
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json)
Hash identifier: JizGyYuTRdllUpfeBh+t0cEHjkdU0eNNrJhdQbtn158=
Subject key identifier: E0:D5:8E:28:52:D6:F6:AA:B5:50:9B:15:89:A1:3E:16:BE:C3:4F:62
Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
Manifest number: 0171
Signing time: Mon 21 Sep 2026 04:46:50 +0000
Manifest this update: Mon 21 Sep 2026 04:46:50 +0000
Manifest next update: Mon 28 Sep 2026 04:46:50 +0000
Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: OPxS93LpNdepf60GsOjjjVx56MWaNXCTGscjlKDNOzI=)
2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: 777ytcJtKRK+U1mjB59992g0IydheNppCEpFNuVRoDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Validity
Not Before: Sep 21 04:46:50 2026 GMT
Not After : Sep 28 04:46:50 2026 GMT
Subject: CN=6ab0b6ba-a38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:86:4a:c9:d7:28:51:03:95:bc:3f:ce:58:
89:68:7c:c0:27:cf:5d:fe:fc:1b:96:b2:73:23:ed:
2c:93:de:dd:3e:06:c0:71:87:43:b0:8a:fd:ea:fd:
74:c8:37:0a:5d:cc:5f:df:be:26:d9:1b:c8:e6:89:
71:5f:3d:01:28:f0:38:87:6e:fd:04:87:e7:62:8f:
e8:05:70:88:c4:92:f4:8a:92:79:d3:48:88:54:b5:
84:87:53:9c:55:5e:d6:f3:ec:57:00:eb:64:ac:29:
ad:42:df:e9:26:0b:aa:9f:f2:88:0c:12:ed:9b:18:
09:ed:d1:16:2c:23:7b:2e:a0:08:18:bf:32:af:9d:
a1:c5:bd:cc:63:2b:fd:62:99:bc:b2:32:92:f7:56:
51:46:00:8b:4c:e9:a1:bb:6e:43:2e:64:fc:9a:27:
25:11:89:39:97:32:10:7c:19:7a:55:32:71:66:94:
5e:c5:3a:01:d9:84:4d:8f:7d:42:15:34:9d:95:a0:
5a:bb:a2:57:c0:56:ec:ed:ca:a6:03:da:f7:09:1d:
fe:32:e1:16:f1:bb:7a:d7:cf:d9:f5:96:32:58:15:
71:0b:a5:18:dd:05:eb:c7:56:17:24:36:06:2b:bc:
03:02:db:0b:bb:40:21:dd:fb:c5:2d:5b:87:b9:bb:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D5:8E:28:52:D6:F6:AA:B5:50:9B:15:89:A1:3E:16:BE:C3:4F:62
X509v3 Authority Key Identifier:
keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:10:43:08:f1:da:4a:2f:50:3d:15:f5:f8:9c:16:a4:85:3d:
dd:6d:4e:bd:97:d5:82:2e:a8:e6:23:3a:ac:75:16:60:23:25:
3a:1e:ef:bf:11:f5:5c:15:08:ae:a1:cf:72:f4:33:70:91:24:
99:11:9d:21:05:7f:e6:a4:ef:9a:5b:ee:fd:db:13:0f:47:0a:
44:ae:20:5d:34:97:af:1a:1c:05:85:18:92:04:79:ba:d7:43:
cb:fe:13:4e:5d:23:98:c1:c9:9e:d6:68:4b:f4:07:e7:da:74:
d0:73:90:9b:31:30:e8:50:1e:41:e1:80:28:d6:fa:1e:bd:f1:
82:22:c6:76:e2:4a:55:7a:c9:68:c5:a7:39:39:f8:26:05:e0:
89:e9:a9:f9:1b:c6:9d:53:84:be:f2:22:5f:5c:01:1b:fe:ac:
12:82:3b:72:cc:92:bd:d8:33:77:a5:e2:04:99:b3:1f:a0:17:
88:05:cf:c8:b0:23:63:e3:b8:fa:2f:64:6e:ef:7a:fa:42:01:
b3:45:5e:c8:e1:62:6e:37:c6:4a:49:78:eb:00:f8:91:d5:95:
74:87:89:ff:3e:88:63:12:95:02:cc:53:21:3c:4c:63:50:af:
3a:f9:57:7e:c6:9d:87:5e:e6:a0:03:c5:3c:35:57:a1:6a:04:
5c:32:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:33:59 2026 by rpki-client