
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier: XdnMdI/bG5EvevFttEF2/Vdp6AOVap6THad0a0cjPgI=
Subject key identifier: E8:E2:22:B6:2F:EB:F2:00:7C:D7:EF:BB:90:39:EE:D7:CC:18:3F:69
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial: 0DB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number: 0D96
Signing time: Tue 22 Sep 2026 17:51:44 +0000
Manifest this update: Tue 22 Sep 2026 17:51:44 +0000
Manifest next update: Tue 29 Sep 2026 17:51:44 +0000
Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: Y3+VlC9+m+udJPJfs+3l8ht+LQiycM/lX58Y5S8spe8=)
2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: 1jFVpdZPWmPQeRH8UdYA1s36Irr1tgJWF5hv2XdP+kg=)
3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: /TzEAq8FwxRh3uSNCke2u1ddqX2u7x6/0usZxjH71Xs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Validity
Not Before: Sep 22 17:51:44 2026 GMT
Not After : Sep 29 17:51:44 2026 GMT
Subject: CN=6ab2c030-48a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:04:30:00:f2:39:5c:01:d4:35:ed:49:77:65:
22:23:ff:29:ad:0d:68:a4:85:91:ff:ce:7c:92:e7:
a0:c9:b6:21:7e:e2:2a:66:dd:bf:34:85:29:c8:e1:
51:5f:6b:bf:40:74:c5:95:bb:c7:ff:e6:72:88:44:
11:7e:84:1e:68:95:dd:ce:3d:3e:4d:25:1b:45:31:
28:97:a7:b4:85:e3:d0:c7:83:63:21:08:bb:3a:ce:
43:ad:cb:d7:ae:9d:13:c0:cf:eb:ef:b4:c3:07:49:
19:fa:27:77:b1:6b:e2:5a:af:f9:44:80:25:2b:93:
c7:0a:b4:20:c8:05:62:93:2c:bd:ad:83:58:01:23:
64:36:fd:07:0b:6b:26:cc:da:8a:d9:57:58:aa:1b:
52:ea:f2:9c:90:2f:8d:81:44:92:48:0b:30:93:55:
34:be:fc:e5:c6:9d:0a:a8:b4:55:4c:87:d7:26:04:
1b:ed:48:b7:0b:7f:7d:1a:73:68:7a:be:51:3b:3e:
0d:f5:2d:0c:36:05:0f:01:d6:89:26:0b:09:14:a9:
38:6e:4a:17:36:c1:06:6b:da:68:37:d9:6a:46:da:
fb:12:c3:e4:21:ea:f0:6f:38:9a:7a:94:0f:c9:c7:
99:2a:33:c6:78:09:53:92:cf:54:c5:7e:83:b0:a5:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E2:22:B6:2F:EB:F2:00:7C:D7:EF:BB:90:39:EE:D7:CC:18:3F:69
X509v3 Authority Key Identifier:
keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:37:36:9f:de:c7:eb:27:f1:61:52:e1:27:e0:f9:4e:8d:ab:
c0:b2:29:97:bf:a7:3d:a5:6d:cd:e1:e6:5a:4e:60:c0:4c:2a:
f4:bc:6a:e9:cf:51:ac:3b:bf:c0:41:fc:eb:96:26:30:c6:83:
96:16:f3:50:42:3e:b9:b6:b2:14:d5:c8:54:e5:7e:ae:78:6f:
09:aa:d1:36:d4:f8:a7:54:95:b2:72:96:ee:97:2a:04:d1:a6:
50:78:98:d2:01:04:cd:e9:1b:bc:c1:8b:2a:5b:ad:2d:d2:6e:
f7:22:16:cc:d0:e4:8f:e7:6a:fb:9c:c8:2a:fc:89:b7:b4:79:
e8:c1:53:1f:d8:f9:bb:be:45:64:6d:79:94:a7:07:27:8a:61:
e6:ee:44:60:22:eb:16:39:2b:b7:db:83:a3:15:67:b7:0e:13:
69:b8:ad:5c:d5:7b:76:e4:8f:54:5b:8c:0c:cd:ae:d3:16:56:
9a:58:c0:7c:8d:5c:c0:ae:b9:4c:65:68:7a:01:3b:73:62:e5:
74:1a:38:48:5a:3e:3b:86:9e:04:3b:11:88:78:58:6c:71:75:
03:8a:f6:2b:4d:9a:79:2b:3a:f1:b6:2c:b5:d8:c6:ba:86:1a:
9d:05:4b:d0:c2:39:59:f2:77:7b:0c:f6:fd:37:c3:4a:dc:c6:
6f:7d:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:07:49 2026 by rpki-client