
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
File: bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json)
Hash identifier: 9jtZcDP+thfmBWTYlX+pbHvvuWD9fOpZlfSIHp5LFJs=
Subject key identifier: 8F:CD:64:BB:CD:5B:20:CA:D5:D0:80:F6:47:BE:B0:DA:51:AE:32:0B
Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
Certificate issuer: /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
Manifest number: 91
Signing time: Mon 21 Sep 2026 07:29:40 +0000
Manifest this update: Mon 21 Sep 2026 07:29:39 +0000
Manifest next update: Mon 28 Sep 2026 07:29:39 +0000
Files and hashes: 1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: VuEoEmjWczrLasSB8FwhwrQq+HhesMrSW0Si4G61vM0=)
2: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=)
3: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Validity
Not Before: Sep 21 07:29:39 2026 GMT
Not After : Sep 28 07:29:39 2026 GMT
Subject: CN=6ab0dce4-f993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:56:1e:f3:d7:28:67:31:38:65:c9:81:74:
43:2e:47:92:68:a4:38:22:1a:86:51:2f:02:b0:9f:
8f:f7:53:4a:c0:4c:08:23:73:64:e9:5c:83:8c:69:
7e:07:f2:52:75:5b:d4:08:c9:53:c6:f8:0b:f5:4f:
6e:a9:07:64:9f:63:66:79:a0:42:8f:c9:c0:15:c3:
43:42:3e:07:9d:d1:5e:5c:5f:e3:dc:5c:aa:33:9a:
2e:8f:be:71:0b:cd:37:18:bf:38:4c:81:c3:d1:3d:
ec:fd:49:9d:7c:2d:d7:aa:f0:eb:66:df:32:bc:bf:
8e:64:aa:29:9d:80:16:9a:73:3c:96:f8:8c:9b:e9:
1c:76:87:26:b5:f7:b7:be:df:64:6b:67:33:6a:fe:
58:73:26:ae:36:ac:33:8a:2e:d6:3d:27:5d:df:af:
7f:4c:1d:b4:17:4c:fe:6c:9b:95:17:2a:f1:6a:d7:
a2:9a:41:c0:80:48:89:ed:53:e4:6c:92:89:5a:4b:
82:4d:8e:1e:a4:5a:0d:42:27:b7:3b:91:a7:88:0f:
92:75:d5:c9:18:67:d7:b2:87:d9:b3:14:2c:7e:65:
81:82:b8:9b:39:39:24:ee:9f:42:93:c6:4f:cf:52:
b7:e7:d9:b7:5d:5f:61:54:f6:89:4f:a8:dc:b6:df:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CD:64:BB:CD:5B:20:CA:D5:D0:80:F6:47:BE:B0:DA:51:AE:32:0B
X509v3 Authority Key Identifier:
keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:94:fa:be:0b:e8:b8:b8:58:30:de:34:0a:de:f1:c6:85:29:
7c:b5:da:3f:35:8f:ac:c9:eb:64:30:c9:fe:16:c0:e4:4a:12:
8c:d0:2d:b8:a3:42:16:8f:ef:37:c4:93:f5:1f:4a:74:b8:2d:
d4:7b:ec:2f:b7:74:1d:dd:24:66:2e:76:9a:e9:3a:e6:c0:de:
dc:f4:da:79:0b:3d:23:bc:4d:09:9a:a9:3b:7c:ec:18:dc:5e:
6e:f1:a3:c8:fd:36:46:ce:e6:95:fa:a7:42:a1:2e:cb:f9:0f:
5d:fd:67:86:d2:40:49:09:3e:68:30:b6:b9:d4:04:72:05:f2:
16:0d:fe:a1:19:a4:3c:49:9a:f6:7c:3a:95:78:cd:0c:d2:39:
d8:ec:90:82:f6:15:39:e1:3c:0a:4f:dc:3c:34:fa:f4:2a:73:
39:d1:3b:56:58:e7:58:95:9a:a2:c3:65:a3:f3:67:99:26:94:
65:88:22:28:53:22:63:60:3c:76:77:d1:56:d0:50:a7:5c:e2:
19:2d:04:dd:b9:6a:2f:9f:2e:8d:a7:63:07:c7:5f:13:a8:06:
63:90:3f:52:76:33:58:12:78:ba:c3:9c:7b:c0:fd:e2:c3:79:
03:71:1a:11:a2:81:6c:91:ad:56:d5:53:0c:af:52:ba:4f:8d:
42:54:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:43:12 2026 by rpki-client