
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json)
Hash identifier: 5AhkUatgogXS/YfBCyhSBgCOm2lXK6HYI1AVZBBcYWQ=
Subject key identifier: 75:B8:A9:1B:72:FE:CA:9C:06:14:C6:1C:B6:4C:3C:AA:3A:5B:B1:5B
Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Certificate serial: 064C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
Manifest number: 063F
Signing time: Tue 22 Sep 2026 22:24:16 +0000
Manifest this update: Tue 22 Sep 2026 22:24:15 +0000
Manifest next update: Tue 29 Sep 2026 22:24:15 +0000
Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: dKiQLX1uJVGlVhLH8BnyOxOVcUbPdEC6RbUWmOUmLPA=)
2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: VDech5jPNGmdLMydFhvBmeMj/+3X8iHs7o3tOUHRvXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612 (0x64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Validity
Not Before: Sep 22 22:24:15 2026 GMT
Not After : Sep 29 22:24:15 2026 GMT
Subject: CN=6ab30010-bd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:7d:db:82:39:cc:88:7b:0c:54:75:e7:2d:
be:ce:eb:c8:bb:54:72:fb:88:ac:0f:ee:73:71:e4:
80:12:19:7c:c3:04:57:7a:a4:3b:47:5f:c2:75:21:
83:17:99:44:76:9e:0f:fb:2d:22:d6:4a:73:85:d3:
42:4d:50:f9:bd:93:96:ae:d0:5d:4f:d0:fb:bd:3e:
f6:06:81:c1:0d:71:46:63:15:4e:f9:89:a1:4c:36:
41:44:b3:42:9d:d2:11:77:3b:88:09:b9:75:07:b2:
91:b1:32:ac:5d:d8:89:27:5a:35:75:ec:bd:12:6a:
65:cb:41:69:18:15:c4:a6:58:e8:94:22:a9:24:36:
84:18:58:ff:cd:ab:75:b6:b2:a9:b7:84:92:b2:0e:
ca:62:22:9e:72:0b:b0:7c:a5:f2:fd:92:68:fb:75:
48:9c:18:bf:20:3c:4c:2b:72:61:cf:f2:48:6c:b8:
76:d3:d0:7c:9c:4f:68:84:ca:71:e2:00:dd:eb:cb:
f1:50:d3:6a:3f:74:7b:fe:e9:eb:d4:5c:68:bc:35:
0c:dc:75:57:11:a7:8b:cb:fd:6e:16:0d:03:57:3b:
aa:d6:2d:5a:11:63:ef:13:e6:5d:03:ea:67:6f:85:
1f:ac:7e:03:d6:04:64:c0:49:6b:84:71:65:2a:11:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B8:A9:1B:72:FE:CA:9C:06:14:C6:1C:B6:4C:3C:AA:3A:5B:B1:5B
X509v3 Authority Key Identifier:
keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:67:3c:a7:83:a9:c5:a0:4f:bd:67:cb:54:82:b0:8a:b1:4d:
a3:59:03:75:51:51:c9:6e:f7:4d:fb:bd:16:5f:8c:a1:18:3b:
1a:f1:21:b8:0c:89:5d:fa:32:c0:6d:26:ab:e0:f6:4c:90:35:
1d:00:2f:f4:b3:6a:42:bc:da:56:32:dd:6e:dd:f1:a8:91:ef:
47:c7:25:cf:e4:ba:7d:e3:62:22:46:bf:d9:48:19:07:3e:a7:
46:28:4c:86:5b:9e:84:23:46:32:96:d9:f0:d0:84:8a:c7:26:
af:ef:78:5d:9c:70:a0:a2:ca:f7:ce:c4:17:42:99:0d:12:b9:
5b:50:59:35:49:81:c0:1e:e7:86:3a:ed:99:22:40:7d:ee:b1:
28:8c:9a:a2:ab:b3:59:8d:cb:8c:66:34:e6:9a:f6:0e:8b:8a:
7c:b3:a9:93:ab:40:97:13:57:5f:47:6d:7f:01:57:ca:4b:08:
35:6c:f7:80:52:c0:49:ce:f3:a9:76:ae:7e:1c:45:49:59:93:
ba:c5:b2:96:25:d5:93:04:9b:9e:f7:b8:ad:05:5d:4e:75:70:
80:c7:e5:e8:f7:c0:44:d0:d0:c1:a8:5b:6a:56:5f:7b:76:fb:
44:49:9e:8f:a8:7d:21:06:e4:b2:2d:88:7c:87:54:d9:ed:e4:
60:87:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:27:24 2026 by rpki-client