
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
File: 2Fj3A4iS6EHZxtId9VCm6FJYufM.mft (raw, json)
Hash identifier: V5pgYiDlJ2sf209RysIkTlAEL2qY5EDD3LiOMSsYhBU=
Subject key identifier: B3:B8:80:FA:CC:85:4A:68:4C:F7:63:26:2F:27:BD:AC:0D:A4:63:02
Authority key identifier: D8:58:F7:03:88:92:E8:41:D9:C6:D2:1D:F5:50:A6:E8:52:58:B9:F3
Certificate issuer: /CN=A91ABD41/serialNumber=D858F7038892E841D9C6D21DF550A6E85258B9F3
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Fj3A4iS6EHZxtId9VCm6FJYufM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
Manifest number: 29
Signing time: Wed 23 Sep 2026 08:30:13 +0000
Manifest this update: Wed 23 Sep 2026 08:30:13 +0000
Manifest next update: Wed 30 Sep 2026 08:30:13 +0000
Files and hashes: 1: 2Fj3A4iS6EHZxtId9VCm6FJYufM.crl (hash: u4Q0XWq/cIEbwLrzoEgI9e2o1AkAR6l8uiXxR+HOb1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.crl
rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Fj3A4iS6EHZxtId9VCm6FJYufM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABD41, serialNumber=D858F7038892E841D9C6D21DF550A6E85258B9F3
Validity
Not Before: Sep 23 08:30:13 2026 GMT
Not After : Sep 30 08:30:13 2026 GMT
Subject: CN=6ab38e15-e986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:3d:8a:39:2d:fc:63:ac:68:49:c6:3c:02:
a1:e4:01:18:db:2f:a5:c9:b2:8e:12:89:77:fd:38:
93:13:5b:a0:7c:c5:99:fd:9c:6a:d0:0a:3a:55:13:
95:93:3e:56:98:1e:de:82:eb:7e:a3:b7:59:eb:5b:
c9:90:2a:49:e2:b6:f0:9e:96:a0:09:a4:41:df:22:
34:45:6e:d7:43:20:9b:f0:e9:d7:ec:4a:19:45:6e:
fc:26:63:ed:f0:08:a0:67:bb:3b:1e:e1:5a:f6:5e:
9e:6f:e2:e7:29:45:66:f1:bf:30:04:27:38:e6:1a:
64:31:71:88:a0:13:b8:a0:0b:5f:bd:83:59:22:cb:
15:c0:5f:18:0b:6c:90:43:36:8a:a2:82:11:3d:52:
0b:23:0a:d7:ef:30:59:09:0d:c2:da:71:b8:c4:f5:
49:6c:b1:ca:a1:2b:3a:28:78:77:ab:aa:8d:93:99:
e2:c2:eb:de:fa:77:ad:97:2b:63:83:9a:d7:f1:0e:
d7:56:a6:e1:4f:d3:c5:55:ee:16:5d:13:d8:c4:c7:
57:e6:05:40:87:dd:82:05:ee:bb:af:ef:5a:ca:08:
53:62:41:92:fb:cf:ff:35:d0:78:56:7f:43:3c:87:
5b:7c:99:e5:51:ae:96:fa:01:08:39:bc:fc:16:df:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B8:80:FA:CC:85:4A:68:4C:F7:63:26:2F:27:BD:AC:0D:A4:63:02
X509v3 Authority Key Identifier:
keyid:D8:58:F7:03:88:92:E8:41:D9:C6:D2:1D:F5:50:A6:E8:52:58:B9:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Fj3A4iS6EHZxtId9VCm6FJYufM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD41/CF464C9079DC11F1815E4BFE63A30FBC/2Fj3A4iS6EHZxtId9VCm6FJYufM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f5:74:2a:9e:1c:84:2e:6a:07:81:9b:c6:16:0d:4c:8f:1c:
d7:49:03:5d:a5:27:5b:e5:87:e3:f5:01:8a:6e:be:0e:21:86:
ec:8f:02:f1:03:2d:a5:cd:5d:47:c9:8b:16:d2:4b:95:26:4f:
31:ea:34:25:c8:63:6b:dd:1c:cd:cb:32:ae:61:51:c2:d2:11:
88:1d:79:bf:07:4b:4f:e9:2b:fe:c8:e8:d0:e5:d3:86:1d:27:
7c:06:4b:bd:0e:e4:f5:14:3b:69:e7:71:29:85:55:07:79:ee:
95:77:91:0f:17:d7:76:36:29:6c:56:7c:bf:5a:c1:f9:af:d4:
47:0a:06:25:be:69:a9:7f:e4:e1:94:f5:f8:08:e1:45:c1:40:
e8:bc:17:d7:2d:1b:33:4f:95:18:5b:5c:f8:b8:2b:90:2d:e0:
e6:05:0d:64:47:fa:dd:53:63:6c:dc:51:55:c2:1a:5c:06:a4:
74:4c:2b:94:a8:87:89:c5:be:4e:47:d6:1a:41:74:08:0a:13:
26:9e:bc:87:c8:0b:93:1a:8b:b0:a6:dd:e8:ee:4b:1d:7e:b9:
90:f3:83:de:00:37:5b:b4:4c:a2:91:91:18:97:00:24:5b:6f:
cd:d0:56:1f:b0:f2:ca:96:86:69:da:f5:26:15:16:d3:43:22:
a2:2b:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:03:11 2026 by rpki-client