
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
File: R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft (raw, json)
Hash identifier: 2XLb5f1xZOR+Eya/r4ej908wUSN7D1FLwjbtQSk2M+E=
Subject key identifier: AC:27:C1:ED:98:FE:90:5E:28:C7:E4:DA:2F:18:76:00:4B:F0:E0:0C
Authority key identifier: 47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35
Certificate issuer: /CN=A91918AB/serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
Manifest number: 8B
Signing time: Wed 23 Sep 2026 07:20:22 +0000
Manifest this update: Wed 23 Sep 2026 07:20:21 +0000
Manifest next update: Wed 30 Sep 2026 07:20:21 +0000
Files and hashes: 1: R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl (hash: 1rICMIBrzSJ7m6/KpAXmFjwMs+/59FJdalAh1Jm5Gqk=)
2: 1CCFF4EAE94411F0858458963C6F56BC.roa (hash: zSizwmjwC1EUvKxUhWbJHmVerxHzuPrZmy1ydtzt1dI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl
rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91918AB, serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
Validity
Not Before: Sep 23 07:20:21 2026 GMT
Not After : Sep 30 07:20:21 2026 GMT
Subject: CN=6ab37db6-0144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:de:46:c6:91:b8:de:c0:23:1d:bf:ec:f2:
82:01:68:38:0a:0f:c8:07:a8:b9:a5:2c:2b:80:6d:
25:79:03:af:0a:d6:7e:3e:c4:7b:af:02:36:7e:25:
7e:6e:f8:9a:2f:8a:f1:68:5e:96:bf:d8:49:ca:6e:
bd:11:f3:7f:7e:55:b7:b2:ed:b2:1b:34:0f:a2:92:
bc:95:84:19:ff:8b:8d:79:9a:1e:70:36:f5:62:18:
29:c8:54:55:d4:4d:99:8f:db:5a:ed:f4:88:c0:22:
bd:b1:1f:44:4d:da:77:c0:09:19:10:34:b5:32:b1:
e0:ee:02:6c:80:b2:8c:96:7b:e6:d2:cf:fb:7c:a2:
df:63:bb:29:91:94:e4:43:ca:36:e8:37:e1:64:00:
e6:18:e7:3c:0b:3c:66:b2:b8:30:41:0c:1a:45:71:
c8:74:9d:78:37:a7:df:f4:a5:0a:0c:42:06:ec:f5:
cf:fc:27:bd:1f:e9:42:87:85:48:44:20:bc:83:d4:
79:c9:f2:44:0e:d2:38:ea:14:70:b1:fa:d1:3c:93:
d2:6a:96:0e:be:9c:de:9f:bd:53:e5:ab:05:ec:79:
fc:c9:4f:5c:0d:9c:4f:f0:ec:bc:a2:bc:ae:e0:f0:
61:2d:ed:b7:df:85:84:e8:a5:7a:9d:90:72:50:fb:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:27:C1:ED:98:FE:90:5E:28:C7:E4:DA:2F:18:76:00:4B:F0:E0:0C
X509v3 Authority Key Identifier:
keyid:47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:fb:99:a4:9b:8f:e1:83:b0:21:74:72:38:cc:14:c5:7c:29:
94:dd:ad:14:9d:5c:dc:e0:59:8b:c2:80:91:68:2a:06:3a:ec:
2f:25:b2:ba:ee:5b:cb:de:4b:82:3e:ca:44:c6:fa:6c:90:c6:
bc:80:04:07:3b:09:89:51:66:f0:58:61:76:d1:5f:f0:56:7d:
1a:36:b6:a1:da:69:42:59:38:05:39:59:c4:51:e0:e1:50:4e:
fe:5a:9c:e9:c4:15:73:98:1f:3b:47:69:ed:b0:8e:3d:b5:3c:
0f:b6:ff:12:bc:79:e2:fe:58:b6:f0:c7:f5:b5:b1:74:c3:13:
7f:5f:8d:80:00:3e:29:a1:1e:6a:14:ea:96:67:83:88:2a:2d:
e2:e2:ce:22:2a:a0:85:a3:66:37:fb:30:d6:84:d2:04:f3:7f:
2d:1f:98:c5:58:ed:78:50:4d:c2:e3:f5:43:7d:de:cb:64:78:
79:98:e6:25:c5:c0:21:87:8e:f7:eb:07:ea:65:7a:b5:0d:72:
25:9c:36:62:18:46:6c:20:a1:eb:ab:d4:3c:b6:ac:8f:6c:c2:
cf:50:79:18:f3:bd:ae:97:66:f2:2b:26:d0:ee:93:f7:04:9b:
a5:f7:85:f5:ab:fb:e9:ae:7d:1e:4f:fd:6c:f2:d2:5b:bf:94:
01:38:b0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:34:01 2026 by rpki-client