
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json)
Hash identifier: wIGEl8gLglAShL7W6sHejKmkEV/cLdDGBXrDkv6ug/c=
Subject key identifier: BB:A6:22:91:DD:11:69:1B:76:18:89:A5:42:B6:EB:56:3F:43:EC:68
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
Manifest number: 025A
Signing time: Fri 25 Sep 2026 02:18:41 +0000
Manifest this update: Fri 25 Sep 2026 02:18:40 +0000
Manifest next update: Fri 02 Oct 2026 02:18:40 +0000
Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: gPKWQdpU+hIBm78HoQ31NWB1iBJHXiw/9hQ0NouYUUk=)
2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: dLlqD+c2EzIjnRIXV0QzAQqWKBJmtBznh2XmiMCFjoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Validity
Not Before: Sep 25 02:18:40 2026 GMT
Not After : Oct 2 02:18:40 2026 GMT
Subject: CN=6ab5da00-20fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:d5:52:2d:68:d3:f8:7f:10:cb:57:56:2b:
0d:28:33:05:31:d2:f3:ed:e6:5c:49:60:d4:1b:41:
31:9f:90:ae:bf:17:42:d9:8f:e8:96:5c:8b:fc:95:
7e:75:92:03:6f:22:5c:14:11:4c:4c:08:80:14:0b:
61:78:5c:03:81:32:91:53:d5:bc:ed:a5:83:b8:3e:
f9:9d:25:76:fa:7b:91:3e:d5:e8:0e:4b:0b:c9:8b:
be:92:1c:70:ed:b5:d7:e1:9a:67:ee:f8:52:3e:b4:
0b:60:00:48:bc:e2:9b:ba:76:ae:af:06:96:17:e2:
98:9c:2a:43:73:97:d9:4d:b2:8d:88:d8:c8:03:b0:
69:80:10:11:3e:1c:27:04:13:a3:4e:a9:54:bc:05:
95:f9:5a:78:a8:b4:b7:93:3e:15:72:6d:57:dc:ac:
e5:5c:b0:19:6e:df:1d:cb:89:a4:2f:d8:6d:6f:50:
25:a1:ca:6b:d1:b6:a0:63:5a:4d:69:06:25:38:9e:
87:8c:87:e4:3c:75:2b:ba:ea:6d:7e:ed:b2:1f:ac:
75:ba:3b:b2:32:93:b0:f3:b6:a1:9c:82:4e:18:9c:
4f:70:55:ec:5f:28:61:d4:5f:7b:21:25:c7:01:4d:
1b:9c:94:26:a4:e2:7a:7f:94:92:07:ad:5e:1a:7b:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A6:22:91:DD:11:69:1B:76:18:89:A5:42:B6:EB:56:3F:43:EC:68
X509v3 Authority Key Identifier:
keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:1d:08:1d:60:93:30:be:31:11:89:46:5e:79:e0:7f:64:fe:
50:1b:66:ea:33:22:78:aa:be:f0:46:7c:74:d5:50:f3:12:11:
e0:85:ce:4c:d8:60:29:19:ef:b7:81:72:87:4c:fe:d9:0a:b7:
b0:2b:d1:22:39:e2:f8:06:41:86:33:ef:68:e5:a3:eb:4b:c8:
3a:fd:b6:61:8b:77:5b:d6:3e:a7:24:c7:00:a4:06:e0:c6:50:
49:d3:16:ce:2a:0c:86:0b:06:ed:d6:57:b2:15:80:4a:2f:a0:
63:2c:60:e3:c2:7b:51:21:91:15:3a:4d:b8:6e:4c:71:7f:b3:
6f:55:d1:c8:81:e2:6f:10:19:fb:83:45:c9:be:40:b7:03:9c:
05:50:5b:58:df:2a:0b:ce:b2:3a:f5:ff:e5:7f:3c:25:d4:6f:
9b:f7:18:f2:d8:31:6c:35:a2:a3:b7:13:8a:9d:83:21:2e:dd:
74:43:b6:e3:ab:ee:34:e8:c7:1d:97:47:9e:f1:ba:7b:95:b7:
93:82:0a:c2:9b:91:30:d6:2f:56:10:a4:79:bd:8b:24:14:21:
6e:15:d6:5d:88:48:97:c9:1e:64:b7:73:46:b1:13:1a:7e:74:
25:24:96:a4:ac:a5:55:b1:35:08:9f:8e:a7:1e:f8:01:35:1d:
1d:e5:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:20:07 2026 by rpki-client