
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json)
Hash identifier: sl8RSr4P/u8tgu2suOXP/EPwbsLDv1Ik3Jc9wajUgAI=
Subject key identifier: 94:C4:E9:AF:6D:14:A8:BD:0B:3C:41:82:60:7D:3D:62:A5:50:90:B2
Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
Manifest number: 0148
Signing time: Wed 23 Sep 2026 05:11:44 +0000
Manifest this update: Wed 23 Sep 2026 05:11:43 +0000
Manifest next update: Wed 30 Sep 2026 05:11:43 +0000
Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: 787DyiCHAAvTU91y3wzcKPu+WlVNB2xg8nyYuGR2ZXo=)
2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: HG74SSnFpVc9cW3sd7L9piB9ZAlq596CN6u14507KWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Validity
Not Before: Sep 23 05:11:43 2026 GMT
Not After : Sep 30 05:11:43 2026 GMT
Subject: CN=6ab35f90-f31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:bd:4a:cd:d2:2e:e1:f5:f0:cc:3b:0b:c0:
e4:48:6f:41:d2:92:42:a7:05:06:f1:e8:08:be:a0:
31:32:1a:88:11:bb:75:4d:8f:eb:c0:e2:29:e6:12:
7a:d2:77:b0:16:8f:52:71:09:24:42:20:13:0e:0e:
ec:2c:6a:57:7c:e9:16:3c:41:59:e1:81:81:42:9a:
b7:47:0a:d7:17:01:6a:5f:bb:ad:73:4c:37:2b:0e:
b6:10:0a:fb:f7:83:cc:37:93:52:27:21:84:15:89:
96:f4:2f:3f:61:a6:0e:73:e6:d6:fd:12:87:58:e9:
a5:59:61:0d:02:ab:3e:ea:f9:bf:50:2b:f2:a8:4e:
2e:1c:7b:11:84:f9:c6:78:75:3c:e9:0c:99:51:ad:
83:4b:1c:84:2c:a5:82:30:3d:5a:61:4d:35:0a:e4:
9e:e9:df:fa:25:a8:d4:b4:42:bc:a6:32:7d:86:1a:
0b:c0:57:25:6d:d7:a1:2a:a5:db:b3:35:df:fe:e9:
cc:95:bf:49:ca:9d:b4:4d:92:f2:7f:b8:89:00:99:
bf:db:55:c1:7f:2c:f9:0c:3e:45:0d:a3:bf:f3:68:
be:0c:4b:25:01:e0:a6:66:b9:e7:28:05:67:1b:46:
fd:20:f5:72:e9:f3:0f:f2:99:58:79:26:ad:ef:b6:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:E9:AF:6D:14:A8:BD:0B:3C:41:82:60:7D:3D:62:A5:50:90:B2
X509v3 Authority Key Identifier:
keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0f:2c:b5:e2:24:46:db:53:3e:9d:3e:37:8e:c9:e0:bb:25:
61:55:dd:98:84:5e:a1:e9:e0:54:76:b4:97:aa:c3:d9:fb:9b:
f1:ed:5c:d2:0c:72:ee:28:63:9a:86:23:f2:c6:cf:e9:12:1d:
d0:51:c0:b0:15:ce:a1:4a:58:9e:05:c2:00:58:98:47:95:ca:
3b:71:ff:a1:a3:49:ba:d6:d3:30:26:7c:9e:6d:c0:8d:74:de:
bc:ca:a5:7d:3f:c1:8b:00:ed:1a:7d:bc:2d:f3:6f:d1:42:eb:
6e:fc:ac:da:13:de:12:0a:0f:43:6a:37:c7:89:10:a4:88:f0:
d3:4f:5e:bf:c5:ae:2f:df:0b:d2:63:50:5f:74:a5:ea:27:a7:
4e:89:4c:e3:5d:4c:d2:ba:25:8f:86:40:85:11:03:90:36:61:
a1:75:3a:8b:3e:17:0a:b3:a0:99:b7:bb:bd:9d:bc:c7:23:b9:
de:de:86:f5:96:e4:b8:d8:ee:27:7d:7d:95:8d:b3:f5:d3:dc:
00:c3:da:f8:ce:b9:34:a1:ec:29:b6:31:20:9c:0f:8d:0d:40:
73:6c:05:b8:69:07:5a:ac:5c:43:11:89:40:e2:eb:c8:08:b6:
17:ef:b9:6e:61:77:2a:b0:17:d8:93:e6:27:e4:b8:81:f4:c7:
44:eb:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:43:08 2026 by rpki-client