
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json)
Hash identifier: 2ctqkMYMDDeZP4Ak9iFGuNhnBBgV1tpu7HzysOco9GI=
Subject key identifier: 8F:69:EF:92:12:6D:FC:0F:81:7E:DA:AE:2C:28:D9:C7:06:DB:2E:D6
Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Certificate serial: 0D05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
Manifest number: 0CF6
Signing time: Fri 02 Oct 2026 19:35:57 +0000
Manifest this update: Fri 02 Oct 2026 19:35:56 +0000
Manifest next update: Fri 09 Oct 2026 19:35:56 +0000
Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: K8bCmLrNvaie8aYCfuPvdKH+zDZzYN2m1dkzBotZOgM=)
2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: r7Y9fnCxdSyyH2A4hgDRG+pQ+bI6QrGfxRhy4uVO9qQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl
rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3333 (0xd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Validity
Not Before: Oct 2 19:35:56 2026 GMT
Not After : Oct 9 19:35:56 2026 GMT
Subject: CN=6ac0079d-b80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:df:1c:6c:0b:09:18:88:21:c8:bb:2a:cf:49:
bf:b1:38:17:5a:37:2d:6c:44:c1:27:79:dc:fb:6b:
df:ce:fc:87:7e:19:5b:a9:97:12:0d:e5:f1:b0:cf:
e5:54:b3:ca:a7:d1:d6:44:c2:d4:85:32:42:20:a6:
42:71:a2:a2:af:34:2b:be:1e:13:30:e4:c1:ee:ec:
36:1a:a3:36:e7:d4:01:b3:98:7f:59:24:e1:b4:66:
ea:a9:cd:e8:ed:6d:86:8b:a7:44:cf:91:3b:7f:ed:
3e:bd:75:82:9a:de:a6:ff:7f:a7:26:b7:4d:c0:ab:
86:26:7c:d8:5d:dc:9e:f1:e8:5f:20:b0:f2:b3:72:
94:8c:15:0f:f8:cd:61:fa:ea:36:41:7d:98:aa:8e:
8b:e5:cf:78:cd:ad:51:c2:cf:63:a7:fd:e8:c8:5e:
e5:f3:a9:33:be:62:9e:49:f7:87:4a:a9:b7:d8:b6:
2d:de:cf:d4:5d:24:65:a0:0c:cc:bb:f8:eb:c1:d5:
08:c6:16:14:5e:2b:15:b2:9e:40:df:eb:48:d8:2f:
92:ea:51:f6:da:e0:96:f8:bd:c3:0b:16:b9:fc:04:
a4:1d:6b:bc:96:a4:8e:43:db:c9:f7:e8:c8:1a:89:
d9:cc:cf:af:87:e7:2e:79:cc:d1:82:0e:19:42:c7:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:69:EF:92:12:6D:FC:0F:81:7E:DA:AE:2C:28:D9:C7:06:DB:2E:D6
X509v3 Authority Key Identifier:
keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:4c:ee:c0:d3:c0:90:7d:ad:73:ce:92:02:c5:1d:24:f0:81:
bb:95:a9:64:32:3a:ce:d6:e6:4e:99:79:6d:36:e1:68:d9:e4:
99:7b:c3:08:02:62:56:84:1a:24:e0:c9:25:e1:37:02:25:40:
a6:88:f7:c9:f9:1c:87:08:79:cb:5f:06:b3:a1:32:a5:93:4a:
fd:62:15:d8:ad:fa:92:2d:4a:0e:42:1e:ae:e2:40:90:76:18:
c5:2b:24:26:34:6d:2f:84:30:ec:5b:98:2f:5b:cf:ec:ad:14:
9d:d9:9a:0a:b0:62:9f:86:11:47:6a:7f:4f:6b:20:58:a6:cb:
83:7a:bc:1e:d3:58:5e:5f:ee:59:13:7e:17:78:30:f3:01:a4:
ae:1b:13:a4:9b:45:99:99:46:6c:f8:3e:83:7d:35:8d:55:c5:
d7:d3:4e:a9:3f:50:8f:3a:b2:92:06:39:0f:27:d3:34:3a:29:
4b:4c:fc:55:51:05:ea:01:04:05:87:8f:19:7c:7a:bb:1f:a7:
30:ab:d5:13:e3:1c:78:fa:e1:1c:06:76:d4:73:c8:f7:b0:5a:
a1:96:36:36:d8:f0:d0:a3:56:c3:fd:83:a9:cf:ec:33:19:bf:
c6:a1:51:24:48:18:ad:8a:e9:35:f2:60:57:ae:af:4f:1a:f9:
39:fd:fa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:25:55 2026 by rpki-client