
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
File: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft (raw, json)
Hash identifier: vRz6uVzSuiWY+CDJR9FH/R809dJWopTQT92Ov3vAhQg=
Subject key identifier: 16:1A:E8:1C:AB:EA:B0:F2:9A:02:1A:1A:29:16:CC:DF:92:43:9E:A3
Authority key identifier: 47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C
Certificate issuer: /CN=A91BE8A9/serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
Manifest number: 7E
Signing time: Fri 25 Sep 2026 07:50:18 +0000
Manifest this update: Fri 25 Sep 2026 07:50:17 +0000
Manifest next update: Fri 02 Oct 2026 07:50:17 +0000
Files and hashes: 1: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl (hash: 2eiQyJwIBdkebTFFk5gLgvlMHX5BDIeL7OoZFhsN4wY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl
rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE8A9, serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C
Validity
Not Before: Sep 25 07:50:17 2026 GMT
Not After : Oct 2 07:50:17 2026 GMT
Subject: CN=6ab627ba-89cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5c:18:71:1b:4e:74:a1:ca:ca:b8:e8:07:a3:
34:f7:79:5c:1d:47:44:26:d5:a2:ea:e6:57:f2:7a:
fc:68:ec:91:e8:a7:18:16:a9:d1:de:3c:fc:31:46:
d9:84:66:6e:be:1a:c2:84:66:d7:35:81:2e:a9:59:
9c:0b:3c:70:74:f3:0b:15:ea:a7:6c:44:c5:8a:d6:
30:94:21:9a:2a:23:6a:ee:db:52:a0:74:95:32:db:
25:b1:ab:7d:08:0d:d3:51:ea:78:67:1b:9e:4f:3d:
31:9b:0a:9f:42:66:88:60:d4:db:dd:0e:e1:8b:8d:
9c:54:37:dc:70:63:26:ef:a0:1f:38:26:75:b1:88:
66:6f:b1:a9:38:55:4b:a1:7c:a2:2c:fd:66:43:ec:
f0:4b:c8:90:fe:73:89:ae:9b:a1:42:d1:cb:41:0c:
ef:07:dc:33:ce:c7:b6:a5:fb:21:8e:5d:97:1b:ba:
12:8a:f1:d0:9a:9d:dd:c9:f5:48:41:62:8c:c3:44:
e6:8b:26:cc:89:ab:1d:14:c9:08:52:59:13:96:b3:
c0:bb:8e:cb:5e:e3:f5:dd:83:89:46:07:83:79:5a:
72:20:13:b2:9c:73:e1:a6:ac:04:6c:e5:ba:25:3e:
91:b8:a1:2e:da:54:4d:2a:52:27:28:5f:38:47:ec:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1A:E8:1C:AB:EA:B0:F2:9A:02:1A:1A:29:16:CC:DF:92:43:9E:A3
X509v3 Authority Key Identifier:
keyid:47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:b9:fb:5d:c1:1d:44:59:a5:0d:a1:4e:a9:20:46:74:94:61:
7c:0b:4b:2a:c7:25:ba:12:de:72:2c:e9:32:61:28:23:bc:b4:
37:b8:85:4f:a5:43:7c:31:c2:51:46:ed:86:e5:19:38:bc:26:
36:93:37:1f:69:96:96:49:2b:6b:10:99:75:61:2f:1f:20:c4:
de:8e:81:0c:ea:1d:91:78:b4:05:1b:a5:45:9d:60:f5:28:e7:
12:d5:4e:db:f9:d6:0c:2e:0d:45:4f:9a:fe:7f:4f:7a:ac:74:
c0:7c:de:1e:21:67:66:ea:f4:a4:c0:22:b3:6d:0b:0c:04:f5:
00:e9:55:c5:b3:d5:74:d8:f8:90:2a:c3:c2:41:da:e3:9d:1a:
fb:c6:41:63:8b:c1:cc:0a:a0:35:0f:d4:26:73:31:50:5a:0e:
83:11:6e:0c:d1:4a:77:4b:d5:56:1b:16:ad:0e:20:64:ee:ab:
2a:95:27:4a:c9:c1:6c:47:f2:cc:ed:a1:42:44:7e:89:a3:fa:
38:67:e7:c9:5b:c3:bf:58:7a:45:18:f6:fa:ad:1d:c0:b6:6f:
80:ab:47:af:4d:c2:21:4e:b1:5a:0e:aa:89:4c:a2:33:c0:37:
8b:79:4a:d4:4c:ea:18:27:ec:b2:13:cd:a5:28:af:fa:34:67:
1b:69:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:15:34 2026 by rpki-client