
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json)
Hash identifier: DUNFJAltfs2vYtj79PmiHnd6+PnPEZR3XgRor9S8Q+M=
Subject key identifier: 3C:98:32:B5:4C:19:C7:DE:F6:0F:F3:9A:3D:02:8A:6E:8C:97:65:AC
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Certificate issuer: /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
Manifest number: 01A5
Signing time: Fri 25 Sep 2026 04:11:33 +0000
Manifest this update: Fri 25 Sep 2026 04:11:33 +0000
Manifest next update: Fri 02 Oct 2026 04:11:33 +0000
Files and hashes: 1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: RCXQlK6ZesRllylIqS3YD+XMI4DUtLqXdIQpPM1vnsg=)
2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: q/inWwagPqsJ9K+IB7d6o4TgPPjDhue6dL8dPifXSPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Validity
Not Before: Sep 25 04:11:33 2026 GMT
Not After : Oct 2 04:11:33 2026 GMT
Subject: CN=6ab5f475-b812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:2a:5d:ae:f7:cb:ec:9a:66:72:c3:19:b0:
6b:9c:80:4d:d5:2d:59:a9:1f:8a:72:c6:5d:2c:5b:
57:33:14:01:55:ed:c5:40:58:08:dd:14:6d:18:97:
11:6a:59:93:cd:4f:b2:47:e6:62:79:f0:ad:83:97:
5e:3e:d9:0f:3a:3b:90:76:60:4c:4a:f5:1a:96:4c:
38:10:3d:29:21:00:f7:4a:fc:bf:be:83:05:14:02:
cf:30:46:d3:fc:89:aa:26:46:c5:c3:bf:7d:49:25:
6e:db:0c:33:64:bc:16:71:7a:a9:01:6d:0a:8a:af:
ab:d8:b3:e5:57:2f:0a:a7:49:6a:cc:76:77:c1:fe:
59:c7:f0:a3:9b:69:a6:aa:d4:dd:4a:d5:29:63:d0:
d2:28:4d:b0:16:ea:9c:1d:d5:05:1a:e7:c7:ab:84:
09:2a:83:61:57:95:fd:99:32:62:55:94:56:a0:d6:
ae:fe:d3:a6:73:88:3f:13:5b:9a:93:88:aa:18:80:
7d:97:52:4f:68:c5:af:44:6b:73:f9:1e:7b:76:40:
d6:75:a6:67:1c:30:e4:37:fa:85:a7:45:1d:22:2d:
4a:35:e6:5f:a6:53:14:26:f2:00:fc:7d:31:b4:65:
e4:57:28:67:76:94:fe:ad:d3:f7:e6:77:87:65:59:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:98:32:B5:4C:19:C7:DE:F6:0F:F3:9A:3D:02:8A:6E:8C:97:65:AC
X509v3 Authority Key Identifier:
keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:d8:ae:3e:88:c1:48:9a:c6:0c:aa:64:61:20:7e:02:54:2f:
cc:65:8f:e4:dc:46:e8:42:ca:a5:62:5c:9b:87:ee:51:c3:c6:
91:25:20:84:9d:f5:dc:22:54:30:bb:dc:4a:14:9f:4f:2b:b0:
cd:60:e6:d9:2a:0f:8f:27:3d:45:c6:8b:1e:2e:56:e8:19:2d:
71:1b:16:90:64:43:7e:76:e5:c1:ba:44:4a:9c:0c:53:b8:18:
90:3c:92:f1:ce:26:d3:e1:7d:0a:9b:34:0d:c7:0f:47:67:84:
d5:fc:c1:16:cf:0d:71:9c:7d:5e:c9:8b:fb:ad:44:3c:09:09:
b1:40:0a:58:e5:e2:20:78:cd:b2:fb:8e:f4:07:a6:c8:da:68:
6c:8f:cf:96:4c:b1:9b:cd:8e:d0:73:bb:11:ce:59:37:b0:83:
10:5d:da:de:59:a2:42:b0:a9:16:dc:92:f0:5e:f8:cb:6c:50:
f4:23:fc:57:f1:c2:af:6b:31:92:4f:42:40:4d:f8:6e:6e:03:
df:73:da:d7:83:da:fd:f0:d3:54:cb:c3:b8:59:3f:68:c7:fb:
bb:88:fd:bb:b1:49:17:c8:a7:c2:bd:6b:44:7a:95:b5:45:b8:
10:31:a9:e6:bf:3a:13:d3:41:05:cd:da:ed:e2:98:fa:3a:17:
33:43:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:20:39 2026 by rpki-client