
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json)
Hash identifier: QvKvnj92HLFkxqJhD4PbEet4toFqwYCEEe/oN4l17+s=
Subject key identifier: 73:AE:19:73:1D:C0:5D:4D:DF:60:8F:82:65:FC:9D:4C:6B:E3:0D:AD
Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
Manifest number: 0178
Signing time: Wed 23 Sep 2026 00:23:13 +0000
Manifest this update: Wed 23 Sep 2026 00:23:13 +0000
Manifest next update: Wed 30 Sep 2026 00:23:13 +0000
Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: md+wKruTuswFSxH2kdDCBjsoIjhx1p/mwX+epGNFVvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl
rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
Validity
Not Before: Sep 23 00:23:13 2026 GMT
Not After : Sep 30 00:23:13 2026 GMT
Subject: CN=6ab31bf1-464f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:19:47:ac:c1:cb:5d:d3:73:d3:08:42:f7:
2f:45:d1:d7:f1:e5:60:d9:57:03:56:20:97:e3:00:
18:30:c1:62:f6:17:6c:59:eb:0f:97:d3:ce:ee:1c:
a3:4a:db:94:7f:be:ae:6e:ed:75:45:22:08:17:be:
e9:d8:c1:f8:49:d9:9e:c3:67:b7:ce:35:db:51:98:
2a:dd:45:79:e2:fc:e1:76:b4:6a:08:da:87:af:58:
7f:aa:d8:fd:8a:60:07:f4:cd:9a:76:62:09:46:04:
95:01:60:9a:74:b0:a9:bd:d6:5c:01:69:e7:b4:65:
ad:91:b4:55:c3:3c:dc:95:1e:ca:ea:bb:31:68:9c:
2a:ab:7f:b6:95:f5:0c:f0:cd:c1:78:22:d1:1e:49:
b0:4b:66:3b:31:32:9b:79:b9:18:61:c5:10:e4:e3:
9b:b4:2f:d1:9a:5c:73:06:ef:b8:85:35:7e:40:9f:
f9:75:13:bc:0c:84:1f:a3:ec:1e:eb:cd:10:35:a2:
1d:85:4b:41:f5:ef:ec:56:43:13:77:c4:67:33:87:
0b:1e:ca:3d:ab:e1:20:eb:ac:68:10:83:c5:26:17:
26:36:d5:db:94:58:46:b5:d1:89:19:d0:89:2b:dc:
50:54:a6:bc:70:20:ba:6c:ef:d2:27:37:fb:7d:75:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AE:19:73:1D:C0:5D:4D:DF:60:8F:82:65:FC:9D:4C:6B:E3:0D:AD
X509v3 Authority Key Identifier:
keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:1a:dd:19:f1:cb:80:1a:78:26:84:2f:94:68:fd:22:da:36:
27:45:65:15:0c:b8:cc:96:a6:58:63:9c:b2:54:e7:ad:f3:2a:
07:c9:15:cc:d3:d4:fc:d0:b9:f1:8b:4d:f8:1f:f1:57:59:29:
ff:9e:dd:4f:b5:c7:a1:2e:73:36:3a:e2:8a:b4:8b:05:bc:fc:
05:e1:78:e4:2c:d5:c7:a9:c4:aa:ae:1d:21:b5:4f:d8:aa:6f:
df:9a:64:81:4e:c8:b8:7a:bd:37:bb:b8:ac:21:f9:67:00:01:
49:7e:04:43:2a:6f:59:4c:a7:30:66:b6:43:7d:f8:6d:85:bc:
b3:9a:83:09:18:6f:02:a3:06:b6:b4:19:e0:f0:ea:57:ce:61:
27:f0:26:55:55:40:a2:32:90:c9:e2:c9:0b:c7:2b:69:17:b7:
f4:d5:3e:8c:e1:a0:78:0a:eb:97:24:8f:6b:ea:5c:2b:79:fb:
6d:6c:4c:d0:bf:3d:2a:a8:fb:bd:ab:e6:b5:51:d2:18:ce:8e:
90:08:d0:29:0b:4f:a5:84:d4:42:a6:53:3c:51:4b:2c:5d:b2:
3f:65:d0:30:ee:47:eb:e7:65:89:02:40:3b:3f:d0:95:38:60:
3d:91:a9:58:dc:cf:be:5e:a0:ae:90:95:05:b4:a4:41:a3:23:
10:89:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:35:05 2026 by rpki-client