11:21:fe:f2:15:d2:80:15:
3a:0a:3c:d4:9b:2c:fe:50:03:04:0f:4f:ee:6e:09:1c:38:30:
c4:ce:54:fe:7c:5b:9e:af:18:ba:3d:05:c8:f0:97:fe:f6:d4:
a5:af:00:53:11:94:79:10:8f:4d:41:48:23:ae:45:79:0d:6f:
ce:f9:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:51:35 2026 by rpki-client