
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft
File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json)
Hash identifier: aIn0+OtkE0OuLIB/sBmy5tMr64KrFEi5G8fS/+6/TFQ=
Subject key identifier: 1F:0A:91:A4:57:47:8F:0C:4F:35:E3:3E:24:59:97:E8:1A:E7:64:7A
Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D
Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft
Manifest number: 011C
Signing time: Sat 03 Oct 2026 06:38:37 +0000
Manifest this update: Sat 03 Oct 2026 06:38:36 +0000
Manifest next update: Sat 10 Oct 2026 06:38:36 +0000
Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: t0v8KGhuPiesz40sd3xUIUwJ3h0PljE9aQN/biY0Ny8=)
2: 1C1628BE2D9E11F1B1FA5F5A88EE528E.roa (hash: AdqbKoLvsHyKD6HghcgCeYloGvI0ehL1LADbVK02jZo=)
3: 1DA281C82D9E11F1B1FA5F5A88EE528E.roa (hash: gMJWlgng2lgevvc5aZJ8BLiTHzTn0UTcScrCCSp3b7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl
rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 06:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D
Validity
Not Before: Oct 3 06:38:36 2026 GMT
Not After : Oct 10 06:38:36 2026 GMT
Subject: CN=6ac0a2ec-c069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:03:0d:9e:73:e7:c1:a0:ca:12:4e:54:bb:
59:33:ff:f6:5a:93:40:c9:e1:6e:8b:04:1d:d7:01:
77:b1:95:87:64:6d:d4:ae:98:44:91:57:85:fe:a3:
51:56:9c:c3:1d:c5:46:76:7e:b7:35:fa:16:d1:f2:
db:70:bd:39:2d:bc:7b:c4:45:be:6c:95:c2:a3:4b:
8e:26:be:a8:79:cb:3c:0d:d5:02:ff:b4:19:73:bc:
d1:de:5c:cd:7b:af:2d:94:51:c5:34:aa:c4:28:18:
1a:1c:23:9a:3c:a8:53:e3:f1:48:f8:88:74:00:02:
5b:62:a0:3d:61:2b:49:05:47:08:c5:3a:3b:7b:f6:
0b:4e:d6:f9:12:5f:ad:8a:94:81:a0:64:42:e6:b5:
76:e2:43:61:98:b2:30:0d:9c:b5:f3:75:18:f1:5e:
16:43:3d:65:3b:23:62:4f:76:65:50:3a:68:49:3d:
f4:cd:e2:6a:7a:a1:25:85:f4:9b:f8:6a:14:e8:9a:
1e:b6:7d:d8:c8:01:b4:2f:4e:79:20:0c:d6:ee:b6:
ad:f5:e6:54:74:b0:25:70:eb:7a:80:12:bd:64:f4:
2c:64:08:e1:28:48:90:88:3a:6d:25:33:94:d9:cb:
dd:12:8c:86:cc:cb:fa:b7:5c:16:47:ef:0c:45:77:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:91:A4:57:47:8F:0C:4F:35:E3:3E:24:59:97:E8:1A:E7:64:7A
X509v3 Authority Key Identifier:
keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:e5:78:19:02:1a:61:33:a3:8a:c4:63:74:84:c8:e2:3d:6f:
f2:32:03:6f:a4:b6:75:4f:71:6f:45:ef:7b:90:25:d0:7e:1d:
3f:e8:1d:b7:77:e6:2b:a5:4b:ad:90:53:df:c5:7c:4d:e7:4a:
1a:ec:79:8d:ac:5a:b7:51:d8:d0:50:af:8e:3d:8f:7a:d7:14:
c4:06:ea:17:2f:a6:09:bf:cf:eb:b4:16:8b:4e:e3:b4:ec:95:
b1:14:75:30:0e:2d:7c:89:cd:68:96:50:7b:07:bc:c0:c9:5f:
83:b2:5e:57:91:53:00:6e:1c:b4:a3:94:b4:a4:bb:f4:1a:a1:
d7:01:97:21:f5:f4:f9:92:b7:21:ac:18:8b:29:35:3a:03:89:
f3:6d:71:62:7d:82:f3:1d:41:88:49:6c:68:3d:a1:cf:5a:15:
9e:4b:3f:88:e9:5c:0a:2c:7a:58:b6:39:59:8d:67:34:db:d1:
7b:8b:f4:00:59:f1:f0:76:8b:78:a5:1b:46:62:00:4f:2f:8c:
03:f2:02:53:fc:3d:e3:f9:f1:d0:85:62:a4:bf:61:ba:77:4c:
9c:22:a9:4f:8b:91:e1:04:73:1b:ea:80:af:ed:a3:65:a8:21:
92:b9:9e:b7:b5:c6:81:fe:f3:a5:26:f8:0f:82:2b:dd:4b:98:
98:36:b5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:45:57 2026 by rpki-client