
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json)
Hash identifier: pQeNMdeLkOwkHR6+j/HcMkqvWgaMtKRJgLwDl+WrdR8=
Subject key identifier: 21:68:01:AD:9D:D4:79:DD:61:96:DE:8B:21:4D:FA:08:C2:E3:21:7C
Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Certificate serial: 0DB0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
Manifest number: 0D73
Signing time: Mon 28 Sep 2026 18:11:40 +0000
Manifest this update: Mon 28 Sep 2026 18:11:39 +0000
Manifest next update: Mon 05 Oct 2026 18:11:39 +0000
Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: xBwPvIDMRswAeF4Xowr1KFHRhjGLdQqk1JWb5ITPmzU=)
2: 5B47C2265D8411F0BBB04858C4F9AE02.roa (hash: 5Gz1em/PdO/Bv/3TCy3czbXrmcPfmWaq1s4vYyqJQmE=)
3: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +v702T+ecCOjmmS56vuMtDJ6RGqPmaswdGe/Ps9k7F8=)
4: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: rZrIOdq3ol6lcEAYXeq2DsJFaFbmt+O1xVdoQjKA9Ic=)
5: CCA73AD084D111F195FCD5AD58A30FBC.roa (hash: Zsxd7kKN0wCdkDigU6/ttzwC27LOJzyfJn/Dkigf1fg=)
6: 5DB19F74332511F19B77F41AB8833773.roa (hash: eS81eZ4BRnB1S8RBeTEIim17x0/NA9jClADK3JWCczs=)
7: 4DC07014161411F1B995070A2E3D8C67.roa (hash: H0Jb9txtazlliAU6uAWUSrabDYFIpiBg6C2fr7jj4yU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 18:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3504 (0xdb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Validity
Not Before: Sep 28 18:11:39 2026 GMT
Not After : Oct 5 18:11:39 2026 GMT
Subject: CN=6abaaddc-06bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7c:11:86:49:7b:88:21:7a:e6:2a:d9:77:fc:
c8:a9:80:82:0f:20:7e:39:28:6b:aa:09:ea:f4:f3:
57:26:64:ab:dd:29:28:71:0c:80:93:87:83:77:04:
f0:d4:5b:08:d5:67:87:73:ac:62:40:3a:4c:ee:0d:
e6:91:e6:04:5e:58:90:59:fa:e2:23:7d:55:64:7d:
e9:cf:70:37:d7:a7:1b:d4:b8:da:cd:a7:33:75:a0:
c1:02:76:46:b8:15:4b:85:40:22:29:6e:d6:3e:a2:
eb:d2:ac:59:e2:f4:c9:9c:f0:21:72:5a:5a:6e:2a:
1c:ce:5a:0f:0e:a4:a3:4f:d6:07:3d:67:1d:6b:d9:
1a:58:c4:ff:7c:11:93:41:05:32:5b:d6:0e:14:ed:
2a:7a:17:eb:41:3f:e8:90:02:e8:0b:79:9b:d3:93:
65:29:28:44:9e:d9:29:ea:f3:b3:b2:fd:b7:ca:05:
b8:4a:fd:11:d6:7a:78:6f:48:f8:50:11:ab:bd:21:
13:32:de:5b:ae:78:d5:38:e9:8e:68:c8:a2:08:1d:
8f:77:e9:20:8b:6a:f7:0a:17:54:79:f7:d1:39:00:
16:69:42:f2:28:7f:49:91:17:54:25:ab:47:d8:df:
19:18:8e:6e:4b:d4:92:77:bf:a4:cb:00:ac:84:43:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:01:AD:9D:D4:79:DD:61:96:DE:8B:21:4D:FA:08:C2:E3:21:7C
X509v3 Authority Key Identifier:
keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f2:a2:62:48:fa:57:c7:3c:94:85:ae:56:64:0b:2d:58:43:
45:76:3b:a6:98:0a:b1:9b:af:7b:c3:1e:ef:ae:1b:19:2c:b5:
8c:74:7b:8b:49:cc:b5:53:ee:9d:84:c3:59:ba:2d:e5:ec:26:
0b:b8:21:65:cd:f6:b0:eb:21:7f:f4:a3:7c:b4:ba:17:79:19:
ff:94:29:60:c2:5d:16:cf:e1:7d:1e:20:c2:05:ab:d1:58:a5:
18:24:46:0e:41:50:55:38:98:9c:68:fe:2f:24:bb:95:68:ae:
d8:2b:c1:cc:df:db:c8:bb:26:64:ec:c1:2d:7f:db:ad:a8:7a:
92:52:6f:9a:ad:69:be:bc:55:32:84:4f:9b:a0:fe:91:99:01:
f6:44:9f:68:e6:97:20:dc:28:21:39:ee:ee:28:fc:53:5d:ec:
f9:8d:0c:8f:d1:83:b3:6d:e9:06:bc:61:b0:cc:d8:34:d1:b5:
a1:5c:39:39:5f:9c:31:b9:68:05:11:0d:be:78:2b:56:cd:96:
0f:dd:93:2f:4f:f6:4a:8b:bd:34:b9:04:12:cc:16:9e:28:d8:
30:c9:18:0e:00:9a:38:03:b1:7b:a1:d1:07:3c:41:be:3b:a4:
86:37:d1:b7:38:f2:1d:ee:57:5b:02:56:90:6a:cb:e8:1c:6f:
b4:02:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:08:59 2026 by rpki-client