
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier: bQd8uqccR3uV9M7RGO75fx6w3XxlLPsycuUW9e+b1jk=
Subject key identifier: E0:82:BB:70:2B:47:F3:4C:96:97:77:6B:A9:5E:E5:E7:AD:7A:83:55
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial: 3588
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number: 3582
Signing time: Thu 24 Sep 2026 15:13:50 +0000
Manifest this update: Thu 24 Sep 2026 15:13:50 +0000
Manifest next update: Thu 01 Oct 2026 15:13:50 +0000
Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: fdJxRQ9gUBXXbejXycYp9rv+ru1bW4vrIeCIbywyCxs=)
2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: xDho51ddKsKnW1mieTz7ANylai7wvJBRqnmFiSl8KPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13704 (0x3588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Validity
Not Before: Sep 24 15:13:50 2026 GMT
Not After : Oct 1 15:13:50 2026 GMT
Subject: CN=6ab53e2e-6338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:2c:12:ff:12:a3:02:c4:1e:be:9b:59:3e:
aa:2a:6d:2e:84:22:c6:6a:7e:19:fc:7d:66:ec:b8:
c4:5e:5a:85:8d:d2:4d:0b:1c:4a:32:52:53:11:bc:
95:13:1d:62:68:09:f0:bd:4f:09:45:d3:dd:5e:d8:
9d:5e:97:65:0d:9d:05:b0:81:99:06:e1:97:ca:77:
4e:a1:db:b2:38:2e:bb:a3:e6:cb:08:82:b0:8a:a1:
1b:c9:7b:a8:9a:03:a9:df:98:69:ea:ab:c6:2f:cd:
df:2f:f4:8a:1c:f8:c9:65:4c:3c:a2:88:0a:94:d2:
a0:c1:3a:e9:ac:18:4b:ee:5a:fa:0b:a6:93:b8:50:
1a:70:f5:cd:14:ee:cd:10:a6:27:86:0f:26:d0:32:
c0:e3:eb:6c:ce:ad:06:a0:67:63:bb:2d:4b:e8:b8:
1a:d7:cd:63:03:01:21:ba:ad:b2:9b:a0:4d:e1:bb:
96:89:c7:34:91:f4:da:7c:7b:45:10:9b:f5:83:31:
7b:d3:17:73:f8:c0:49:6d:b0:32:65:d6:02:46:76:
69:e9:03:57:dd:04:5b:fb:bb:57:cc:b8:41:53:62:
29:7f:45:37:a6:d5:77:a2:63:55:af:9c:70:da:2c:
2f:f1:63:46:15:c1:ec:c2:3c:b5:a1:e0:a7:9a:ba:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:82:BB:70:2B:47:F3:4C:96:97:77:6B:A9:5E:E5:E7:AD:7A:83:55
X509v3 Authority Key Identifier:
keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:67:29:e9:5f:0a:23:57:51:a5:81:d7:b8:62:90:58:44:00:
fa:fe:0a:86:90:93:a0:73:e2:58:80:dc:59:c4:93:b5:5a:34:
57:2b:7b:ae:5a:41:80:52:c7:61:6f:95:a8:ac:bc:cd:93:9f:
48:a7:8f:b8:37:ea:75:c4:ce:96:41:57:92:cb:92:26:c4:48:
ce:88:bf:8d:2d:6f:3e:55:fd:32:2c:f6:18:2e:db:ac:1e:f1:
09:da:8f:28:33:9a:86:18:07:f7:3b:29:a7:51:a4:64:de:ca:
41:60:a1:82:57:68:25:87:0b:b7:0b:e0:9d:c0:7b:3a:34:18:
f8:03:c3:22:b1:31:d9:39:32:df:f9:ec:9c:f3:4b:bf:0e:2c:
f0:b8:41:ea:61:78:c5:f5:db:00:e2:1f:6a:90:55:f1:ea:05:
f6:c0:22:c3:af:23:37:d5:78:06:87:c5:b2:e3:1e:4d:7c:ad:
7f:b5:66:93:fa:e1:12:9c:50:98:f8:d1:9d:18:ff:6c:48:5b:
37:79:c3:45:06:b5:f3:3b:2a:4a:49:cd:01:55:9e:aa:d4:ba:
ae:b3:05:7a:84:56:ea:59:14:69:f7:84:bc:ab:d7:51:a5:15:
1f:66:af:9d:60:a5:69:69:41:a4:6b:3d:b0:4c:2f:70:55:47:
4c:b2:69:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:45:14 2026 by rpki-client