
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft
File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json)
Hash identifier: R/0gKbJTzVdWfK2mxbaKDGajD72c6yytlaRfp9sm9vU=
Subject key identifier: AA:2A:CF:04:AE:65:85:92:C5:33:18:D5:F1:16:36:95:C3:CD:D4:45
Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94
Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94
Certificate serial: 027E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft
Manifest number: 026D
Signing time: Fri 25 Sep 2026 02:10:23 +0000
Manifest this update: Fri 25 Sep 2026 02:10:23 +0000
Manifest next update: Fri 02 Oct 2026 02:10:23 +0000
Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: NraGjr/eSDq9FQ1HU5bioUb5Unig8kkvqOvPniOk8CE=)
2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: 68scz8WaLeDgN6QMKP6YxSS8bPvMLdvzqUKIuG+ai78=)
3: E40FA6ECA53A11F185933D3A4611F970.roa (hash: LgJkzUYDs/93oe3f1rx4Ur7cXfh8aWj0lMvFUfeP3jU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl
rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94
Validity
Not Before: Sep 25 02:10:23 2026 GMT
Not After : Oct 2 02:10:23 2026 GMT
Subject: CN=6ab5d80f-1cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:06:c9:cd:63:22:1a:07:0b:9c:63:03:71:
bc:0e:4a:89:c2:2b:d1:53:da:0c:cf:17:82:eb:01:
c1:ec:e9:0d:3c:8c:27:b2:4f:31:f3:b7:9d:b8:27:
b4:c8:7f:5a:91:dc:a9:bd:02:10:12:2b:7e:1a:db:
67:ec:d4:67:bc:af:10:41:d6:f6:8b:5f:b4:83:74:
dc:7a:61:5b:37:ea:41:09:9a:ab:ef:56:8a:7e:d4:
f2:a2:cd:ba:43:f9:d3:ec:b9:8f:33:23:0b:52:23:
63:80:c1:76:b0:02:66:a0:7b:e3:6d:1f:fa:53:f1:
85:c5:87:fe:85:96:c3:ff:99:46:74:d7:bd:8c:af:
d3:53:7e:c1:6a:d5:4f:9d:0c:c3:eb:a7:75:b8:7e:
74:c5:87:29:54:d5:4e:d5:73:b4:31:78:17:dd:ed:
ae:d8:92:73:2c:74:22:8e:7c:d8:2a:86:cb:c6:7d:
07:67:9d:f8:4e:c4:80:4a:43:66:37:4c:ed:56:a9:
0d:ca:95:6b:f1:99:29:bb:5d:25:eb:8e:ea:13:28:
ca:6a:88:b1:a1:f1:be:6a:6a:d4:67:c9:7c:6b:ac:
66:a4:a0:95:33:90:55:89:7d:91:f0:f4:9c:30:eb:
ad:c5:2e:97:a6:50:e7:87:c9:ce:9e:67:35:1d:34:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2A:CF:04:AE:65:85:92:C5:33:18:D5:F1:16:36:95:C3:CD:D4:45
X509v3 Authority Key Identifier:
keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:4b:fd:e0:29:62:7b:90:db:2f:45:e3:04:f1:f4:6b:d1:fc:
cb:d3:f2:65:ac:a9:82:eb:14:49:b2:8d:4b:a9:bc:87:80:67:
5f:16:9e:74:81:67:19:59:5b:92:ab:75:ba:0e:75:23:ad:51:
ce:f7:98:4a:31:7e:30:29:c5:90:ed:c4:4b:3d:45:30:90:ea:
53:49:2c:26:99:29:e9:47:fd:48:a3:f0:6a:12:cf:d6:a2:bd:
e8:57:b6:ef:fe:e4:f7:07:1f:ba:cd:cf:94:74:5f:16:aa:6e:
8c:79:f6:35:6e:e1:a9:ca:af:b9:9a:94:51:95:30:5f:38:ce:
6a:9c:74:e2:8b:3d:31:d7:bf:fa:40:60:26:13:d8:5a:5d:83:
5b:2f:ad:b3:b9:c7:5b:3d:d1:de:8c:9c:51:58:e5:73:8e:92:
20:26:48:69:de:38:6c:56:24:08:16:47:f0:f3:8a:d7:0d:78:
41:37:d9:6f:b9:d8:39:ab:d9:b3:d4:21:cb:14:2b:ba:55:a6:
64:68:d8:5f:1a:09:86:92:30:07:07:f9:df:16:24:23:24:89:
f2:0f:c6:cc:f9:28:b4:5d:b2:51:3e:7f:32:32:6c:54:40:54:
f9:d2:de:4c:0b:b9:a9:c1:28:48:6d:c6:17:4e:3b:fb:b5:97:
8b:4e:64:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:42:30 2026 by rpki-client