
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
File: aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json)
Hash identifier: ThslMzmwnZPiZAcUu4vt9dSIH2+zw49WV/ms1MOjg1Q=
Subject key identifier: 3D:10:E7:DC:5B:85:A8:09:B5:BB:31:81:98:74:AC:E7:98:72:49:EF
Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
Certificate issuer: /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
Manifest number: 0142
Signing time: Fri 25 Sep 2026 05:31:14 +0000
Manifest this update: Fri 25 Sep 2026 05:31:14 +0000
Manifest next update: Fri 02 Oct 2026 05:31:14 +0000
Files and hashes: 1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: gWtcnyZSpE1IESWuj2tZS1tStoG00MDk7DYX3Vt59Hk=)
2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: GJJAq7Y4rDKXzfncSIrWC7/k2iyBuKfDbZCWqya2Ycc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Validity
Not Before: Sep 25 05:31:14 2026 GMT
Not After : Oct 2 05:31:14 2026 GMT
Subject: CN=6ab60722-4221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:b2:69:af:99:dc:f9:7a:0e:3b:07:1e:4f:
17:ad:f1:50:8a:f1:3f:de:76:7e:2a:cd:6b:cc:54:
ea:44:93:70:8e:4b:b7:30:b0:2f:80:97:3b:c8:0a:
b5:55:88:1c:bd:b3:6d:2d:5c:d5:b2:3b:d5:de:52:
11:d7:aa:b0:2f:86:dc:c5:5e:ea:ce:ca:dc:76:46:
f8:7e:a3:7b:87:70:99:23:5c:8d:a5:3b:0d:93:34:
04:c3:85:a8:31:12:90:9a:5f:c4:81:52:11:ac:c9:
df:48:45:c4:0b:73:d4:d2:29:50:67:05:d3:1b:80:
38:9f:26:87:69:c9:9a:02:4b:2e:5b:f0:51:69:7c:
05:2f:33:0a:de:0b:52:55:ca:20:5e:73:82:33:87:
ef:01:4d:72:6f:88:6c:1d:5d:be:2a:9f:b5:f0:6f:
e8:7c:ff:03:22:52:38:33:93:4f:4f:73:79:8d:e3:
88:08:a0:60:df:e4:cf:b3:ac:9e:75:30:ec:51:41:
20:96:cc:9c:71:9e:97:33:6d:d0:6a:36:e4:88:ce:
df:98:9c:33:a5:fe:58:36:65:c0:81:5d:38:eb:30:
c5:d8:4e:4e:65:52:64:7a:ad:80:6b:eb:e0:a6:10:
b5:2d:b8:27:ec:11:75:66:ee:5f:3c:92:af:29:40:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:10:E7:DC:5B:85:A8:09:B5:BB:31:81:98:74:AC:E7:98:72:49:EF
X509v3 Authority Key Identifier:
keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:75:a6:c8:8d:81:e8:bb:2b:95:a2:01:1c:90:0f:68:fa:c3:
c7:a6:b4:1c:c9:b4:83:b1:f7:3f:bd:69:47:75:5a:5c:d5:0c:
83:9b:2e:5c:11:f9:97:6c:06:82:6b:8e:0f:bf:52:68:99:ed:
d2:0a:47:5b:35:b1:7f:6e:98:5e:fa:88:0f:f7:10:6e:2e:62:
e4:b8:b8:de:60:8c:41:b3:54:89:f1:23:0f:9c:2a:88:4a:b8:
33:cb:c8:fd:4d:5e:3b:ca:cf:94:65:b2:83:4d:b4:6c:0d:d8:
07:94:01:08:fd:e0:7c:93:81:aa:2f:a6:19:76:0d:4c:55:37:
1d:d2:11:0d:02:a0:c3:e0:ff:4c:c1:07:9b:cf:9b:45:be:18:
24:c7:61:60:5b:32:85:bf:3f:43:4c:c7:ef:5f:43:3d:9f:1a:
1c:a0:a8:5e:82:20:28:84:ac:4e:61:66:6d:25:f8:7a:df:e4:
e9:97:38:31:0e:f1:79:34:e4:0d:09:78:73:cc:35:a0:f5:83:
ec:78:70:73:cb:d0:9c:8c:ad:17:7c:cc:46:d9:7f:f6:94:81:
85:92:a3:60:ca:72:a6:d5:47:51:44:59:b6:96:aa:72:12:1c:
9f:4e:10:5e:69:2b:6b:54:ff:35:7f:12:d7:e7:de:e3:e7:23:
fb:67:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:18:16 2026 by rpki-client