
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json)
Hash identifier: L4c+D59ceJSgwIP5Nkd8foBY/jqDQ/K5KJ0IiGF/+fg=
Subject key identifier: 47:2D:CF:02:7F:DE:D4:52:F2:82:E9:EB:6F:7C:6B:EE:60:E9:61:D1
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
Manifest number: 0251
Signing time: Wed 23 Sep 2026 02:10:52 +0000
Manifest this update: Wed 23 Sep 2026 02:10:51 +0000
Manifest next update: Wed 30 Sep 2026 02:10:51 +0000
Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: ekpZcXpU2DsoHgQrmwMI2dqr6Y+/znDK8l7FThCJ14s=)
2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: fjGpC/tzzFWbeBBortAKHNrafmR/+XWGojeVFa7vFyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Validity
Not Before: Sep 23 02:10:51 2026 GMT
Not After : Sep 30 02:10:51 2026 GMT
Subject: CN=6ab3352c-fc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:8a:df:f8:d7:64:b9:12:c8:40:f8:8a:d2:
32:6d:d9:b8:57:75:68:4c:f3:c5:0d:dc:2e:05:12:
76:d2:bf:39:81:9f:25:b9:59:2e:58:f9:4f:48:59:
b2:b3:d0:bd:2f:93:a6:85:14:34:8e:bc:5d:c5:77:
2a:48:b1:85:b2:8e:06:a6:1e:69:c9:9a:80:04:6a:
b5:ac:bd:b2:20:a5:d9:d8:83:47:f8:2d:87:df:79:
2e:49:43:fe:e8:9a:76:c3:c0:1c:11:d9:82:ec:85:
73:15:5f:29:d1:8e:01:34:ab:3b:e4:bc:b4:53:bc:
92:11:10:60:8c:48:9d:84:68:57:48:c4:76:dc:d0:
4a:e6:6d:cc:a7:ef:2a:2d:8f:1a:ef:e1:96:18:7e:
44:01:c0:81:75:91:f0:6e:3e:1b:76:1d:2a:b8:2c:
d0:f9:e7:6c:37:93:e2:60:3f:be:d7:d6:2f:80:e2:
e6:eb:e3:c7:99:eb:a6:b1:f6:ac:e8:f4:e4:04:98:
65:a0:f5:f2:71:52:81:39:db:5f:2e:8b:23:6c:24:
28:31:eb:18:5d:8e:87:1b:e2:2c:93:d4:30:44:9a:
85:68:e9:b6:74:7e:ff:f0:a2:a7:4a:5e:de:59:62:
50:24:9e:7f:1f:39:ee:b2:2d:e6:58:83:aa:61:9a:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2D:CF:02:7F:DE:D4:52:F2:82:E9:EB:6F:7C:6B:EE:60:E9:61:D1
X509v3 Authority Key Identifier:
keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3b:92:b3:cb:c7:8b:0e:17:46:9d:87:c0:df:dc:e0:f6:1a:
b9:5c:ab:e7:cf:64:5b:3c:83:4d:a5:da:97:7e:72:20:57:c8:
f2:0c:f6:b9:3f:c2:56:20:57:36:fb:09:0b:25:28:e2:14:a8:
83:e0:1d:88:ca:ff:cc:ec:fc:bc:aa:a0:d7:29:49:ef:8b:a8:
e0:68:d0:44:ac:a9:ff:c7:46:e6:4b:c4:ac:e9:02:c9:40:8d:
db:33:69:20:7d:4e:9c:65:03:23:09:ba:0d:70:8c:31:31:ef:
df:e8:1e:ea:9c:97:80:a6:78:3f:a5:3a:0f:23:c9:6a:4a:b6:
27:b7:fb:08:6a:5a:63:66:66:3c:3c:68:4a:c7:b6:11:06:de:
c1:ab:a9:b0:78:60:62:01:d0:ba:a8:7d:1e:63:12:0d:07:9a:
6f:5f:57:c5:82:62:28:e7:22:91:9a:4c:7c:08:30:fe:96:c6:
21:21:89:7d:dc:1c:cd:5f:07:22:89:bd:60:33:4f:6a:69:f4:
a6:4b:2a:e5:4f:d2:34:25:b7:eb:56:e2:09:c2:3d:8e:23:f0:
eb:44:31:a1:32:10:2d:a0:ba:3d:bc:22:a1:34:24:0e:57:31:
61:00:37:19:10:82:bd:40:76:ee:ec:67:fb:55:ef:32:5c:16:
50:4f:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:02:37 2026 by rpki-client