
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
File: saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json)
Hash identifier: XCsYA42+f/jef3AR5uPoua3G0Q/KDMfrYJN/Ac9DYW8=
Subject key identifier: 4E:D8:D5:C9:6A:BE:05:08:92:5C:1D:3A:50:28:C5:CE:65:0A:40:96
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial: 08C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
Manifest number: 08BC
Signing time: Thu 24 Sep 2026 20:26:52 +0000
Manifest this update: Thu 24 Sep 2026 20:26:51 +0000
Manifest next update: Thu 01 Oct 2026 20:26:51 +0000
Files and hashes: 1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: oZIG4P8WbzoGbmnZOkHCkMYCdxWUcEBac69QNjM2kgE=)
2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: 77hSYKp5nGJ1Gv+W5zbAX2pAyRbbfZvgk88uHWf8l8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Validity
Not Before: Sep 24 20:26:51 2026 GMT
Not After : Oct 1 20:26:51 2026 GMT
Subject: CN=6ab5878c-6ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:a5:35:f9:a5:f7:8a:ce:db:2e:28:49:a4:
9a:01:60:45:b8:ac:57:5c:0d:2f:52:95:bb:e6:9d:
9d:4e:91:be:a1:18:de:29:55:3d:15:fc:e1:1d:16:
23:ae:c6:d7:83:21:f1:3f:c0:f0:b9:9a:c4:79:41:
02:44:e1:42:76:08:e7:b1:6d:77:21:57:d5:29:a7:
97:38:e1:ee:6a:8c:01:5c:06:ea:48:dd:28:a4:3f:
6b:fe:1e:b2:df:b3:f0:d7:95:52:9e:97:0e:d8:56:
a6:65:45:5e:66:b5:fd:c3:f9:6b:82:93:d5:6e:cd:
24:8c:df:f1:ac:9f:93:37:d9:dd:d4:54:3b:44:2c:
0a:94:c2:44:1d:ae:b6:84:69:ab:32:6e:2f:b7:54:
76:49:29:f7:d5:03:6f:42:4e:32:d9:1d:61:6a:13:
3a:7d:5f:70:ad:0a:0f:5b:3b:2f:3e:1c:f7:07:c4:
99:ae:d3:fe:79:93:2e:06:26:a0:e4:86:5a:de:ee:
fc:25:a5:2e:db:95:19:1e:23:3b:34:81:e3:ad:ca:
60:55:5a:60:a0:57:c3:79:4e:5c:49:0a:20:34:87:
9c:10:57:e4:fc:07:0e:8b:42:06:a4:df:72:12:0d:
7e:7d:06:42:87:c3:82:b6:3c:74:cc:1a:63:4f:75:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D8:D5:C9:6A:BE:05:08:92:5C:1D:3A:50:28:C5:CE:65:0A:40:96
X509v3 Authority Key Identifier:
keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:50:f6:cd:62:14:7e:21:47:0b:41:e6:41:3d:fc:5e:f9:e8:
e8:ea:71:d5:f6:36:57:d7:61:41:c2:da:4d:47:1e:1b:3e:96:
70:76:ac:33:a0:2d:46:12:32:02:ed:eb:46:3b:63:91:e5:48:
2f:49:78:aa:98:37:30:e7:cc:fc:48:8b:6b:93:fe:43:f3:34:
7c:11:5a:91:19:ab:dd:4f:84:5f:60:69:e3:04:92:e7:2a:81:
5e:5b:62:54:df:65:2f:65:9f:d3:08:9f:7d:a6:0d:91:38:07:
7c:04:8e:7b:d8:97:bc:99:1a:11:e6:53:5f:a1:d5:d7:85:66:
f2:ff:46:d8:77:ca:af:b9:b7:01:f4:57:0e:a1:73:07:93:f1:
fd:b9:08:2c:9d:a2:b1:0e:fb:96:dd:8e:72:5b:b4:f3:77:15:
c9:ed:40:ac:29:e8:89:2b:80:4f:b6:80:b0:87:3b:86:f4:64:
13:09:2f:e8:48:82:4a:f2:e0:65:04:c4:cf:67:7b:dc:8b:50:
0d:f6:87:97:bc:fa:03:bc:42:27:f5:2d:24:61:c5:0a:c2:57:
6d:de:9a:13:25:f7:c0:f7:e7:33:0c:d4:3b:b6:a6:91:89:c2:
52:88:55:3d:c9:4b:09:34:7b:8d:a0:61:ef:20:22:91:b9:83:
29:3b:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:56:52 2026 by rpki-client