
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json)
Hash identifier: c0VkxNFk5/R72d8PrAH8k4nFGcCzgN+SENnBAQb9XYg=
Subject key identifier: DE:35:57:58:75:92:A9:66:D7:19:81:75:67:E7:F3:6C:AD:E1:CE:66
Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
Certificate serial: 18E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
Manifest number: 18D8
Signing time: Thu 24 Sep 2026 16:26:32 +0000
Manifest this update: Thu 24 Sep 2026 16:26:31 +0000
Manifest next update: Thu 01 Oct 2026 16:26:31 +0000
Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: eN5DujjI71FZobbl0Nk6oZ8w9i5+VYM4t6lT45vTDvM=)
2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: kAlL657G1w2cDSecYlSMX1FGlZCqDv6UlaT/sim3FTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl
rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6370 (0x18e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
Validity
Not Before: Sep 24 16:26:31 2026 GMT
Not After : Oct 1 16:26:31 2026 GMT
Subject: CN=6ab54f38-06da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:84:12:f3:ce:6e:80:b8:8e:6f:87:4a:6b:
5f:0f:c4:fc:dd:38:86:bd:be:c9:74:74:17:d4:28:
90:05:71:97:e3:e8:9c:42:7e:ad:39:d3:a7:d1:9e:
a3:11:3a:0c:6b:6b:2d:10:a6:04:c1:93:35:f0:71:
4f:c8:8e:a3:1d:fc:a9:28:f8:0b:df:2c:7b:eb:77:
2f:bf:f8:48:55:8a:86:80:65:b5:c1:5a:7d:1b:0b:
bd:59:cb:79:57:53:bc:95:58:ac:47:f6:41:96:10:
71:79:98:27:3c:d4:d6:ef:30:ed:e0:98:cf:02:b9:
f5:14:70:f8:9f:8e:8e:19:d0:11:ab:19:04:eb:09:
de:ce:39:6e:7e:31:97:60:bc:4e:f5:e5:58:5f:6c:
f5:c5:23:f1:6d:9f:f0:6d:44:55:de:35:a5:1a:4e:
bf:df:f4:aa:5b:f4:f4:a2:a1:9d:99:18:62:a7:11:
ee:a5:34:81:7a:1a:b2:dc:35:f0:35:50:e8:56:f0:
9a:9b:ef:76:15:a4:e7:e0:0d:9c:30:2c:ee:12:88:
5a:b3:69:90:cd:89:f8:c5:df:6e:ed:b8:18:41:dc:
72:59:5d:fc:6e:1b:7a:4f:c3:52:4b:ba:ab:bf:7d:
2b:0f:24:22:11:9a:17:4c:2a:c7:26:29:fe:33:11:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:57:58:75:92:A9:66:D7:19:81:75:67:E7:F3:6C:AD:E1:CE:66
X509v3 Authority Key Identifier:
keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:c6:de:1f:49:c9:4e:c3:56:fc:6a:dc:85:23:5f:aa:ee:6b:
16:b3:32:07:56:02:bd:65:8b:e4:b8:ed:c8:3d:5d:10:b1:b8:
1d:da:75:39:84:69:38:82:4e:ab:8e:4e:e0:5f:19:a3:45:84:
aa:b4:9a:d6:19:c8:89:90:b4:9a:86:ac:e9:3b:ed:70:a6:38:
f6:b5:c1:64:f9:2a:c0:83:8a:f8:bb:b2:c9:ca:13:d6:10:a0:
0a:c9:8c:d4:02:04:46:fa:c7:21:69:3d:0b:65:14:73:0a:bc:
14:bb:39:5b:13:b1:62:78:56:d2:29:05:dd:b1:aa:b4:55:e2:
7a:a1:7d:43:8d:73:e4:2c:10:78:85:68:72:0b:26:93:e5:a8:
82:3e:40:db:91:19:06:0b:91:95:7a:fd:96:9a:c3:a6:06:7d:
b6:00:89:f0:69:29:93:c9:6b:29:41:a9:25:4f:ab:e0:ba:72:
70:fd:03:ef:b9:38:b6:5f:86:db:52:fe:f5:65:2f:9e:48:43:
aa:1e:09:71:fb:1e:0e:a0:87:88:f7:79:79:b7:2e:46:28:01:
36:2d:35:ec:b7:dc:5e:bf:f6:0c:b6:8d:67:1a:93:ac:5b:5a:
43:95:79:ef:88:47:48:10:5b:07:68:c6:10:7a:df:87:58:a5:
32:57:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:24:42 2026 by rpki-client