
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json)
Hash identifier: hfb4PMDwkXBfvI1/jII1D5vojqHcLv68Cry4AnwF4ds=
Subject key identifier: E2:DC:C8:58:75:95:0E:0E:3F:7C:03:C5:4D:DF:32:C7:5A:17:EF:A0
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial: 0A1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
Manifest number: 0A12
Signing time: Tue 22 Sep 2026 19:34:47 +0000
Manifest this update: Tue 22 Sep 2026 19:34:47 +0000
Manifest next update: Tue 29 Sep 2026 19:34:47 +0000
Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: Fz98WGf5o4KVPmHpUT2wyvjdY/zvUAIXqyZ2fZWbUkA=)
2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: RChnlqhk/AdCL7WNTqOscOAo8EiLEWYXjeVnfDLTqaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2587 (0xa1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Validity
Not Before: Sep 22 19:34:47 2026 GMT
Not After : Sep 29 19:34:47 2026 GMT
Subject: CN=6ab2d857-10aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:2e:90:a9:e7:7f:d8:f8:c6:b5:f8:0d:9c:
b5:71:bc:18:b3:93:6f:70:82:32:70:f6:68:fe:bb:
5d:c0:46:68:15:70:6b:6d:76:83:78:05:1c:af:5e:
34:1e:ed:1f:8e:82:8d:ba:7f:cc:f7:72:77:91:df:
51:df:91:c3:39:97:a8:74:1f:38:78:a4:1f:f5:f7:
dd:80:92:ad:44:10:4a:f2:fc:41:70:13:f9:63:4c:
8e:a4:ed:38:a9:ff:6a:19:ca:6b:bd:2b:f0:c9:44:
1b:5c:f3:dc:5e:94:65:28:6e:9a:40:de:59:9c:3b:
0f:26:7a:12:f2:10:98:4a:e7:fb:09:f2:af:9d:f9:
f0:0f:46:a4:5b:20:0a:ad:2b:10:80:58:bc:66:d6:
14:41:e9:08:43:15:6a:bf:d8:25:71:d6:8e:e1:33:
33:2f:3e:fd:cb:16:74:e0:56:28:d1:38:f3:a7:0a:
d1:9c:2e:ca:b4:c6:28:05:ca:9d:a9:0d:47:6d:c1:
6a:47:e6:aa:84:99:f9:bf:66:78:4b:f9:a7:be:a0:
04:e2:7e:20:b6:41:5b:e7:b5:7f:a1:55:b8:be:1a:
d8:06:c8:f9:e8:5c:c1:57:61:3a:c4:2a:47:02:ff:
23:60:61:ec:f8:25:b0:02:46:bb:ac:07:69:60:d2:
07:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:C8:58:75:95:0E:0E:3F:7C:03:C5:4D:DF:32:C7:5A:17:EF:A0
X509v3 Authority Key Identifier:
keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9c:ad:f9:11:e0:9c:c8:fd:ac:cd:8b:49:44:9e:e4:f4:a3:
85:a6:99:5b:1e:79:95:6d:b0:70:27:e2:44:58:2a:49:91:08:
ce:e0:2f:c8:d6:a1:ed:d9:2e:b3:14:54:55:93:f3:61:7c:01:
8a:ee:ed:03:3a:ac:d3:48:32:60:d6:2c:06:0f:ca:ea:8b:2e:
67:eb:4a:a7:3f:8f:c8:b8:ac:26:7f:7d:e5:fc:31:de:c6:f2:
c4:09:0d:21:c3:60:ba:6d:56:a9:86:31:7f:3a:0f:28:91:dd:
b3:01:6d:47:c5:85:ab:4d:91:5d:db:8a:1e:6c:6d:0f:7f:fc:
2a:9b:cb:51:30:7e:f9:84:5c:65:5e:33:a7:94:fa:af:4b:e3:
7c:84:88:3d:bf:ba:f6:a4:0f:c2:e5:27:72:41:f9:dc:d3:41:
cb:c1:98:ce:4a:94:9d:f3:f2:09:42:88:b8:57:99:30:35:67:
14:75:33:fa:60:3c:4e:ed:2a:05:2f:69:f3:3b:b9:26:ba:67:
d6:aa:6a:dc:a2:ab:a7:46:6d:56:f3:fb:20:93:5d:c5:89:49:
e7:00:39:f0:18:db:5e:a3:2c:1a:e1:c4:b8:fe:33:97:b3:b7:
7b:8a:6d:54:70:d2:ce:7f:e0:9d:43:e5:91:92:2a:77:bf:e0:
95:8b:a5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:39:20 2026 by rpki-client