
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
File: _AVdqSFUGMKhRWbvVna4pPTSCzA.mft (raw, json)
Hash identifier: IEuQB5h/Di87i5wpM18PU30VbYdKqKF2gEW2+GBpqBQ=
Subject key identifier: 60:BD:43:BD:BF:93:FC:26:95:6B:B0:E3:8E:35:5B:67:B0:52:29:87
Authority key identifier: FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
Certificate issuer: /CN=A91133DE/serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
Manifest number: 65
Signing time: Wed 23 Sep 2026 07:47:27 +0000
Manifest this update: Wed 23 Sep 2026 07:47:26 +0000
Manifest next update: Wed 30 Sep 2026 07:47:26 +0000
Files and hashes: 1: _AVdqSFUGMKhRWbvVna4pPTSCzA.crl (hash: 5O8mubpXAFq1yOsZUr2EQ+7Npg8VEieE7OYbJV4NGDE=)
2: 3F1CEAEC1D0311F1B8948CF0043D8C67.roa (hash: 1C1WKunXRhUP/ppMqilBjQAG9/WWODiA+ekMdQn1ktE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133DE, serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Validity
Not Before: Sep 23 07:47:26 2026 GMT
Not After : Sep 30 07:47:26 2026 GMT
Subject: CN=6ab3840f-7aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:98:19:f7:f7:f9:e6:38:ce:7e:5b:7e:10:
46:45:ce:cc:28:6a:72:bf:62:f6:72:3e:5d:61:97:
80:c0:59:43:cf:72:70:ce:04:d0:3d:8c:1c:1f:af:
f6:41:b3:15:44:11:83:a0:e4:ff:51:77:72:ae:15:
ab:30:c5:a0:86:9c:eb:7c:49:e4:32:2a:bc:b7:ea:
34:a1:d2:50:a2:d4:0a:45:f9:36:b6:d1:f1:1c:16:
47:f0:31:2c:7a:dc:2f:c5:db:5f:e9:b4:d4:93:a8:
2f:af:fe:4f:65:2e:d5:cd:24:02:07:5b:cc:e6:70:
09:d1:1a:09:f5:1c:c4:03:bc:60:48:61:25:83:98:
4a:1e:59:c3:b2:26:3a:f4:b8:3e:31:de:10:13:13:
ba:67:48:75:25:73:e9:07:70:95:22:18:95:b2:22:
9b:6d:bf:94:28:3b:06:cc:8b:4e:34:57:af:57:09:
71:3e:1a:13:38:3e:99:9a:28:54:2c:d7:c2:1c:10:
97:41:45:74:cf:93:0b:be:a2:f9:f8:21:88:2c:8d:
3e:32:3d:64:b1:e4:56:48:a1:84:89:9a:85:fa:c0:
1d:a3:d0:81:8e:19:38:bd:60:95:58:fb:54:82:2e:
82:02:48:9d:80:e4:1c:c7:c4:4a:e3:f0:26:57:7f:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BD:43:BD:BF:93:FC:26:95:6B:B0:E3:8E:35:5B:67:B0:52:29:87
X509v3 Authority Key Identifier:
keyid:FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b7:25:c0:48:72:18:a5:67:c7:a5:c7:ad:e7:84:a8:72:5b:
bc:68:d3:58:09:f4:e4:ac:8a:1d:1a:79:88:a8:03:ba:81:01:
f1:3c:43:33:af:1e:2a:b2:00:4b:f9:c1:89:9a:15:07:cf:a5:
43:dc:2a:ac:3c:45:c9:66:38:db:0b:c1:ff:54:ff:6a:30:04:
b8:7c:de:73:8c:9b:35:54:dc:2a:bc:81:7a:b2:29:95:c2:3a:
8f:fb:ba:b2:cf:22:90:e2:e5:36:ec:7c:e2:3e:5c:b1:3f:26:
a3:2a:32:6f:32:06:85:f2:ad:ec:c7:ed:7c:fb:ce:4c:b0:f9:
12:b4:d0:ca:c9:3a:9c:f2:30:b3:02:4a:54:d5:33:77:c4:98:
0d:ff:2d:7d:e1:2e:04:21:9a:b8:c3:20:00:62:03:08:a6:c3:
63:7b:6c:67:ad:f1:58:32:fc:bd:98:46:9f:b5:b6:0f:39:c7:
82:8e:92:fd:4b:58:e4:70:a7:33:b7:32:26:cd:21:2f:3f:14:
77:68:4f:9e:cf:d5:de:ca:7a:75:36:f7:71:d7:41:74:86:03:
5f:78:97:a9:e0:66:02:09:f0:9b:e7:56:f3:79:47:a9:78:05:
b0:5a:1a:5e:bb:4e:7c:42:c8:ca:dd:05:da:c3:43:35:e3:7b:
1c:db:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:35:54 2026 by rpki-client