
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
File: rroZtvzB0hrnExdw57HaPhR17JA.mft (raw, json)
Hash identifier: UxG/YaYriH/V7HFn8RfYX2C4xKw/IWM/edVaEob858U=
Subject key identifier: 1A:51:22:2E:8F:9B:27:FA:52:D7:FB:01:31:F5:BB:A0:89:7B:54:8C
Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
Certificate issuer: /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Certificate serial: 0C2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
Manifest number: 0C1E
Signing time: Sat 26 Sep 2026 18:54:08 +0000
Manifest this update: Sat 26 Sep 2026 18:54:07 +0000
Manifest next update: Sat 03 Oct 2026 18:54:07 +0000
Files and hashes: 1: rroZtvzB0hrnExdw57HaPhR17JA.crl (hash: jre4+Dx0IWHTTl7F73eQO3psTuiCqBWRezfZVWCCnlY=)
2: 4BE5757097E511F19253A8476911F970.roa (hash: kp1Hz7ncHNN2Q2V/Opxr60e+iP8FHQPNukxZnZrbqQU=)
3: 8149B27675E911F19295859071A30FBC.roa (hash: tdvIAv84+ObvJ7mIypgIHxRBp8brbZOBkzTBZnvClfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3117 (0xc2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Validity
Not Before: Sep 26 18:54:07 2026 GMT
Not After : Oct 3 18:54:07 2026 GMT
Subject: CN=6ab814d0-95a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:b7:b7:72:9f:c9:2a:10:ab:ec:52:02:87:
2e:72:92:af:00:1e:4d:01:0a:99:26:8f:0f:91:dd:
4b:cf:5b:40:ab:ae:0c:fb:b3:99:74:aa:3f:fd:05:
96:00:5b:58:d8:24:7f:51:f2:e6:ed:62:de:89:34:
b6:27:10:60:dc:00:86:7d:90:91:70:83:a5:f6:df:
4b:0a:ba:d4:79:69:22:ad:25:34:d0:9c:74:39:34:
a4:5a:95:e2:3d:6e:52:16:67:be:61:2b:21:77:ac:
ed:a6:99:09:7c:18:d3:1f:01:c1:ff:20:65:b1:d8:
d7:b4:d8:be:d5:72:44:f9:ba:07:cd:33:f0:b1:cf:
24:3c:79:ec:92:28:6e:48:5c:8e:ba:5e:e4:a9:01:
28:60:9d:ed:17:d9:bd:fb:99:ae:e8:dc:d7:09:32:
25:19:e0:02:dd:ea:28:21:c5:4e:2d:be:bf:29:8e:
f2:d7:38:97:7e:2c:e1:f5:5f:a2:0f:05:cb:ee:ff:
1f:b6:d8:bc:6f:bd:ff:4d:89:ac:01:45:5c:0b:33:
7d:8f:a8:62:26:93:8d:d3:2b:a1:b7:31:70:c0:78:
74:24:2a:d6:2a:f4:c7:54:e0:8f:42:8d:5a:28:f3:
32:a4:92:0d:eb:c6:0d:06:0a:1c:1d:27:5d:79:83:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:51:22:2E:8F:9B:27:FA:52:D7:FB:01:31:F5:BB:A0:89:7B:54:8C
X509v3 Authority Key Identifier:
keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:11:23:11:a1:78:e8:c1:ed:18:58:4b:6f:57:bc:1a:3d:ba:
91:68:27:24:ee:1d:ed:e2:f0:14:b5:9b:e7:fb:51:3d:f4:98:
17:85:73:f0:6a:f7:91:28:70:ee:93:2f:0e:b9:6c:11:34:2c:
7f:df:ca:f1:d1:1f:3a:c8:53:99:d2:a2:a1:23:d6:04:28:12:
8d:ec:0b:2e:aa:90:f6:2f:b9:81:79:ee:7f:4a:d8:80:38:e9:
0a:da:79:1b:bd:fa:03:11:da:b4:05:6e:fe:fa:81:f9:1b:d2:
89:7f:2a:47:78:40:1c:22:80:15:61:c8:86:4b:44:b0:96:95:
15:aa:e2:d1:bd:9f:8b:56:ae:c6:11:1f:23:66:b6:06:d3:40:
e3:3a:59:65:eb:f1:58:1c:6a:3d:fb:b2:4f:9a:42:f7:99:eb:
0c:26:02:c9:fa:65:89:61:18:3a:74:19:61:cd:a9:fe:04:89:
11:f3:6d:9e:2d:1e:31:6a:41:96:ca:c4:8f:65:a7:74:8e:53:
2d:56:a5:96:ba:24:18:1b:8c:74:9b:ea:01:37:05:fe:92:63:
00:da:50:90:31:a5:43:ca:a0:80:b2:6b:10:19:44:60:18:cc:
aa:1b:22:70:9a:30:09:09:2e:e9:dd:19:22:13:37:57:1d:aa:
ec:a0:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:14:45 2026 by rpki-client