
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
File: _rv4NRuAvuL_tu8l-lfwhy9QkfI.mft (raw, json)
Hash identifier: bH/TjTIYUToex6aHAZlEFmr2mW/gFgfIDQXoZGFijlE=
Subject key identifier: 19:65:08:AF:4B:3B:A6:E3:CF:EF:AB:DE:2E:48:57:60:8C:2D:AB:39
Authority key identifier: FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2
Certificate issuer: /CN=A91133BE/serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
Manifest number: 7D
Signing time: Fri 25 Sep 2026 07:52:41 +0000
Manifest this update: Fri 25 Sep 2026 07:52:41 +0000
Manifest next update: Fri 02 Oct 2026 07:52:41 +0000
Files and hashes: 1: _rv4NRuAvuL_tu8l-lfwhy9QkfI.crl (hash: U6LSvxQkdq33A5Le7D4ighT+i94xCwrV/QTd8tEDl+I=)
2: D030482C001011F18942B574406F56BC.roa (hash: ROkVbY1LuFczmyiuOH4T9OzmfYb5FaHl10aneQ+EXU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl
rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133BE, serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
Validity
Not Before: Sep 25 07:52:41 2026 GMT
Not After : Oct 2 07:52:41 2026 GMT
Subject: CN=6ab62849-242f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:14:ca:a4:2f:d1:1a:b5:27:d3:a5:64:e3:
5c:1f:79:62:05:0d:93:f9:71:4f:3f:7c:9d:69:92:
26:e6:38:58:ac:fc:7e:00:79:35:52:d8:b0:6a:d5:
00:fd:dc:2b:97:22:78:31:54:c9:01:41:f2:b3:d2:
61:06:f0:fd:f4:75:ab:ce:bf:f2:13:41:4f:5d:76:
5f:fd:98:05:c1:36:51:07:64:d3:af:7e:94:01:d0:
2c:63:f4:0b:eb:1c:e0:fc:f0:9b:9f:f6:56:9c:0f:
52:f6:1c:c7:d3:82:58:d8:e9:2d:2c:62:69:41:af:
4b:39:49:90:9d:05:29:07:32:ea:15:9b:7d:8e:8f:
af:d3:3f:49:34:95:fb:38:08:34:b4:2c:c0:ab:20:
da:71:7c:62:0f:a3:5e:7d:d8:7b:66:6a:ab:4c:ee:
05:f2:1e:31:8d:95:37:31:c2:3d:2f:f9:cd:3f:db:
88:f8:80:85:dd:b8:52:28:77:df:7b:c8:b0:59:3b:
6e:b4:a1:39:2c:71:e0:bb:85:84:c6:81:ca:0d:ca:
0f:9c:10:ee:c0:ff:74:28:8b:b6:8b:9b:04:55:57:
d4:53:57:92:5a:96:d2:de:b5:f6:a0:81:54:21:df:
5f:56:52:5f:e8:a3:17:b7:ce:e1:5a:41:05:c3:6a:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:65:08:AF:4B:3B:A6:E3:CF:EF:AB:DE:2E:48:57:60:8C:2D:AB:39
X509v3 Authority Key Identifier:
keyid:FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:54:7b:29:1f:71:f1:90:c6:59:de:85:6a:3d:25:6d:ab:15:
1b:74:26:ad:a4:b9:3f:00:40:fb:b5:3f:9d:cb:9d:cb:6e:ef:
b5:71:1f:c3:6c:e6:d2:24:93:a5:74:9c:04:a4:fc:e3:52:98:
9f:67:64:34:1a:ba:8e:6d:73:b6:4d:2f:be:32:80:9a:d1:33:
60:d8:95:fc:3c:2f:c8:66:57:e4:5d:41:37:81:7f:b4:83:ba:
33:f6:54:6b:61:e7:9a:bf:5d:a8:81:42:66:bb:b2:18:01:45:
59:b2:5c:bf:77:1d:c7:47:fc:29:c2:22:98:78:56:00:ab:8e:
53:0a:ec:7d:8f:90:6c:55:78:67:96:6a:c6:5b:f5:94:b9:29:
89:63:28:68:e1:d5:d5:2d:6d:a7:42:45:4d:5f:d3:c3:9e:47:
02:e9:43:03:a4:82:86:d2:6b:15:f4:e0:f3:95:a5:ee:6c:22:
36:16:2b:55:f9:13:bf:7d:c1:42:79:c6:b7:69:99:b1:7a:03:
ca:9a:cd:f1:08:d0:cb:02:15:28:00:45:59:d7:2a:64:d3:31:
ff:40:f6:79:09:78:89:4d:04:a8:c9:73:14:b4:60:e2:15:5f:
00:ea:e0:ac:2e:c4:12:9b:2e:ff:90:53:8c:90:8e:e4:be:90:
f7:26:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:57:52 2026 by rpki-client