
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json)
Hash identifier: wBHjShGiV7YiMPOUCk/qflk+fMQuv9J1pLWGYBsX8VM=
Subject key identifier: 69:38:B1:91:4E:A1:E2:48:CE:3F:F1:8F:1D:55:AA:20:71:84:03:1A
Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
Manifest number: 0269
Signing time: Sun 27 Sep 2026 02:26:58 +0000
Manifest this update: Sun 27 Sep 2026 02:26:57 +0000
Manifest next update: Sun 04 Oct 2026 02:26:57 +0000
Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: JDEv1NUe9SGqSk+ebMeaaRjiB++bEkQ5oYIP0t9spGk=)
2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: bKQoSxUBJ9euNCEo3/ipwyFIFEjBiwQ+4bPM4RSsjiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Validity
Not Before: Sep 27 02:26:57 2026 GMT
Not After : Oct 4 02:26:57 2026 GMT
Subject: CN=6ab87ef2-5133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:7a:d1:c6:82:1c:8b:df:a1:95:2a:47:20:
be:40:53:66:46:c7:1a:0a:da:24:60:06:0f:72:58:
24:56:e7:12:c0:91:15:95:1f:9b:a0:ba:6b:94:36:
8d:6f:c8:cf:5a:77:25:7f:de:5f:da:56:6f:39:8d:
0a:3f:08:08:c5:c8:3f:d3:93:b7:51:ca:bf:11:42:
a8:75:87:6d:18:c0:a7:4e:12:90:b7:d0:0c:b5:a8:
07:a6:31:90:77:fb:6c:a3:25:0a:52:eb:b6:a7:c4:
17:74:18:fc:3b:4b:94:57:fc:e0:f8:bb:20:3e:b5:
40:fb:7a:1f:fd:56:8a:02:8a:07:54:3a:df:07:8c:
20:91:b9:a9:68:7a:88:c4:f9:c8:0f:fe:65:85:6d:
0d:8b:12:97:a0:ad:15:e8:12:3e:90:fb:5a:64:8c:
61:33:23:80:e2:22:b2:b9:63:0b:e2:41:70:18:96:
85:80:9a:3a:55:8c:a4:f3:a3:9f:02:56:22:d1:56:
13:a6:c7:7d:ef:f1:77:8f:b8:70:0e:d1:c6:6b:06:
1c:66:16:4e:f1:9a:54:af:0f:b5:7a:74:f7:44:21:
6d:83:3b:29:8d:10:36:c3:18:7f:e3:4f:d0:d8:09:
10:06:d8:6b:a6:91:d7:98:4e:0c:54:70:f2:2a:47:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:38:B1:91:4E:A1:E2:48:CE:3F:F1:8F:1D:55:AA:20:71:84:03:1A
X509v3 Authority Key Identifier:
keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ef:df:df:1b:84:d9:78:b8:a6:de:83:ef:05:a0:b5:af:50:
61:54:65:a3:85:99:bc:b9:2a:fd:83:26:4e:e1:17:ab:1f:2b:
0f:a9:db:b4:f0:f2:34:13:40:df:44:a4:ef:69:0e:c8:04:d9:
52:e7:56:fb:cc:3e:cd:31:fa:7d:b4:8f:3e:c4:d5:97:e5:bd:
45:2d:54:8e:f9:46:9a:0d:70:eb:f5:43:45:a3:a7:a7:12:19:
ea:46:8e:a3:a9:d2:d6:d3:16:5a:40:80:0e:63:51:93:5b:0e:
1e:8e:03:9f:9c:c0:85:6c:bd:6c:de:16:5a:6e:62:70:a5:18:
70:71:dc:1b:45:e5:7d:0b:d0:f7:c2:8d:68:e2:d5:85:10:ab:
09:e7:90:b1:90:6e:24:41:76:06:a8:f9:00:47:b6:39:bf:77:
1f:01:60:aa:a5:a9:98:d1:b4:03:d8:6d:15:9e:2b:33:6c:8a:
f3:25:e7:82:40:05:26:0d:98:f8:8f:8b:24:9a:d2:53:ce:e3:
24:d1:c5:c8:f6:a0:31:76:f1:8b:d5:56:1a:90:0a:d8:e5:77:
5d:03:8f:4a:aa:dc:14:80:3f:c0:e3:54:bc:be:8b:a9:c1:27:
10:bc:59:59:20:63:91:31:a4:bf:ce:44:9b:b4:1b:ff:ab:aa:
f9:7f:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:06:40 2026 by rpki-client