
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
File: efXtpMcOLgPpCLgYwXdY8qZpd1c.mft (raw, json)
Hash identifier: MAhB0u6DK3yvT/jjcGM89NBBLN/W1Lvxru684DUFD+E=
Subject key identifier: BE:68:FC:A6:AA:CF:B7:8F:97:96:70:2A:3E:41:6E:02:14:58:AF:E4
Authority key identifier: 79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57
Certificate issuer: /CN=A91FEB37/serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
Manifest number: 0126
Signing time: Mon 21 Sep 2026 05:45:29 +0000
Manifest this update: Mon 21 Sep 2026 05:45:29 +0000
Manifest next update: Mon 28 Sep 2026 05:45:29 +0000
Files and hashes: 1: efXtpMcOLgPpCLgYwXdY8qZpd1c.crl (hash: /AOgzH2sx2iQdrJHw3duzclhTNg4kbkuvhBLHMMP8JU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl
rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB37, serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757
Validity
Not Before: Sep 21 05:45:29 2026 GMT
Not After : Sep 28 05:45:29 2026 GMT
Subject: CN=6ab0c479-7b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:b3:f5:d9:21:38:29:d1:14:de:8f:4f:2a:
47:6c:91:2d:f4:c6:c0:45:50:38:cf:a1:ad:31:60:
09:67:08:38:be:79:32:6f:32:e2:bb:3d:6b:c8:ae:
1f:c1:bf:ef:4e:dd:ad:db:48:bd:3a:c3:d1:db:7a:
d7:f2:a8:65:28:49:f2:2f:23:25:8d:7c:87:50:2c:
a0:7d:83:c4:e2:f5:d8:79:fe:73:bf:a7:c4:26:e5:
34:85:f4:be:a8:5d:9b:00:a6:42:0d:e2:b9:d9:66:
4f:5f:cb:e5:ad:a6:53:62:5a:b7:51:40:fa:59:f3:
53:be:57:8d:d1:02:2e:6b:72:a2:7e:4d:51:a4:9d:
98:6f:46:df:0b:3c:ce:97:54:0e:4b:e6:fc:25:23:
d0:71:bf:a0:79:15:28:28:7b:51:97:13:41:f8:39:
44:71:81:07:91:dd:b4:49:30:6c:fa:4a:b6:c4:f7:
e4:4c:96:07:9c:69:a7:af:c4:a5:58:8c:b0:b7:5f:
d1:b8:6c:ad:06:14:2d:b0:06:f2:eb:74:59:85:67:
88:ee:b0:83:29:c9:4d:78:45:8c:ca:f1:4d:49:b9:
17:54:e3:30:19:b1:8c:4d:7e:f4:44:2e:d4:77:ef:
5d:65:d7:c0:70:ac:d3:89:5e:b5:de:9e:0a:17:bd:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:68:FC:A6:AA:CF:B7:8F:97:96:70:2A:3E:41:6E:02:14:58:AF:E4
X509v3 Authority Key Identifier:
keyid:79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:b6:55:e7:37:68:87:51:8f:90:61:24:91:3f:81:27:39:4f:
22:7e:e2:a9:a6:71:2d:57:7d:97:78:2d:23:13:29:1c:2e:eb:
08:de:c3:4a:9c:e4:46:3b:13:6e:64:ed:4f:f2:08:3f:06:59:
fa:6e:5a:2e:38:02:a0:ca:be:e0:4e:77:c4:83:17:24:f2:97:
03:c9:e8:e7:10:a5:00:a8:92:2a:d6:67:ac:3c:ad:6e:45:e2:
d9:cb:e1:9d:52:f0:bc:c3:75:24:be:03:74:eb:6e:65:af:97:
67:bc:82:be:f7:95:16:b6:e8:4d:5a:1b:c4:d8:1c:22:9a:58:
53:22:f7:30:15:64:4e:75:04:60:40:2d:d0:cb:54:8b:79:5b:
97:56:a8:07:a4:45:37:70:45:43:fe:74:7d:4f:af:6a:d3:9a:
bc:c5:38:c5:4b:6f:b1:17:c7:3d:2a:9b:ab:ca:c3:09:46:5f:
50:34:65:28:c8:0a:19:83:eb:68:39:33:6d:5e:a9:cb:a9:b4:
46:9a:ac:66:37:ee:8a:d9:cc:5f:26:60:35:71:27:ef:c0:4c:
c5:4a:73:c5:05:cb:54:6d:ea:8e:7f:92:28:a5:53:33:0b:1c:
55:9c:c7:31:0f:1d:33:28:75:41:4e:db:35:ba:e3:63:4b:b3:
35:5c:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:36:45 2026 by rpki-client