
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json)
Hash identifier: EIcPT97m0kflMCRjThsPqOFV59TbSP6T9EI/QgokC4E=
Subject key identifier: 70:8F:31:8A:56:0E:E8:BF:D0:5D:48:EF:91:50:C5:8F:3B:4E:0F:00
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
Manifest number: 0236
Signing time: Sun 27 Sep 2026 02:59:05 +0000
Manifest this update: Sun 27 Sep 2026 02:59:05 +0000
Manifest next update: Sun 04 Oct 2026 02:59:05 +0000
Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: wW/fLY7Y1FlRyXUp+4Y/ZVC4pFETDPLl/VmG8dRvZCQ=)
2: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: BtbKwISc0o5KoYEKwJEZQMnjZhmU53NuiaoFh10O9zg=)
3: 71014290D87411EE97234F5CC4F9AE02.roa (hash: s/cEOGRFX0DoGdQEqZyPvpLQpf664Lfa0cHYTU7MBgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: Sep 27 02:59:05 2026 GMT
Not After : Oct 4 02:59:05 2026 GMT
Subject: CN=6ab88679-fd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:c3:64:fd:1e:72:e0:3a:97:78:0d:8f:51:
16:47:ab:97:0b:b0:dc:15:38:29:6b:87:fb:b9:2e:
49:4d:fb:87:5d:f8:82:53:cc:b0:7e:7d:8f:52:23:
c4:22:e9:aa:f8:b2:98:34:5d:bd:4a:66:ca:e4:1b:
34:1c:d4:f0:db:01:0c:60:5c:d7:4b:d3:1f:8d:04:
5e:a9:12:55:47:c8:5a:3e:14:07:cb:11:3a:42:39:
aa:cf:aa:c6:96:e1:73:6f:70:f6:f2:2d:93:69:1d:
73:0a:7a:91:e6:52:72:30:b2:9f:20:74:35:75:cf:
09:6a:b2:97:87:28:db:91:d3:61:08:54:01:e1:a3:
b9:55:72:52:2c:28:f3:61:bb:57:9a:93:d6:94:c3:
8a:fe:5f:fe:5d:73:06:f9:88:43:20:13:d5:1f:30:
35:0f:7e:2d:1a:73:55:8b:9a:90:b1:95:f8:f4:29:
fe:c4:4c:17:ca:0a:57:ce:7a:bb:de:b6:08:51:6c:
d6:6a:3c:28:1a:90:36:91:b8:77:cc:64:ff:e6:89:
bd:e0:c0:df:19:97:9d:7f:20:87:84:62:d4:25:32:
0d:4a:b0:81:f1:d8:63:91:45:f1:37:4c:05:aa:98:
46:dc:06:08:d0:a0:7c:39:8f:35:ad:4a:e2:71:16:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8F:31:8A:56:0E:E8:BF:D0:5D:48:EF:91:50:C5:8F:3B:4E:0F:00
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:44:91:52:19:6c:d0:2a:5c:25:c0:e7:35:86:66:7e:4c:f8:
d2:12:5b:03:8e:4a:7d:1f:16:80:5f:e4:a0:3e:f0:2a:9a:5c:
50:c5:88:6d:59:39:9a:ab:ef:cb:55:63:15:bb:58:39:05:ce:
1c:3a:af:21:0a:22:6c:4a:28:70:15:97:54:74:47:d8:fc:27:
c3:32:97:bc:62:9e:f9:07:9e:eb:7b:44:19:74:87:7c:89:57:
a6:87:9a:d2:e2:31:87:86:3a:04:0c:5a:48:39:2c:cf:73:22:
bd:5d:3c:e0:3c:59:39:5d:f3:5b:74:17:2b:82:8d:6d:d3:69:
38:91:66:6c:bb:da:21:00:c9:b4:46:08:25:06:ba:2b:6a:ad:
be:6c:37:73:6b:6c:35:12:af:d7:67:e8:95:48:24:05:c2:8f:
48:03:ed:e7:55:3d:68:1d:38:89:0f:b7:91:ca:f9:f5:a8:da:
10:11:87:2f:c5:b7:8c:a0:ae:4c:5c:b4:27:c3:00:c1:a9:1e:
01:15:fc:f1:27:f1:89:cf:6b:31:4e:f6:60:3f:02:ac:d7:09:
a4:69:d0:36:e6:13:da:6d:e0:28:16:7e:ad:98:93:00:f8:dd:
00:65:c9:cc:0e:ac:a2:dd:9c:21:c9:74:00:c3:b0:56:0f:4d:
10:2f:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:26:31 2026 by rpki-client