
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json)
Hash identifier: Th9CIZLEIMH5BZ2ihvmkiiGwT1guIF5spqKtmNb9yF0=
Subject key identifier: 01:B3:32:4A:37:46:16:EF:4F:D8:92:2A:81:7A:EA:17:91:F6:68:4B
Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Certificate serial: 0339
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
Manifest number: 0332
Signing time: Fri 09 Oct 2026 01:11:56 +0000
Manifest this update: Fri 09 Oct 2026 01:11:56 +0000
Manifest next update: Fri 16 Oct 2026 01:11:56 +0000
Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: jY5/kSlfmMb9vUIkoFr/77sSpJokVltJvF4xwqO/ko8=)
2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: 3EomuYTOYpdRonmxsDgyICA/moRstX6OW0zEPClInuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 825 (0x339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Validity
Not Before: Oct 9 01:11:56 2026 GMT
Not After : Oct 16 01:11:56 2026 GMT
Subject: CN=6ac83f5c-b2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:71:f3:f8:24:88:5f:0e:0a:83:60:ed:87:34:
05:2a:54:28:19:98:c7:24:07:cb:66:d7:dd:8b:68:
92:dc:8f:36:a9:3c:23:6d:dc:fe:22:d5:27:87:03:
8a:65:ba:47:9b:07:74:18:fa:d6:ea:83:89:cc:3c:
d1:47:37:b9:46:48:5c:10:e5:d3:ed:84:3b:dd:8e:
09:09:e5:4b:07:3a:e5:ef:c0:2a:0b:a0:96:0f:b8:
10:d9:7a:89:29:2b:c8:26:3f:9b:12:31:1e:fc:e9:
7f:a0:97:aa:af:fa:c2:88:0f:d4:4f:38:b3:94:8e:
94:b2:d4:fe:c4:84:5e:3c:87:3b:c2:b7:aa:a9:77:
ba:b1:82:5c:4b:4c:ab:82:32:12:c2:f8:fd:97:21:
5a:20:c0:85:03:6f:e0:ac:39:75:97:5d:f7:9e:0f:
f1:6f:8e:7f:15:96:08:b3:fc:27:df:0e:5d:f2:3d:
ce:6d:e1:96:fb:dd:01:18:09:dc:02:f3:42:41:67:
ad:b2:4f:a9:da:71:78:67:03:64:29:f9:86:98:41:
90:43:b5:0d:3b:a1:c5:5b:3b:1d:2d:7d:5e:fc:0d:
47:6e:92:db:68:3e:ff:96:84:8c:b0:c2:9d:f4:b4:
f3:2f:37:ca:02:4a:7a:b6:58:a9:13:cc:18:55:c4:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B3:32:4A:37:46:16:EF:4F:D8:92:2A:81:7A:EA:17:91:F6:68:4B
X509v3 Authority Key Identifier:
keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b9:69:ec:3e:d0:9a:2f:ce:aa:a3:50:a1:81:1f:7c:c7:ff:
70:1c:2c:e8:f2:26:29:52:2c:cf:d0:05:5a:72:7f:3e:11:59:
15:ef:12:7f:90:d0:9d:0d:f2:8d:82:f8:f7:36:4e:41:7e:8a:
18:97:21:b0:dc:4e:e1:f0:d0:34:4c:e4:7c:64:6b:5e:4e:87:
06:b0:79:70:af:c0:02:06:fe:5e:6f:5a:18:2e:63:40:ad:83:
44:3f:9b:1e:bc:b9:95:16:7c:6d:26:c1:67:f4:56:c3:3d:51:
0b:8f:2e:57:3e:d2:71:38:d0:73:62:5b:88:c3:dc:37:06:c2:
dc:21:fe:60:b3:e4:de:ca:a7:26:dc:c1:42:a7:4b:e0:cd:dc:
ed:a0:db:96:a2:77:46:b7:21:37:ee:10:a1:e4:bc:6d:dc:7a:
a7:60:f6:39:fa:9b:4f:19:c8:46:a5:54:04:ca:74:b9:f0:31:
ac:28:7a:49:12:89:ff:e7:e1:33:86:94:fe:6d:6f:a5:52:d9:
41:72:ac:7c:1f:14:ca:df:29:84:04:3f:db:fe:15:86:34:b9:
03:08:58:46:59:1b:70:3e:0a:3e:4f:2f:5e:58:b5:82:76:c3:
ba:f7:84:be:06:5c:be:a0:1d:01:3a:b2:c0:01:b3:f8:be:6a:
ff:b7:9d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:43:48 2026 by rpki-client