
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File: 0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier: jipQs6UkgOvrwwNiyvKrEPXRP8CiLGc9XKZQ7npe17E=
Subject key identifier: AD:C7:CB:67:25:3B:DE:F1:DD:91:7C:05:5A:9C:09:FA:42:B6:41:43
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer: /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial: 07F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number: 07D5
Signing time: Tue 22 Sep 2026 21:12:00 +0000
Manifest this update: Tue 22 Sep 2026 21:11:59 +0000
Manifest next update: Tue 29 Sep 2026 21:11:59 +0000
Files and hashes: 1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: 5BTGIix5+oGd1dcpXsBa03uKjP0GUl/noLzcDXBtOvY=)
2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: a0yVbOyKmzsc8MOg+dTg0w6gn2yodW2h3rxYL00GULI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Validity
Not Before: Sep 22 21:11:59 2026 GMT
Not After : Sep 29 21:11:59 2026 GMT
Subject: CN=6ab2ef20-e8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:8a:73:b0:9d:0f:60:01:37:86:81:31:e5:
0a:10:1b:27:34:8f:69:7a:97:21:57:a9:f0:20:e3:
fa:2a:6b:5c:28:9e:89:1d:99:44:b2:55:28:0a:a3:
e1:db:16:75:7f:c1:2b:67:4d:e6:cf:9d:c3:2d:d3:
e0:e6:4b:8c:39:68:7f:f6:82:4b:b3:1b:58:ee:fd:
d4:0f:32:e1:2f:8a:b1:4b:8b:39:d1:00:27:0b:21:
a5:f2:a6:37:47:7b:3e:71:6e:a7:3b:41:f8:5e:d1:
ba:a3:09:1e:aa:9e:3d:96:f9:85:4c:34:c6:b8:6e:
b9:fb:00:77:55:db:cd:66:ef:c6:b1:bb:26:0e:ec:
5f:95:4a:15:cd:91:af:25:eb:f2:8d:87:c0:ac:dd:
05:88:ed:ca:54:20:f0:38:8a:89:42:8e:3a:bf:04:
fb:ac:26:ff:59:0e:d5:a6:9f:42:e7:49:4d:3b:65:
e9:78:2b:f5:6a:63:af:bc:68:57:f6:62:df:bb:d2:
bc:bf:36:3c:29:59:c3:e4:9b:46:d9:56:82:60:cd:
47:5b:5b:f3:7e:47:5d:31:d7:60:2a:a8:c0:1c:6a:
10:19:17:af:2e:73:b9:8c:86:19:c1:de:51:e1:49:
b1:e0:36:81:ec:8b:c9:7b:ba:3d:57:57:d4:93:28:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C7:CB:67:25:3B:DE:F1:DD:91:7C:05:5A:9C:09:FA:42:B6:41:43
X509v3 Authority Key Identifier:
keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:7f:bd:92:cb:d2:05:43:a2:a5:ae:c8:7e:b7:00:bd:94:15:
4a:1a:02:00:2f:e9:73:51:23:78:88:f3:b6:a4:2e:38:7b:29:
00:ac:53:cb:7d:49:7f:ca:ef:22:76:d4:ac:c4:60:0c:57:21:
fc:3a:75:e1:61:c7:48:e1:d0:4d:95:13:5c:c2:26:e4:09:73:
1d:2e:45:3d:5d:9b:b1:37:c9:74:80:c9:11:8c:ea:5a:46:fc:
c8:1c:96:16:37:78:5b:4d:bd:b6:b5:03:db:2e:07:96:19:cc:
08:6e:ca:1e:e4:fb:70:45:3d:18:90:a5:85:de:b8:e3:50:fb:
05:cc:47:f6:2d:26:df:de:24:0b:d1:b9:e3:32:3e:d6:27:bb:
50:08:f3:3a:4b:8b:ff:17:51:fd:c3:86:67:40:41:d7:b2:9d:
58:39:fc:74:fa:a1:4e:19:0e:db:be:d9:3a:04:cc:05:e5:0f:
bb:f9:42:3c:a3:4b:c3:be:ce:b4:34:58:ac:9c:96:8d:ea:ae:
95:46:fd:6e:33:07:20:47:ed:8d:d5:1a:cf:45:fb:1a:09:57:
0c:af:54:37:b3:eb:b9:33:be:4e:e7:6c:d8:0c:a6:1a:66:30:
d9:ee:ef:4a:83:4f:e6:4d:28:2e:c1:a7:e2:6d:b7:81:3f:5e:
24:15:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:38:13 2026 by rpki-client