
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json)
Hash identifier: QOuvVqI09PyqSbGLORH/iDa/IlW09fR7vDeixt21p68=
Subject key identifier: C8:51:2D:54:DF:78:1B:B9:3D:6A:1A:4E:F4:81:03:C8:FC:53:D8:CD
Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Certificate serial: 0998
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
Manifest number: 098A
Signing time: Mon 28 Sep 2026 20:10:14 +0000
Manifest this update: Mon 28 Sep 2026 20:10:13 +0000
Manifest next update: Mon 05 Oct 2026 20:10:13 +0000
Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: bYrsCArtzHqW6bjRthyicJ8lezZETEAgsr92EeiZ8nI=)
2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: bR/cjGdfq0JwjhxDM7vEMQcNpWmxlExdz3OXXAbaui0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 20:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456 (0x998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4
Validity
Not Before: Sep 28 20:10:13 2026 GMT
Not After : Oct 5 20:10:13 2026 GMT
Subject: CN=6abac9a6-2f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:05:07:4f:a6:78:bf:38:50:7d:96:f1:55:
e0:46:4e:8e:08:94:24:22:29:83:ac:4b:55:07:a3:
7c:1b:59:58:b5:fc:5e:3b:6e:21:e8:c0:3a:74:09:
0b:38:d5:78:59:67:1e:36:cd:f1:19:69:0f:22:26:
59:34:88:e9:6d:19:78:99:5f:27:f9:43:2a:0b:b3:
85:32:f8:0f:3a:32:f1:a9:16:7e:a7:27:16:7e:61:
d5:ad:00:46:ff:b9:39:fc:ab:d9:d9:75:c5:38:64:
49:aa:6f:3b:9e:56:1b:77:99:4d:3b:f3:8b:a8:5d:
e1:93:1c:db:29:1a:bf:49:7e:8d:7f:fa:88:82:b0:
ee:88:44:fd:59:ab:94:38:ed:7c:84:8f:56:93:0c:
dd:66:3f:ab:c9:f4:22:9a:61:be:8c:39:da:2f:c0:
11:13:7c:27:8a:af:a0:2b:6c:76:c4:ea:a0:4b:42:
84:89:95:9f:96:d0:ae:1b:5a:aa:c0:36:50:09:40:
b6:1a:21:e4:12:c1:d4:d5:e4:0d:3d:35:6b:f7:c1:
2d:51:43:d3:52:7f:5e:48:cb:fe:e0:2d:6d:45:31:
89:93:d9:14:a2:ed:42:27:05:a8:34:3f:dc:a9:89:
20:bc:8c:e3:71:4f:da:62:d4:70:58:40:d2:7d:04:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:2D:54:DF:78:1B:B9:3D:6A:1A:4E:F4:81:03:C8:FC:53:D8:CD
X509v3 Authority Key Identifier:
keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cf:cf:0d:6d:90:c7:3d:e9:4a:ea:8a:9c:8e:3e:0f:d6:77:
67:ad:b9:c4:00:38:1b:5b:28:2a:e6:d2:23:ed:89:48:17:0b:
ac:66:ab:fb:00:a5:ed:16:ba:70:3b:a9:a3:64:bc:bf:18:21:
dc:6b:5d:7a:27:52:71:d1:f7:72:ff:6c:9f:d6:2a:18:51:74:
86:0e:c4:62:91:80:77:d0:98:e9:66:35:a6:75:16:37:27:ba:
f0:8f:20:aa:e6:ac:ef:7d:cc:36:99:1f:4f:41:b6:1b:c8:bb:
e4:d9:e1:dc:d7:06:d3:f5:52:33:9f:7e:a0:ba:b0:fa:c0:b7:
e3:72:ae:62:79:7b:cd:88:4f:ee:b1:75:a0:dc:51:97:64:0d:
64:c8:d9:f1:73:e0:c9:5d:a3:89:ae:89:a9:45:34:5e:03:da:
c7:b5:c3:d0:27:e0:8a:91:7d:2b:d8:f3:98:e4:b5:5a:0d:15:
7a:a0:73:e1:a3:e9:47:6e:21:b2:9d:cf:40:35:77:ba:5b:73:
90:48:3b:02:ae:5d:d8:1b:c7:67:93:28:e1:dd:0b:50:99:87:
9d:27:00:27:a7:6a:a1:59:58:65:b7:1c:68:29:87:fb:47:e6:
1b:4b:1b:4b:eb:5b:40:25:40:83:fb:56:1a:fc:2d:17:3f:11:
bd:d4:10:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:58:30 2026 by rpki-client