
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
File: VAR9J873NG9Bde-sc0SUrbsFe1U.mft (raw, json)
Hash identifier: ASHY0tNDDJcU3K8I3KD6M4wnHHWL5EP5hQpWM1JD4Qk=
Subject key identifier: A4:19:D0:70:98:4F:A5:BF:67:9E:98:06:D5:BF:4E:E2:F6:36:66:16
Authority key identifier: 54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
Certificate issuer: /CN=A91127C1/serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Certificate serial: 0ACC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
Manifest number: 0AC1
Signing time: Tue 06 Oct 2026 19:35:54 +0000
Manifest this update: Tue 06 Oct 2026 19:35:54 +0000
Manifest next update: Tue 13 Oct 2026 19:35:54 +0000
Files and hashes: 1: VAR9J873NG9Bde-sc0SUrbsFe1U.crl (hash: T+82iDRj4pH0d7ywf3vs6FAiAbggxpLqoNqI0VvsWXE=)
2: 3492D2F083BA11EA8728F076C4F9AE02.roa (hash: Zdi6fMt+tPDgT+ACX97dCbP+zzmo4Zw2wzFoqTQJgBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:35:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2764 (0xacc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=54047D27CEF7346F4175EFAC734494ADBB057B55
Validity
Not Before: Oct 6 19:35:54 2026 GMT
Not After : Oct 13 19:35:54 2026 GMT
Subject: CN=6ac54d9a-d79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:74:90:87:26:9f:64:a9:c6:44:ee:0a:be:
67:bd:43:8e:a2:73:a9:50:33:7d:74:2c:ba:9f:cc:
13:9f:a8:6e:f8:07:5a:59:cc:6f:e8:2c:2b:00:71:
4a:76:bf:da:5c:17:e7:83:46:e8:41:e9:41:fa:60:
6f:bc:04:f0:ea:45:76:2d:2b:bc:ac:4e:b5:2a:22:
1c:f3:d4:a2:bb:37:bf:d7:de:65:55:b4:f2:4c:23:
6c:a9:88:c0:ac:6f:60:73:7f:14:0f:c0:7a:f6:c0:
bf:c7:ab:51:93:ce:da:af:2a:cd:88:bc:1e:e7:70:
96:04:84:f4:b0:76:e9:b9:c7:8c:3c:b0:4e:01:4a:
4d:ac:d6:08:7a:4e:67:25:38:2a:3a:47:05:5e:5f:
31:0b:d5:06:84:fd:3b:06:90:e5:2e:ac:91:72:45:
27:71:b3:3c:1b:15:69:1d:72:62:eb:5c:23:5b:c8:
6c:14:e7:1e:6a:a7:31:8f:89:ba:86:31:78:a1:0e:
94:bd:62:7b:11:fe:f6:e4:99:f2:dd:12:4c:b9:3a:
02:da:25:21:42:19:08:2b:5e:d4:05:1e:05:2e:ab:
1e:9a:7f:3f:30:99:a9:88:fe:12:c7:55:15:ed:8a:
52:5f:e2:e5:71:f1:d2:f2:bc:e2:c4:2f:e9:3d:98:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:19:D0:70:98:4F:A5:BF:67:9E:98:06:D5:BF:4E:E2:F6:36:66:16
X509v3 Authority Key Identifier:
keyid:54:04:7D:27:CE:F7:34:6F:41:75:EF:AC:73:44:94:AD:BB:05:7B:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VAR9J873NG9Bde-sc0SUrbsFe1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/534472CC83B911EA852A1576C4F9AE02/VAR9J873NG9Bde-sc0SUrbsFe1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fb:df:93:f1:46:5d:46:56:e3:ac:ca:92:ae:82:50:db:da:
d3:0a:94:49:7d:2f:97:d8:73:b5:1e:0d:8c:bd:4e:5d:ca:47:
74:5b:26:c4:a7:25:53:4d:1a:75:54:75:74:90:f0:b4:39:d9:
8f:66:cd:06:8c:a5:ff:48:67:b8:93:4f:5a:ef:a6:35:b5:67:
a8:01:cc:32:b1:cd:1c:93:42:23:6c:1f:61:37:f2:ec:9b:16:
89:35:47:58:4a:0d:37:a1:a1:f0:84:1a:1f:fc:79:4d:45:9d:
6b:b5:0f:db:c8:2c:ae:43:3b:f2:3e:5f:b1:0c:ce:19:16:12:
a5:af:c7:29:64:1a:d3:32:f5:a4:0a:19:94:95:1f:47:db:f6:
d2:ff:2c:fe:e9:1a:a9:2d:62:6d:78:21:9b:81:21:fb:69:17:
a0:42:f7:fb:f0:10:04:86:51:e8:10:cd:51:4f:1f:75:b6:d0:
12:93:10:64:07:c9:b3:4a:9f:3c:19:0b:36:8d:d9:ec:9c:7d:
97:4c:b4:37:fa:0d:2d:3b:f3:1a:e0:2a:02:94:eb:0f:96:3c:
b6:83:d1:1b:b9:d0:30:dd:c8:a9:58:37:3f:ae:69:0e:33:ef:
14:f6:5d:91:ca:b1:8b:96:2a:08:91:ff:64:16:19:ef:7f:fd:
b9:a4:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:13:22 2026 by rpki-client