
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File: tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier: NjADF7uWUc0LhfMDpObSOFzyJ4x+6K0tw60ip7txu5o=
Subject key identifier: FD:E7:5E:1F:2A:7A:A2:EE:E6:AA:4E:77:94:4C:1C:A0:9A:C4:C3:F0
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer: /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial: 1000
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number: 2E89
Signing time: Mon 28 Sep 2026 16:46:15 +0000
Manifest this update: Mon 28 Sep 2026 16:46:14 +0000
Manifest next update: Mon 05 Oct 2026 16:46:14 +0000
Files and hashes: 1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: j7KmdF/uSjNTWBVQU970/z6diq9l0hMZ+QH9jgIP/NA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 16:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4096 (0x1000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF, serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Validity
Not Before: Sep 28 16:46:14 2026 GMT
Not After : Oct 5 16:46:14 2026 GMT
Subject: CN=6aba99d7-ed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:72:85:b5:8e:b3:0b:38:24:f0:16:fa:a9:
c0:31:05:1d:ac:b2:f0:df:a2:3b:73:64:81:75:ee:
66:28:a4:bb:c7:fc:cd:cd:2a:a5:e6:3c:a1:da:60:
28:0f:15:cd:93:dd:88:4d:ca:fe:7b:1f:10:c0:62:
6e:5e:ac:04:69:6c:11:05:1d:cd:c7:d6:8b:80:22:
38:cd:9e:e1:7a:fe:af:58:9d:61:d6:48:5e:0e:b8:
9a:98:2b:d7:0a:f7:22:64:b4:93:8d:bb:09:d7:ac:
7f:25:f6:2e:fb:80:1b:8f:cf:6e:46:cb:6b:bd:2b:
7c:67:88:0c:9d:7f:cf:fd:b2:bb:42:47:d0:41:d5:
f4:ec:15:8d:12:eb:d8:8c:60:85:66:6b:ed:2e:bf:
59:96:04:9d:49:6c:80:9d:52:93:12:22:33:29:5e:
6e:b6:b2:3f:2f:b3:4b:26:1a:33:f4:95:5d:ab:82:
e3:04:da:20:a8:5e:32:ba:19:84:33:d6:78:df:00:
4f:8e:2c:9f:f9:8f:ec:ca:97:e5:f2:01:2c:20:21:
82:35:84:81:50:2b:dc:aa:0a:cb:d0:12:2e:01:6a:
5d:36:7a:16:95:b4:80:90:ba:56:84:7e:25:ff:e0:
61:50:ad:7e:80:07:53:fe:4c:aa:ad:f4:aa:58:14:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E7:5E:1F:2A:7A:A2:EE:E6:AA:4E:77:94:4C:1C:A0:9A:C4:C3:F0
X509v3 Authority Key Identifier:
keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:03:b6:8a:9d:21:85:ec:76:43:1c:fc:9d:de:62:00:e7:a7:
5d:a1:07:a9:f1:73:7a:fc:cd:0e:cb:ce:39:4a:41:9c:37:0d:
70:dc:d0:a7:20:f5:82:18:b1:7d:d6:95:f5:a5:35:50:73:c2:
0b:95:5a:81:40:ad:e0:63:62:ab:14:b6:fe:a5:67:8f:17:b4:
92:1a:64:8c:5f:8e:5e:8a:b6:e2:53:fc:6f:ad:93:28:fc:8d:
73:b9:d7:2e:7b:05:92:00:ab:3b:d0:82:d9:d8:63:89:ae:ca:
96:57:07:64:d4:fc:a5:e9:70:98:3c:a4:64:e2:14:8f:c4:5c:
d6:dd:39:ff:76:ea:f7:f3:75:73:90:1c:82:d9:14:3a:75:ed:
54:59:4f:0f:f6:8e:4c:fa:8a:eb:59:a5:5a:1a:6d:d1:95:a0:
03:f5:a1:30:6c:a2:cc:92:ef:8e:7c:4b:bc:30:9d:62:cf:78:
80:b1:3e:ea:99:0f:12:4e:da:c4:d5:6a:c5:e2:93:ee:f6:5c:
50:45:c5:71:8d:2c:84:30:52:88:8a:0f:60:ba:f8:39:9f:31:
d3:1f:68:fa:b7:43:17:99:59:76:6b:17:e3:20:77:2b:f7:b3:
32:4a:2c:9d:85:7a:ac:ef:3a:d2:1e:31:44:cc:9b:8d:4f:ec:
db:01:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:21:41 2026 by rpki-client