
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json)
Hash identifier: Uj67tBEiigQwGxfoi7QCNMcVGvOeGN3gekP0ez31PH0=
Subject key identifier: 94:AD:81:1D:2F:1E:3A:64:95:29:EC:E0:70:7D:A1:91:54:8C:18:55
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial: 0ECA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
Manifest number: 0EB3
Signing time: Tue 22 Sep 2026 14:40:56 +0000
Manifest this update: Tue 22 Sep 2026 14:40:55 +0000
Manifest next update: Tue 29 Sep 2026 14:40:55 +0000
Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: WtZFUuXD3BKNmITImxkrzCh0cqNX/uK4imQ/eL5yDWU=)
2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3786 (0xeca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Validity
Not Before: Sep 22 14:40:55 2026 GMT
Not After : Sep 29 14:40:55 2026 GMT
Subject: CN=6ab29378-41b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:a6:b5:b4:d9:1b:76:51:73:92:5a:d7:4e:
a1:41:b7:7a:6e:b3:9f:04:1c:02:0c:69:61:2b:30:
60:2f:9e:e2:bc:8d:5d:88:ba:6e:a2:ee:25:93:f2:
62:03:41:3c:5b:3f:5c:5e:16:41:d8:ba:0d:a6:7f:
8c:72:a0:c4:4c:7f:e2:f6:0d:bf:ba:54:62:d4:eb:
b4:c4:eb:c6:73:b2:f9:eb:bf:ba:bf:70:bc:75:6a:
c8:71:ba:26:7f:f3:72:ad:e7:bd:af:a0:ab:1e:93:
35:89:7d:df:e2:c9:4d:8f:a7:7a:78:6d:2e:94:0e:
ae:71:59:bb:98:84:a3:45:f0:63:89:23:87:09:3b:
74:f2:32:52:d8:6e:53:ae:d5:2d:77:4c:96:f9:7d:
36:85:24:29:2c:4f:4c:03:ba:ce:f4:2a:b7:71:30:
46:19:3f:93:3c:6d:ed:8a:a5:95:ec:57:5b:12:4d:
cf:f1:bb:1f:d4:95:77:3f:2f:f5:b6:c3:03:34:74:
bd:ef:26:84:27:0f:f4:67:13:8b:81:0f:f1:af:18:
f4:14:13:e6:5c:9f:81:84:45:57:31:0b:18:a0:38:
54:00:0b:c1:3f:c6:58:e9:85:88:26:64:a3:b0:da:
ea:f4:d8:18:e0:8f:61:77:af:e6:03:8c:c2:5a:5b:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AD:81:1D:2F:1E:3A:64:95:29:EC:E0:70:7D:A1:91:54:8C:18:55
X509v3 Authority Key Identifier:
keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9f:ff:2b:16:e7:c9:7e:91:7e:00:5e:6d:45:77:59:b1:a9:
78:49:92:22:ca:ee:99:ab:85:ce:17:67:70:cc:e9:1e:b8:ec:
95:75:e9:cd:7b:b1:55:37:5d:e4:ba:18:e3:14:98:f7:54:b9:
ed:5f:f0:b9:db:5e:cf:bc:87:2e:22:c6:9b:68:f3:38:8d:e9:
d4:06:8c:24:06:39:ac:23:5b:cb:31:8b:04:2a:88:04:ae:e4:
52:37:b5:4c:ba:f9:c0:28:0f:49:7f:ff:c6:b9:47:8f:a6:55:
0e:9a:04:3e:b1:4f:fe:d9:70:b3:14:f5:79:9d:11:68:34:c9:
d3:a3:8e:ab:03:2f:42:25:e1:74:1f:fa:10:7d:19:27:8b:19:
97:16:19:d3:0d:70:47:ba:18:bc:74:78:83:b6:ad:3c:52:f6:
11:45:c7:1f:99:c8:35:f1:03:a5:c7:52:66:3c:37:bd:d7:e9:
a0:ff:84:37:13:88:2c:58:68:ab:40:3e:62:c9:ae:83:62:47:
2b:67:dc:95:1e:d4:0f:92:78:d0:47:af:f6:01:3c:af:3a:70:
65:a8:78:5f:65:f1:2d:76:36:5b:8e:b3:ac:48:ec:af:19:83:
07:75:59:5e:c4:60:b4:b6:54:c7:58:5f:92:a7:14:f1:ee:0a:
b6:d0:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:48:02 2026 by rpki-client