
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
File: crVJ4D_3UKU5edANyx2mRLtSrKw.mft (raw, json)
Hash identifier: uMY40p0IMAs20kJy+thmULhL2do0XtkfQCCHDGUW9ew=
Subject key identifier: 28:72:42:FA:FE:EF:9A:89:5E:F5:49:0A:77:9A:F4:FC:D6:96:02:77
Authority key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
Certificate issuer: /CN=A91BFDE1/serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
Manifest number: 75
Signing time: Tue 13 Oct 2026 08:35:39 +0000
Manifest this update: Tue 13 Oct 2026 08:35:39 +0000
Manifest next update: Tue 20 Oct 2026 08:35:39 +0000
Files and hashes: 1: crVJ4D_3UKU5edANyx2mRLtSrKw.crl (hash: BG5oOifDc5qa1CeG5S1DS73Lg80UwyUoCNtZJkV1SYs=)
2: 00B077D6187D11F19A5CAFE7383D8C67.roa (hash: mW9wCzHROG2faL3zV7IIUqQz5qp+XENd/4NuYNOgCwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 08:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Validity
Not Before: Oct 13 08:35:39 2026 GMT
Not After : Oct 20 08:35:39 2026 GMT
Subject: CN=6acded5b-83bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:75:0b:a0:06:8b:8a:c2:41:f1:68:3c:0d:
03:16:43:0e:65:6e:d5:7d:fd:cf:ca:48:a1:9d:28:
6c:b3:1b:79:44:13:bd:ea:c6:20:88:9d:aa:23:c0:
c9:51:a4:e8:5d:b8:40:93:51:ca:38:93:7f:36:a4:
cc:4d:7d:1e:06:b8:f0:d9:03:37:28:88:d6:c2:7a:
ff:ed:41:1d:05:60:f3:65:36:33:3a:f0:ee:f4:4e:
8b:e1:fa:fc:b3:f5:ee:99:84:a6:4e:a0:16:01:9c:
ea:2e:a8:60:b3:46:5e:aa:f2:ae:df:54:b1:14:70:
66:45:a6:09:eb:d9:76:18:76:b0:5a:1a:84:0d:a5:
5f:2c:b4:39:d1:3e:89:18:8b:ec:45:20:80:67:df:
c1:b4:1d:94:b4:b6:1c:28:66:3e:9e:2e:ea:a1:be:
ac:9f:4d:54:73:35:0e:b3:11:e7:e5:49:bf:77:07:
bd:50:46:4e:8f:76:dd:81:f3:f2:8a:87:e3:68:cc:
a3:b1:34:bf:b7:8d:1d:27:37:0d:21:de:45:87:d0:
86:10:37:40:b5:01:66:08:99:4d:b3:66:f8:d6:c7:
2e:71:8f:96:f5:bb:10:51:80:40:ef:cb:29:c4:97:
69:d7:c9:1b:75:3c:bb:df:26:ac:72:31:82:41:21:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:72:42:FA:FE:EF:9A:89:5E:F5:49:0A:77:9A:F4:FC:D6:96:02:77
X509v3 Authority Key Identifier:
keyid:72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:45:c1:aa:40:ad:53:6d:56:27:63:8c:85:f5:fb:31:6b:cd:
97:9f:bd:ea:73:3d:16:d7:ea:92:e9:9e:11:b3:30:78:3b:45:
17:de:3f:c0:cf:b2:b4:b5:4a:83:16:51:ea:45:39:fd:8c:8e:
6c:43:bd:d9:f4:c4:42:13:46:c2:4e:98:26:3e:6e:af:61:4c:
a2:f0:0b:95:1f:2d:80:b3:7a:86:0e:c0:16:79:e4:87:73:ad:
04:c7:7a:12:13:17:da:9f:d3:6b:f7:15:a4:db:91:19:82:42:
d4:ad:32:fc:60:ca:80:77:a6:c8:73:26:48:df:c2:db:c0:46:
98:52:a3:87:07:58:ba:cf:bd:3e:e2:58:a4:c6:16:d2:61:a7:
d4:88:e9:14:c1:1b:51:73:b3:d4:e0:ac:67:58:07:a2:9f:58:
bc:89:c3:d2:55:62:c5:34:31:f8:9a:e8:86:94:a2:fd:eb:08:
d8:4d:f2:25:e3:fb:18:79:cf:00:c5:df:83:80:1c:b7:ef:3f:
02:60:c5:98:78:ae:b9:f8:1c:61:86:f1:e4:0d:67:52:5f:03:
0b:a9:e8:b3:5c:ea:34:15:e4:01:fd:c1:1f:09:cb:c8:96:29:
a0:04:fb:e2:d2:1d:6c:52:72:a3:70:50:cc:00:9d:45:a6:e7:
e1:7e:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:56:30 2026 by rpki-client