
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json)
Hash identifier: dcITEwO9tXl/8f7pROYR2xhmiYyOAADPJ5RYfiSVC5U=
Subject key identifier: 9B:FA:3F:E9:E8:E8:AF:88:A2:BF:0C:98:28:2E:1A:8D:1C:89:4C:0E
Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48
Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48
Certificate serial: 04A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
Manifest number: 0498
Signing time: Tue 22 Sep 2026 23:37:04 +0000
Manifest this update: Tue 22 Sep 2026 23:37:04 +0000
Manifest next update: Tue 29 Sep 2026 23:37:04 +0000
Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: mLkS3cb+EUjhDNpg2Fgguxg9aL7mVDTVcklzIi3xOx8=)
2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: oZGxyTLie1HUwZ8S44ij5pZk1xQWTR3lRoLkZphCf9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl
rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1184 (0x4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48
Validity
Not Before: Sep 22 23:37:04 2026 GMT
Not After : Sep 29 23:37:04 2026 GMT
Subject: CN=6ab31120-8d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:30:70:62:cc:95:0c:82:df:a9:99:5d:58:
6b:c5:1d:2c:e0:ff:ec:ec:a5:3b:84:09:32:40:a3:
09:83:57:70:57:35:e0:6b:24:f7:b5:06:7b:76:04:
4e:19:4e:39:e2:87:7d:0d:27:de:2f:47:90:ae:65:
fb:5a:ba:2a:c6:a0:96:91:8b:50:aa:56:5f:48:c6:
d6:20:4d:6d:2a:ca:cc:17:bb:23:65:3d:7e:48:8e:
7a:eb:ad:9d:a7:e4:c2:4a:33:5b:42:eb:fc:ea:c2:
da:bc:4b:11:17:0a:18:ed:c6:04:ef:e4:39:59:26:
e8:f2:68:da:7b:6c:e3:d4:fc:01:7e:b2:e1:d2:3b:
14:a8:3a:fd:0f:db:22:82:e3:e9:21:6d:f9:ac:5a:
74:43:c8:c3:64:d3:39:b5:08:26:d9:85:49:6f:2c:
b6:04:84:ec:9e:7b:87:dc:eb:1e:6c:df:29:72:f3:
70:10:9e:dc:36:f9:0d:a0:72:33:bb:bc:96:f6:62:
3f:a1:c7:36:f9:42:84:5e:54:cd:30:89:43:ba:12:
3c:f1:9a:d9:bd:2e:cb:8d:18:a1:98:d0:4c:f3:a7:
ba:7e:8c:7a:27:40:92:cf:b0:36:39:4a:20:66:0f:
7e:86:1c:b7:eb:1e:56:85:03:d7:24:05:2c:55:c3:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:3F:E9:E8:E8:AF:88:A2:BF:0C:98:28:2E:1A:8D:1C:89:4C:0E
X509v3 Authority Key Identifier:
keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:08:4e:f3:c8:51:2b:03:25:e2:ee:5a:82:f8:a5:e6:d4:d0:
bd:ac:9a:57:d9:3e:66:f8:62:71:bc:cf:c4:c3:93:f1:b2:a0:
91:5e:e2:3b:d6:76:59:11:b1:ae:e3:9a:45:02:db:21:be:b4:
96:f8:0e:5c:2f:28:8f:a8:9b:94:f3:4f:a3:1c:30:a8:48:fd:
87:a4:c6:69:86:9a:44:5d:2c:d4:01:e2:3a:70:3a:3a:fa:4a:
d1:1d:3f:45:f6:1d:ad:7a:20:22:5a:98:d5:73:a9:92:4a:3b:
f2:f4:f3:f3:df:04:a6:a9:20:c2:ad:11:03:94:a8:2c:0e:7a:
11:5c:12:6b:c5:7c:67:df:84:61:84:89:d0:cc:c3:e1:91:6b:
e9:ad:4a:78:29:63:a4:a9:73:18:38:e1:0d:5e:7f:43:d0:d0:
57:8c:34:7f:86:c4:e8:e2:94:5c:5a:a6:1a:b5:4f:7a:02:2f:
a5:a2:07:ed:1c:a1:05:e3:15:fa:27:f8:f9:25:d2:40:2f:ff:
9d:66:59:b1:d2:55:14:19:12:f1:f5:89:94:bd:38:5d:5e:57:
1f:ae:01:02:ba:a8:65:2a:a8:a2:ed:f0:de:f1:94:0d:74:e4:
bc:a6:46:2c:79:63:ed:3e:5b:4d:e9:cc:30:27:f6:01:ae:69:
1a:55:f5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:51:34 2026 by rpki-client