
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
File: a9bIzoghkMgWnoE2ReDt2bdX6xk.mft (raw, json)
Hash identifier: tLbPvKyRcYdVbM3+Q4agyfyMw23JkuFd7GW1eGzDO7s=
Subject key identifier: 16:08:5F:54:8C:9B:5B:A9:A7:64:1C:68:37:D1:94:26:80:65:D5:50
Authority key identifier: 6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
Certificate issuer: /CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Certificate serial: 180C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
Manifest number: 2244
Signing time: Thu 24 Sep 2026 16:30:25 +0000
Manifest this update: Thu 24 Sep 2026 16:30:24 +0000
Manifest next update: Thu 01 Oct 2026 16:30:24 +0000
Files and hashes: 1: a9bIzoghkMgWnoE2ReDt2bdX6xk.crl (hash: an3d1s/6YSo15FoxJhGPqBjU0SgRUkKXCJopLKOi7/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl
rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6156 (0x180c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398E5, serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Validity
Not Before: Sep 24 16:30:24 2026 GMT
Not After : Oct 1 16:30:24 2026 GMT
Subject: CN=6ab55020-d229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:64:9f:0b:73:82:01:06:d2:bd:d4:7c:0b:
f7:f6:20:80:e5:34:3b:b5:63:30:f1:92:52:6f:06:
ff:70:17:d5:44:ab:91:14:d9:fe:fe:81:29:5d:a5:
68:89:7e:53:84:b9:75:0c:37:f4:aa:84:e0:3e:17:
41:21:80:b0:94:75:11:34:10:24:a3:e4:3c:26:cb:
b6:fc:2a:8a:fc:5d:44:6c:7d:e2:99:89:f6:7d:09:
e4:44:62:02:39:e6:d3:aa:8f:29:48:69:15:e3:bd:
29:f9:c7:2e:84:73:9c:74:95:2f:b2:03:97:b4:d7:
a2:05:79:e6:b8:7b:89:b0:99:4e:d6:b2:a1:db:19:
9d:d1:71:c2:d2:04:dd:d0:6d:c8:12:41:07:c9:47:
7f:08:48:ac:10:c9:bb:a8:c6:b4:88:0b:05:05:24:
d7:0b:5c:09:70:92:51:40:6f:1d:b5:02:0d:d1:db:
ca:ba:55:4d:17:75:c1:05:1e:1f:bc:e0:28:c8:e4:
a9:3a:99:e7:04:b9:08:dc:bf:9f:50:59:52:df:3e:
e8:59:2f:09:88:1a:ae:ad:45:62:08:d2:2c:56:5c:
ca:28:59:c9:86:c1:3e:06:dd:e0:8c:55:33:bb:9a:
08:3e:3f:28:32:5e:5a:8b:b1:05:a5:39:3a:05:67:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:08:5F:54:8C:9B:5B:A9:A7:64:1C:68:37:D1:94:26:80:65:D5:50
X509v3 Authority Key Identifier:
keyid:6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:04:9d:a3:a2:cd:0e:4b:1a:a3:3f:e4:47:c1:27:db:31:61:
38:29:1f:b3:6b:5c:be:f6:e8:9b:3d:a4:85:dc:e4:c5:29:e7:
6b:b2:b1:18:3d:da:5d:d4:9f:bd:ca:cb:0f:63:4d:d6:7a:bf:
f3:2e:5e:18:9b:5e:05:0e:26:a5:e7:b2:c6:1c:c6:01:11:40:
8c:e7:5d:7d:46:1f:5d:47:b2:c6:10:6f:06:c6:7f:8c:e4:45:
45:3f:83:6c:37:fb:98:86:a3:88:97:f5:82:1a:dc:2c:a9:cb:
ce:cc:c9:68:19:ae:af:2b:f7:9c:a8:5a:d1:c1:e9:0b:b4:d5:
a5:49:ca:4c:f1:f5:82:0b:e5:05:f2:ea:13:15:a2:de:9c:51:
f2:46:5d:50:de:f8:ab:d8:42:c7:aa:f4:41:e8:b0:db:5e:35:
3b:af:7f:82:8d:43:08:ff:57:c4:da:e2:bf:7c:dd:01:95:ad:
59:c2:a7:0d:01:c3:d1:91:6e:22:39:85:10:50:03:2c:fe:8b:
72:5e:57:00:aa:ee:6f:a0:b8:2d:fe:d2:f1:88:53:d7:79:67:
bd:a3:79:c4:07:5d:d9:44:b7:c0:02:ec:a6:be:86:42:94:46:
dd:d6:b3:62:51:a2:ac:61:af:e7:98:db:62:11:a4:43:99:5e:
83:7e:c9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:24:51 2026 by rpki-client