
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
File: 9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json)
Hash identifier: N5wb6EFI1YVc/5EFQoidHSl5jG9cxt/KM+GY3ZlVu9w=
Subject key identifier: D1:0C:E0:7B:E1:31:56:7A:2F:8F:52:EA:39:7F:A6:49:08:11:33:73
Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
Certificate issuer: /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Certificate serial: 01F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
Manifest number: 01F1
Signing time: Mon 21 Sep 2026 03:20:04 +0000
Manifest this update: Mon 21 Sep 2026 03:20:04 +0000
Manifest next update: Mon 28 Sep 2026 03:20:04 +0000
Files and hashes: 1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: Fe1mKvbw3axa/gvgzuqtAx+tnUmsn/oWcXNYi0Cgf3A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl
rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497 (0x1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911606A, serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Validity
Not Before: Sep 21 03:20:04 2026 GMT
Not After : Sep 28 03:20:04 2026 GMT
Subject: CN=6ab0a264-f381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:63:cf:13:e7:15:1b:39:6a:97:da:1f:ba:
05:ec:45:7e:8c:e1:59:f7:d1:97:9d:e8:04:54:46:
f6:0d:22:00:ff:0f:5c:c1:58:71:ae:06:d7:69:0d:
5c:f7:d3:59:65:27:a6:c7:c7:d5:15:f5:40:77:29:
1d:b2:b9:e0:6c:da:8f:5a:f4:b0:07:99:8f:3d:e6:
41:ab:fa:61:1f:34:70:57:01:cd:9e:29:f2:c1:9f:
dc:db:28:94:cb:73:97:1c:59:b9:bc:c2:5c:3d:65:
99:bd:35:9a:bb:9f:77:74:ba:90:b2:7f:31:40:05:
af:c5:20:a3:a9:86:d8:28:dd:d7:d0:73:8d:65:64:
f2:aa:db:57:b2:ba:7b:bb:58:79:f5:46:08:ae:e8:
bb:d4:bb:52:2e:40:fd:e5:8b:ce:ea:5c:a5:88:c1:
6a:15:0d:e7:1e:5d:e9:e1:02:e0:54:6d:d6:ad:ff:
8f:11:c9:3b:c3:2e:52:82:d6:b8:02:9f:73:b4:5a:
17:1e:97:3e:3a:8d:05:65:38:46:97:63:24:7f:8b:
d9:a2:06:62:4b:de:2f:18:0b:20:d0:79:ff:c7:1f:
77:88:02:11:f4:9c:58:fe:a7:f9:9c:6d:e6:ff:90:
5f:98:1f:88:e9:05:61:0f:f3:16:2a:42:12:c2:48:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:E0:7B:E1:31:56:7A:2F:8F:52:EA:39:7F:A6:49:08:11:33:73
X509v3 Authority Key Identifier:
keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:0b:d8:34:8b:4b:af:d1:e8:82:43:91:d8:84:77:f8:bb:8a:
7b:c3:6b:ac:44:31:33:d3:3c:fb:32:a3:56:d9:44:2d:4a:fd:
5b:2b:db:be:7e:b1:f6:54:09:1c:9e:a5:95:3e:c2:7d:05:d9:
11:af:31:d7:ef:77:0f:a5:6e:a7:f7:45:af:96:a4:b4:20:7d:
db:78:39:a8:3c:d0:5e:56:e3:04:42:9f:78:f7:52:42:3f:da:
1c:67:4f:8a:c5:e7:3d:a6:c7:f0:7b:72:d5:32:90:92:f6:67:
7b:03:19:2a:f3:c1:5f:78:6c:83:08:26:a1:5f:05:08:cd:05:
12:dd:6b:1e:40:3a:c4:2f:b5:a2:b9:2e:b5:cd:73:56:11:62:
56:be:63:86:45:c3:0f:e6:4c:4d:5e:46:b0:01:26:46:bb:3f:
b7:0b:35:f8:1f:42:e5:2e:b6:64:a9:d9:4c:25:75:bb:ed:a3:
fb:e8:49:d4:97:0f:82:a6:d3:f1:a6:8a:3e:00:b7:d4:bb:0a:
1d:f2:67:d6:0c:94:a2:8a:38:bf:eb:06:06:d4:13:65:84:19:
81:b6:26:8a:ea:6f:0e:b7:74:ad:95:f4:9e:77:55:a6:3b:1c:
47:5d:da:ee:e5:9a:5a:cc:55:29:2f:fe:ad:09:27:b9:9e:71:
0d:ed:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:46:01 2026 by rpki-client