
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
File: RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json)
Hash identifier: dqP1MfmPouLnHwWKuNNU28lHh7bCArwJAmBeKv/KrVo=
Subject key identifier: D6:09:A5:1B:53:FE:AF:32:B5:DF:3E:77:45:9B:43:53:E1:D5:B5:BE
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Certificate issuer: /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial: 07D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
Manifest number: 07D1
Signing time: Mon 28 Sep 2026 21:29:54 +0000
Manifest this update: Mon 28 Sep 2026 21:29:53 +0000
Manifest next update: Mon 05 Oct 2026 21:29:53 +0000
Files and hashes: 1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: kWnK/5trpk5UZfPDthPeiZGrji+nZpDSlZqiP6Wa+s8=)
2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: sbyF3KrKZsJPlhcWGIocE8R+wXMDx5Dh9kMEDZMegNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 21:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2009 (0x7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Validity
Not Before: Sep 28 21:29:53 2026 GMT
Not After : Oct 5 21:29:53 2026 GMT
Subject: CN=6abadc51-4a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:e7:4f:66:53:6a:dc:01:91:91:66:8e:45:
eb:83:9e:43:b4:10:08:96:e2:98:5c:29:28:d1:43:
d6:ff:7e:a6:0e:ba:74:6b:df:a3:eb:7a:f3:f3:8d:
9c:d0:36:a8:ae:0b:c3:0f:3f:c3:7e:bc:a5:f9:b9:
49:c6:69:8b:3d:20:3a:9c:bb:25:a8:a7:bf:36:86:
7e:71:57:51:4a:50:fe:27:e8:ce:a3:f6:b7:60:25:
63:b2:a3:9a:f8:00:39:73:4a:19:52:49:8c:fa:16:
95:33:d9:ba:05:8f:bc:c8:48:a2:78:11:c1:e2:c2:
35:d3:f1:e3:5c:f5:b2:2e:3f:11:c0:77:82:88:89:
74:95:19:7c:44:b1:db:a0:50:fd:1a:e2:45:12:87:
f1:48:b2:39:61:1b:d9:b8:5c:a0:bc:51:15:42:59:
41:7b:7d:ce:85:33:ad:af:0d:fd:3c:e4:ef:02:34:
ff:ad:6d:f4:27:86:59:19:5d:3e:2b:45:3f:88:05:
31:ef:23:85:f1:27:ac:dd:78:87:47:25:da:fd:01:
ae:0e:f5:62:1f:2e:ed:7b:61:c8:f6:f6:cf:27:67:
c3:c2:33:d7:96:d8:0c:11:11:56:db:ac:71:e8:04:
49:48:09:1e:34:d2:69:99:5a:df:c7:28:da:96:fe:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:A5:1B:53:FE:AF:32:B5:DF:3E:77:45:9B:43:53:E1:D5:B5:BE
X509v3 Authority Key Identifier:
keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:91:2e:37:d9:6e:4e:c1:4d:d2:2c:ff:84:78:18:aa:47:36:
2d:c4:27:06:32:a6:30:ff:9a:f3:9e:cc:2b:15:ab:fb:42:cd:
78:50:11:f6:47:27:72:fb:27:43:11:36:ac:6b:13:c0:0b:8e:
b5:c1:c3:3d:37:a3:ef:c9:47:74:03:36:17:41:e4:9e:97:9a:
fc:08:59:f7:57:41:e2:2a:dd:11:0f:fd:31:49:51:84:95:aa:
26:a7:0a:79:23:c9:40:34:6d:d6:6d:b3:30:61:21:9f:0a:ee:
93:f6:91:39:93:5b:ba:66:90:d3:23:1b:02:59:ee:39:bc:df:
54:a2:82:05:b3:a3:91:0f:d4:87:48:6f:3b:8e:55:ed:9d:cf:
9e:66:7a:11:d7:01:41:4f:ac:27:6c:36:d9:89:43:75:89:52:
82:15:df:e6:61:95:f6:c7:ec:e0:f2:89:5c:ae:00:6e:a0:9f:
5c:e6:c4:8b:a1:8e:a3:ea:00:39:74:4b:67:b7:e3:52:ce:15:
bf:ab:e8:4c:85:c8:15:fd:3a:b2:6f:82:c2:25:b0:dd:5c:74:
f9:95:8c:de:0a:92:e2:cf:c0:8d:3a:85:a1:35:6c:ed:1b:6a:
4e:c2:6d:41:a5:22:7b:48:2a:47:ef:16:f5:ba:f4:a7:a6:1b:
9a:6a:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:53:41 2026 by rpki-client