
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json)
Hash identifier: 3jDH+PIgNv3eCDJyXUNAJSzn8GnfM6VRSdsTlrQ6CHw=
Subject key identifier: AA:B7:1C:74:C5:1A:D0:CE:36:50:E4:BB:74:A8:85:10:59:AA:82:51
Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82
Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382
Certificate serial: 0971
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
Manifest number: 0966
Signing time: Sat 26 Sep 2026 20:11:48 +0000
Manifest this update: Sat 26 Sep 2026 20:11:47 +0000
Manifest next update: Sat 03 Oct 2026 20:11:47 +0000
Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: yKSpa2vzrRsddne9U4EJibKzKBu0ENv7QoWB3N63Dw4=)
2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: Pj+YSJz05e5/XvtCulJkxzG8FOEXuhs7JqRBkYESckI=)
3: IfnxeI_qvA_DIKB98GZIwMTgjjg.asa (hash: oq7xHMj7wwbECFLW7FlKdlrFAKXtPt0LGfNtmat8Zak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl
rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 20:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417 (0x971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382
Validity
Not Before: Sep 26 20:11:47 2026 GMT
Not After : Oct 3 20:11:47 2026 GMT
Subject: CN=6ab82704-d6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:84:94:eb:5e:30:34:3d:3d:d5:30:86:ca:c1:
9f:bd:80:ae:5f:35:31:0d:6e:38:01:95:93:d5:e5:
87:27:a4:41:6a:c0:ad:05:9c:50:c1:38:5c:b6:2a:
ee:1b:e4:57:f2:f5:c0:63:6d:de:f4:9f:3a:13:29:
07:56:38:05:f3:dd:dc:37:77:a7:68:5c:e2:ad:9e:
be:8c:28:4c:2d:12:0e:51:da:c8:70:9a:9e:2d:52:
07:2b:14:6a:a7:2a:ca:00:8a:b0:79:9e:94:35:d2:
d6:71:79:e2:9d:d3:2d:d1:23:b3:8f:31:91:75:88:
a0:84:81:27:bc:f2:4a:58:02:bd:4c:46:6a:d5:02:
1a:b3:cf:00:a3:0d:d3:64:0c:4d:3b:18:91:9e:b7:
ab:36:e7:97:2b:ba:8f:2a:1e:4a:bc:ca:6c:3a:57:
3e:8c:dd:93:7f:eb:fd:9a:a5:31:9a:ff:77:ba:9c:
45:5b:cc:4b:10:c4:cb:7e:6a:5e:5d:8b:4e:e5:81:
72:ad:ae:64:18:ef:78:52:ce:b8:57:85:eb:fc:6c:
0f:e9:d5:c0:a9:26:d9:f7:45:9e:31:2e:ca:25:0a:
34:f4:71:fd:4f:6f:2a:71:9f:38:1a:38:89:5b:c8:
89:7b:7a:95:c8:b1:58:66:03:c0:f0:b5:12:1d:67:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B7:1C:74:C5:1A:D0:CE:36:50:E4:BB:74:A8:85:10:59:AA:82:51
X509v3 Authority Key Identifier:
keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:7a:7f:34:09:45:47:9b:ce:3d:31:c3:60:27:d9:6e:9b:
ea:ab:4d:7f:8e:7e:ce:c6:55:cd:80:b8:6b:8b:b9:89:2b:7f:
3b:10:f8:02:fa:8a:ec:66:08:fa:8b:27:a7:99:42:87:9b:29:
b5:b9:c0:7e:48:73:48:13:8c:1c:c7:b1:ca:68:40:13:e5:43:
4a:2f:89:56:2d:68:5c:79:ed:0e:ce:98:f2:22:8a:d6:b0:54:
40:ff:79:f1:8a:52:37:2b:30:bc:94:fc:79:70:0c:8f:ba:9e:
37:bd:e8:01:52:89:a9:0f:74:f2:3c:39:05:44:26:14:e2:28:
db:9f:4b:bf:11:29:f0:b6:0e:e5:cd:22:bb:9a:3b:13:80:25:
3a:fc:e4:c9:22:fc:4e:f4:d0:4e:fb:69:a2:69:dc:a7:13:3d:
1e:61:e6:34:bc:db:d7:4d:8b:1f:47:9f:fd:e4:8e:25:07:97:
65:3e:b0:ec:f6:30:11:0a:fc:8e:e9:52:73:b1:17:21:c7:fc:
0d:08:82:81:2a:c6:aa:50:b6:8e:34:8a:c6:92:d7:44:37:a0:
91:b2:3a:ce:26:f8:f9:16:7c:79:d5:8d:61:cc:b0:30:ed:00:
3e:c2:8b:8e:67:58:b1:67:96:47:29:dd:1a:16:b4:0f:d4:08:
0d:13:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:50:45 2026 by rpki-client