
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json)
Hash identifier: NXXEo320woP3rDbHcSlvJNhB0o2zCFRT8sX3VZvnepo=
Subject key identifier: 8B:3F:CF:5A:C1:13:2D:F0:0D:18:64:BB:BE:20:C6:70:3D:60:F8:4B
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
Manifest number: 02F5
Signing time: Fri 25 Sep 2026 00:58:07 +0000
Manifest this update: Fri 25 Sep 2026 00:58:06 +0000
Manifest next update: Fri 02 Oct 2026 00:58:06 +0000
Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: 0cDggbh8TfLHkY9A7tl2mhTzdv/QaCeBjLvypB3yVkA=)
2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: ZgAplW2WPpphTjMrs3xfinlKfr7iRBVAdXaHsqlCR2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Validity
Not Before: Sep 25 00:58:06 2026 GMT
Not After : Oct 2 00:58:06 2026 GMT
Subject: CN=6ab5c71e-6f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:5a:4a:35:16:2f:b2:5b:50:1b:aa:09:1f:
bc:6d:6e:10:14:56:e8:7c:51:df:78:04:d8:87:80:
92:e5:e0:f5:d1:55:cf:ec:40:21:18:21:ce:25:d3:
93:3f:6b:a8:df:fe:57:79:d2:38:e0:96:07:fb:91:
b2:2c:69:f2:24:74:bd:c1:99:20:75:ac:36:fb:0f:
15:9e:27:85:a3:f0:2e:6e:35:7c:98:87:2e:4f:09:
0d:a6:68:33:12:28:8e:33:ca:9f:49:20:db:e7:14:
c5:7f:26:c2:3b:2b:c9:e6:05:1d:ff:05:89:0d:e9:
0c:28:3d:e5:69:05:d9:58:97:ba:ee:08:80:55:44:
35:03:f4:54:4b:8b:6e:58:83:55:32:31:cc:d6:f8:
f3:71:3e:e4:c3:64:d6:c1:14:ed:a5:88:df:9d:fa:
53:a1:5c:b1:16:00:a5:72:e6:9a:15:b1:51:04:8c:
77:2a:b1:c5:5b:ad:03:9b:c0:e1:e0:38:77:36:dc:
42:d4:30:74:ab:63:b5:46:bb:0c:ee:b3:0b:37:c6:
94:91:d4:59:3a:91:3f:fc:0d:4b:fe:af:27:74:f1:
ed:60:ae:5c:5a:c1:70:9e:6e:e0:16:9b:39:82:18:
a2:2f:fe:a7:2b:f2:ee:3b:7b:69:df:78:19:d2:68:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3F:CF:5A:C1:13:2D:F0:0D:18:64:BB:BE:20:C6:70:3D:60:F8:4B
X509v3 Authority Key Identifier:
keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ca:54:a8:2c:cd:49:8f:f3:ec:77:0b:b4:92:33:3a:9e:cc:
a5:30:25:80:b6:a9:bd:55:0a:1c:42:75:41:3c:5b:4f:ef:88:
2a:b2:54:9e:d1:1b:b8:c5:eb:59:e9:60:fe:83:37:1e:90:48:
b2:c9:43:6a:ad:13:93:9b:ec:30:f7:d4:fd:be:c3:a3:44:63:
80:a2:0a:2c:d3:4d:91:19:f4:a8:4d:86:ec:c8:9d:2d:53:59:
be:37:31:35:96:f3:50:74:97:82:7b:80:6c:d1:45:c4:28:e5:
04:5f:8f:cb:bf:cb:ab:88:f1:5e:15:ba:31:ed:4c:c9:83:05:
02:a1:c9:af:8f:01:70:8f:4d:5b:08:20:8f:90:22:12:63:ff:
37:45:7d:3c:49:39:26:79:e0:f8:ed:d5:c6:5d:af:4c:12:c7:
c4:f1:7d:83:ae:10:f6:d2:68:0c:10:d5:96:57:dc:67:71:2a:
df:11:c6:5a:aa:bc:f9:fc:e5:29:7d:df:e1:70:cc:ac:c6:13:
96:2f:0f:6f:4a:d1:48:39:fd:74:18:f6:ba:f5:41:dc:8e:42:
cb:95:24:ee:8e:4f:60:bf:96:f1:b6:e7:f5:1e:79:a1:1e:7f:
f7:da:11:aa:ae:bb:0e:76:33:16:a5:34:87:a7:a3:e5:85:ad:
97:6f:21:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:35:09 2026 by rpki-client