
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
File: k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft (raw, json)
Hash identifier: uNZ3n3DZmMc7iwctVediMwqSDW+JLzn2CCtIMJ7H2v4=
Subject key identifier: 82:8F:ED:E2:AC:DB:9D:F5:14:33:F4:B7:A8:9F:E2:04:6F:A2:96:7E
Authority key identifier: 93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
Certificate issuer: /CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Certificate serial: 087E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
Manifest number: 0875
Signing time: Tue 22 Sep 2026 20:36:54 +0000
Manifest this update: Tue 22 Sep 2026 20:36:54 +0000
Manifest next update: Tue 29 Sep 2026 20:36:54 +0000
Files and hashes: 1: k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl (hash: vPZXsSJsAE+iw9PZXZDGuRIYPRLxd5PNBaRKn86dUBA=)
2: B097C8B013B111EB8864681BC4F9AE02.roa (hash: fwuIOJ3NO3h7Aw2rK766OXsCZm+Z7FPR85wnCI/U1gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91410B7, serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Validity
Not Before: Sep 22 20:36:54 2026 GMT
Not After : Sep 29 20:36:54 2026 GMT
Subject: CN=6ab2e6e6-f229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:60:70:f9:7c:fe:e3:4c:dc:f7:a0:34:98:
22:06:2f:a4:c2:d8:36:36:4b:d0:3b:51:26:af:54:
f9:ba:be:c7:57:7f:f9:8f:02:41:bc:d0:48:75:01:
d8:c3:b6:9d:1e:bf:2c:68:90:45:ab:64:f5:4f:6a:
9d:50:e9:7e:0d:3b:24:75:9a:4a:6b:26:df:86:21:
0a:2c:09:c7:bd:b4:74:0c:d3:00:b2:a9:7c:c8:2d:
03:e9:11:ee:85:21:d2:8d:4d:e7:68:ce:8d:74:10:
2e:f0:0d:ec:b7:66:45:1e:15:25:9a:15:c2:c1:2c:
af:8f:11:f5:37:a2:bb:d0:70:e8:f2:8a:0d:06:43:
38:1b:4e:59:48:ee:c6:a1:9c:16:fd:c5:3a:3e:5c:
0b:f7:1b:cf:92:dc:57:73:44:22:d3:50:e5:89:06:
9a:f3:24:80:6b:fc:ad:48:2d:ce:f6:a3:f9:d0:56:
06:84:95:77:32:e6:1c:06:91:b9:80:bc:ce:6e:96:
e8:d1:75:37:17:da:eb:34:66:ca:05:b6:f2:75:a0:
fe:76:da:f1:7c:dc:83:a9:b9:0c:ed:c0:7e:06:34:
ee:49:d8:0f:76:21:46:4c:bd:ab:38:0b:dd:01:3a:
98:f3:99:05:a3:ad:ce:60:d7:50:fe:62:d5:a8:96:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:ED:E2:AC:DB:9D:F5:14:33:F4:B7:A8:9F:E2:04:6F:A2:96:7E
X509v3 Authority Key Identifier:
keyid:93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:11:f2:33:ea:56:00:e3:0a:f6:54:e8:a2:3d:39:67:3e:4c:
78:cc:c6:23:fe:7d:ae:84:eb:04:28:3a:2a:79:c3:b7:79:09:
14:bd:59:60:00:9c:cc:18:82:ed:d2:83:30:97:ba:67:09:79:
bc:8b:14:e3:a5:b2:5a:9f:ae:12:4e:41:42:f8:9b:6f:29:4a:
6b:ba:dd:ec:19:f6:02:a8:c6:d5:57:e8:32:4d:5a:69:53:53:
31:68:d4:42:af:88:19:84:2e:0c:db:2e:88:52:78:20:53:02:
bb:53:ac:9b:76:1d:d0:b0:fa:9b:2d:0a:54:61:f4:51:26:55:
29:4a:6f:31:ac:d6:12:82:08:93:d3:77:40:0e:3f:67:3f:54:
f6:7f:d8:6d:1f:e5:cc:73:cb:73:47:66:f7:49:3b:d3:b5:02:
64:3b:ee:7c:fa:11:2d:dc:d4:5c:57:db:2e:5e:f8:81:29:b5:
ba:78:49:a4:bb:3f:07:73:9b:1c:98:19:85:e7:d1:35:0a:35:
e9:ff:eb:84:f1:ea:36:6c:6d:ba:6e:5c:a4:38:f1:d3:86:ad:
5c:74:96:d0:86:26:3c:6a:33:fa:0e:80:de:bb:59:4c:1b:23:
ba:57:e9:6a:08:56:63:af:84:1d:0b:a1:a0:e4:ff:cc:86:66:
b6:1c:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:52:49 2026 by rpki-client