
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File: mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier: PtLWAw6mG0Dh8LLQhdXuChL+1bH1Sgg9kQEkMDbRdP4=
Subject key identifier: C4:87:C6:D3:39:6C:CD:E3:00:AB:AF:F7:4A:0F:5E:FC:1A:2B:90:43
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 02DD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number: 02D1
Signing time: Tue 22 Sep 2026 15:58:44 +0000
Manifest this update: Tue 22 Sep 2026 15:58:44 +0000
Manifest next update: Tue 29 Sep 2026 15:58:44 +0000
Files and hashes: 1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: Ag84CLZlh4Khfdb3TE2h12Jk7IuGFgzj8TjhBpVAkYo=)
2: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: cDlDJUGZn7R/T+BNtx5SoPKWRYaEnJYFspu2vfBh0pY=)
3: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Validity
Not Before: Sep 22 15:58:44 2026 GMT
Not After : Sep 29 15:58:44 2026 GMT
Subject: CN=6ab2a5b4-cea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:52:24:61:52:96:d1:cf:bb:15:74:fa:89:
e5:07:c2:ed:54:d7:66:53:a2:52:df:ff:16:d6:92:
10:63:b5:f3:3f:c8:0e:f3:29:c6:7d:9c:f2:42:cc:
cc:42:7b:3b:3c:8a:c6:ea:05:c1:f7:42:be:f4:80:
98:7f:95:27:27:25:ed:22:a4:32:03:d2:2d:b8:70:
eb:a1:68:26:30:94:3e:bf:d6:c4:74:d3:98:f2:77:
3b:19:63:40:7f:92:fe:ac:2d:2a:e4:88:af:d3:df:
30:36:e0:9b:1a:3e:56:c8:68:aa:88:32:51:7b:db:
03:75:2a:51:7d:64:24:1d:cc:65:ea:b2:50:2f:0e:
17:af:a5:f0:cc:c7:17:2b:99:33:66:57:c8:28:af:
b5:c8:33:ab:df:63:2c:2f:bf:c9:fa:32:ff:b0:f3:
11:ef:bf:f6:26:fd:e4:a0:66:59:8d:9b:4a:a9:8f:
5b:dd:fe:cd:95:66:42:47:34:c4:fb:5d:8a:27:04:
93:a7:27:29:21:4f:48:35:e1:3a:cf:0c:74:4b:e5:
b5:66:3b:f2:76:7f:80:d5:f1:e3:01:ae:b5:29:2b:
94:ca:5f:66:fd:89:c2:40:4e:4c:67:ba:bc:7e:ca:
74:cd:56:86:93:c4:c7:c0:45:b9:8e:9a:06:be:1e:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:C6:D3:39:6C:CD:E3:00:AB:AF:F7:4A:0F:5E:FC:1A:2B:90:43
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:b6:56:e1:a4:09:6e:0a:c2:10:b0:27:e8:47:a4:b2:ea:86:
8b:a9:43:d3:b3:6d:81:62:7d:b9:80:2e:9b:cf:cd:05:97:6d:
c8:20:d8:d6:e9:98:f9:e4:c6:f8:29:74:d5:3b:9d:e6:96:f6:
c5:39:16:8c:c1:56:f4:29:ff:0d:60:a2:94:4f:94:ad:c9:06:
8e:09:5e:a3:e8:7f:f7:6b:c2:8b:5f:9b:52:5e:2b:bb:7c:77:
39:6d:54:43:97:29:bd:c8:ff:9e:b2:c0:ab:f4:2f:0a:1b:e5:
ce:af:e2:43:ab:4b:27:5c:53:cd:99:a5:63:b4:e3:06:b5:fb:
0d:68:5b:59:4c:33:00:dc:9f:1e:bf:66:32:f6:9b:8d:65:71:
a2:c1:d8:3f:59:12:4f:ad:49:96:50:e4:8e:4b:77:3b:a6:a8:
5d:f7:6b:68:0d:fd:e0:aa:46:ab:d4:b8:5d:cf:d9:08:45:49:
73:8b:d8:7d:07:e2:0c:b2:03:5a:2e:c4:e2:52:f1:6c:6e:9a:
37:77:a1:20:dd:48:e8:65:be:34:9b:eb:58:d7:ad:a3:d8:94:
f8:5b:cd:15:02:e5:20:2c:a3:bc:17:50:da:24:3a:fa:38:a8:
14:2d:07:05:d5:08:be:41:dc:01:26:e0:df:4c:01:00:49:d7:
3c:d8:21:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:09:41 2026 by rpki-client