
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier: ZN3Sb9OD7svjYEqLa2+HzkN6SfK/7EcgrqFkv4GBqYI=
Subject key identifier: F9:91:DE:FC:92:31:6E:38:68:96:0F:6D:85:83:32:1E:18:BB:C8:D0
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial: 1235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number: 121B
Signing time: Wed 14 Oct 2026 17:13:36 +0000
Manifest this update: Wed 14 Oct 2026 17:13:35 +0000
Manifest next update: Wed 21 Oct 2026 17:13:35 +0000
Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: tBmRMgcQzVsBhbLXGlwwGSIWnkk28wfYR/hsu8/LZAc=)
2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: dJ40ZvkvEtXP02NZp3lyJfj9qvrbjW3gvJFMNBqnO1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 17:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4661 (0x1235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Validity
Not Before: Oct 14 17:13:35 2026 GMT
Not After : Oct 21 17:13:35 2026 GMT
Subject: CN=6acfb840-3534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:44:be:87:75:cb:4f:b4:50:cc:7a:12:36:
5f:34:f0:01:31:51:38:9f:5b:b4:c6:87:7f:ec:78:
1b:f9:74:62:ff:1e:35:dd:f9:23:86:a4:4e:04:f5:
f5:75:90:aa:1d:1d:4c:a3:a8:0a:34:e2:25:c6:f5:
35:67:f3:f3:8b:19:41:ae:a9:c2:66:cd:61:5f:a5:
f5:f6:ba:a7:4e:d3:0e:e5:e2:94:f7:80:5c:a8:5e:
c1:80:e4:3e:f3:d9:8a:06:13:95:31:88:6e:ad:97:
ba:7e:ff:80:c1:5a:e9:9b:0e:e9:30:38:59:14:fc:
5f:17:8c:81:cd:6c:7a:22:a2:fc:73:1d:50:5d:fd:
c3:06:8e:45:cc:5f:51:a1:12:99:b9:c3:90:03:38:
38:81:1d:2b:78:f6:4e:70:99:ba:aa:d9:2b:b2:39:
28:c8:25:6b:59:e1:c2:13:cc:3e:84:68:2e:2c:f0:
cc:9f:fc:4b:83:c5:6c:8d:2f:0b:f1:a9:aa:21:e4:
c7:e7:b9:fa:b0:c5:76:16:af:d5:43:a1:c4:55:a5:
d7:67:16:f4:63:f7:72:7f:22:18:c1:71:25:83:e1:
aa:17:8d:ff:06:80:1c:72:7b:53:dd:55:0d:99:7f:
6a:2e:e7:77:2c:84:2b:f3:41:5b:a2:4e:df:52:59:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:91:DE:FC:92:31:6E:38:68:96:0F:6D:85:83:32:1E:18:BB:C8:D0
X509v3 Authority Key Identifier:
keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:7f:bc:ee:3c:82:46:45:3d:93:6f:13:e5:12:86:52:85:19:
cd:fa:ca:41:02:cb:0a:d9:fb:a7:d8:3f:35:2d:19:fd:a8:68:
04:e5:c2:3f:a5:52:e4:8b:08:f8:17:9b:14:28:59:43:be:55:
b0:ab:82:a1:3f:7b:d5:eb:89:d3:3e:6d:aa:14:33:9d:b5:04:
d9:71:1e:f4:ce:0c:65:b6:62:3d:19:50:ea:b4:2f:9a:b0:37:
a5:9d:d8:5c:66:48:a7:69:f5:c7:0d:64:30:9e:51:eb:cb:5e:
10:22:75:8a:f3:84:3c:b8:3e:7b:a5:7b:c3:cc:56:be:62:82:
6f:98:9a:ff:85:80:b2:17:e3:65:3c:71:9f:71:d3:6d:ea:7d:
01:10:29:5c:b0:fc:df:f2:21:d9:f1:53:ba:ef:2d:c3:ab:f0:
bf:6b:18:6a:aa:b6:5c:cb:25:ae:12:18:db:f7:a7:bb:db:2a:
31:37:cd:54:cb:fe:1d:1b:cd:9f:3c:81:c5:23:1f:df:6e:3a:
2a:f2:34:c3:da:0a:91:2b:24:e6:ad:87:e2:00:57:37:28:bf:
4d:42:2e:e1:19:b9:ab:4e:75:59:80:1a:dd:b3:fc:89:ef:42:
5c:18:c0:50:8a:36:5a:a8:dc:4a:7e:5b:f7:94:62:13:d2:6f:
5c:9d:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:02:59 2026 by rpki-client