
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier: +y5C34WjuNUXobhQ2dlAd1mej5dzAdMDAQNII9tNFU8=
Subject key identifier: 18:E0:65:95:9A:A6:CA:0A:1C:1B:01:D5:39:AF:7C:6D:6C:B1:37:54
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number: 011B
Signing time: Fri 09 Oct 2026 06:43:44 +0000
Manifest this update: Fri 09 Oct 2026 06:43:44 +0000
Manifest next update: Fri 16 Oct 2026 06:43:44 +0000
Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: mpYGn/P4HlHwmzRyoSH1qnl7LCbEFq6rWzqs3pOVTzs=)
2: 7020A3F6FB6411F0B417A8544B6F56BC.roa (hash: 4UhFxMbmNDYDd2dRJ6HbabaSlexlrVw5pQFQ3FGsJWs=)
3: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: 6asIBObx3rTPpOx29VJORSW0mgsSB8Fi+FtlmzaJ7TI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Validity
Not Before: Oct 9 06:43:44 2026 GMT
Not After : Oct 16 06:43:44 2026 GMT
Subject: CN=6ac88d20-4aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:a1:69:c2:1d:ed:65:74:13:b6:0b:dc:ac:
64:a2:6c:05:ba:fb:64:54:eb:84:6b:7f:28:99:84:
6e:0a:64:32:81:5d:b2:6a:36:1c:5b:3d:07:64:6b:
ec:7c:56:0c:ba:14:93:fd:6f:c8:4e:15:17:9a:bb:
68:10:81:00:6d:89:08:1c:11:11:07:ca:c7:a5:6a:
3c:09:aa:bc:4f:e6:7a:da:ec:44:22:e4:de:2b:22:
19:c7:66:e0:d4:bd:26:54:bb:4e:c9:61:99:cc:17:
93:b6:3f:d8:54:2b:6c:0d:31:28:57:1e:ad:41:84:
fa:a5:3c:91:fa:11:6f:6f:4e:5f:72:0e:7d:b6:d2:
07:b5:76:8d:77:eb:48:53:b2:fd:df:a1:8d:fe:05:
18:b7:4a:cd:02:2a:8d:23:7a:13:d6:8e:c6:53:5d:
63:8c:2e:ca:3d:f0:ab:81:e1:0d:37:0c:0a:9c:e1:
39:af:e9:33:5e:a8:e8:4d:d2:dc:e7:35:d5:e6:fc:
49:5b:11:ed:95:30:a9:5c:3f:23:2c:6b:00:bb:d7:
cb:43:62:9b:54:33:c0:f6:55:12:66:44:58:1b:21:
0a:d6:16:24:1e:64:e2:2e:5b:dc:37:e5:42:63:ed:
88:b8:6e:57:7e:a3:5c:06:65:c3:6a:39:d6:14:46:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E0:65:95:9A:A6:CA:0A:1C:1B:01:D5:39:AF:7C:6D:6C:B1:37:54
X509v3 Authority Key Identifier:
keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:e5:e5:6b:da:2f:76:a8:dc:3d:6c:24:2c:53:91:a1:a6:3f:
1a:37:b1:2a:aa:0c:e5:0e:c7:e6:3a:85:61:02:10:d0:c8:8d:
69:df:8b:5c:e3:3b:5e:52:eb:4d:84:28:9d:40:07:11:9c:30:
66:0a:b7:94:ea:40:01:01:a6:7c:9a:8c:2e:0f:8a:a2:72:5b:
48:c8:9e:80:78:37:c9:a6:97:df:d1:29:e1:4d:a1:b4:aa:6c:
da:6e:f8:59:61:db:51:a5:8e:be:b9:35:bf:6e:8e:57:af:fa:
37:15:f6:26:8b:d3:59:66:d7:26:4c:0b:96:91:bc:09:aa:bd:
de:cd:a8:be:db:1f:a0:34:6d:2c:ca:f1:b4:02:7c:df:5f:5b:
e9:84:43:88:b2:fe:de:4e:04:ed:ea:86:86:1d:64:f6:4d:be:
da:60:62:cb:55:f1:8b:1f:71:3f:8e:6c:ab:b7:eb:5c:2f:57:
16:b3:f2:08:9d:85:7f:d1:60:c1:6a:f9:ba:55:d6:1c:d0:c5:
7c:34:bc:b7:68:a7:bd:a0:21:2f:c6:ef:04:89:6a:46:02:11:
b9:1f:17:93:0e:c1:ba:f7:77:2f:dd:41:3a:79:07:04:ce:64:
d5:15:13:81:99:a1:d3:00:5c:83:79:90:5d:9d:0b:c0:c8:dc:
be:29:4e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:18:04 2026 by rpki-client