
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
File: aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft (raw, json)
Hash identifier: ipX8OIasdk40fItMGfSdDQ7CJXtJNKQvvmxr+1r21tE=
Subject key identifier: 4F:38:00:85:67:C3:1C:AF:DD:8B:F5:58:41:79:49:B4:EF:59:82:41
Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98
Certificate issuer: /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98
Certificate serial: 080D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
Manifest number: 0805
Signing time: Thu 24 Sep 2026 21:09:06 +0000
Manifest this update: Thu 24 Sep 2026 21:09:05 +0000
Manifest next update: Thu 01 Oct 2026 21:09:05 +0000
Files and hashes: 1: aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl (hash: iwquF4JCnK2nJt5AmtroL5MsdSpZK9jRskCDdNSl7o0=)
2: DE524D283F0511EBBB4C174FC4F9AE02.roa (hash: it4vcFbKLmTJCt2q1TtUbEDLsD8jVRyUqj9yP9gE96M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl
rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BEE, serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98
Validity
Not Before: Sep 24 21:09:05 2026 GMT
Not After : Oct 1 21:09:05 2026 GMT
Subject: CN=6ab59171-3005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:3c:b2:7c:ed:8e:d1:15:76:f7:43:a4:0b:
8e:c5:b0:90:e9:24:97:f8:6b:55:bb:50:66:c8:ac:
cc:0b:de:42:68:12:da:78:04:9b:4e:55:3b:41:a3:
7a:f9:f5:91:0c:fc:de:57:41:95:16:40:87:fc:92:
7d:f0:2e:0c:6f:6e:b0:fe:66:53:51:38:5a:83:cd:
99:01:3e:53:0f:07:cb:98:6a:6c:f2:71:b7:ae:d5:
b8:e2:cb:ac:70:aa:22:fd:59:81:f0:b6:de:07:6d:
d0:73:6d:17:ed:44:93:bd:7a:d6:68:59:06:0f:6e:
71:f3:4a:6b:e7:e8:5d:63:04:02:a9:e6:83:e1:9a:
ba:b9:00:d1:af:62:06:03:8b:52:b8:bb:f4:d5:59:
b2:e4:60:12:67:ed:61:b3:29:3e:1a:30:4d:24:32:
dd:3d:c8:d1:43:1c:cb:67:c7:d4:54:c0:dc:42:dc:
b4:4c:a1:ab:5d:f0:75:32:4b:8a:7c:0b:94:d8:73:
e9:89:b9:a3:89:b1:10:00:dc:94:8c:b5:3b:f2:06:
0f:6c:e7:e4:af:fa:2e:eb:0e:40:a8:f0:58:fc:15:
b6:54:25:cf:69:46:1d:59:d3:25:2e:ad:35:20:01:
29:7e:ba:a3:64:cc:32:01:f7:81:8d:d4:77:aa:9b:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:38:00:85:67:C3:1C:AF:DD:8B:F5:58:41:79:49:B4:EF:59:82:41
X509v3 Authority Key Identifier:
keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5c:c5:0f:ea:8e:92:01:7f:d3:26:10:6a:97:0c:49:d6:df:
af:0d:5e:1c:d7:32:83:93:71:1c:a2:2b:d9:a9:a0:79:20:40:
82:cf:2f:0f:bc:12:f7:41:5d:97:52:7e:c9:48:e0:4b:d3:a9:
c0:72:6d:89:b5:32:a8:7b:aa:5d:b2:68:e5:48:2f:cb:56:71:
3e:09:ed:b7:bc:13:2f:80:7e:94:20:c8:a4:47:1c:65:13:37:
53:6e:c3:56:51:a3:ee:dd:bf:c6:47:f4:87:ab:cf:ef:29:93:
df:6e:2d:74:68:8b:be:a6:89:c4:9d:bf:9a:b1:ab:ef:2b:08:
24:ac:54:38:5d:f2:0b:3e:12:94:27:06:cd:2a:24:80:f4:aa:
fa:52:cb:1f:8b:1a:0b:eb:3b:e1:bb:08:3d:90:14:cf:14:e8:
13:28:0f:99:a3:6b:2b:ac:ea:5a:df:a9:36:7d:8b:6f:29:c2:
2e:2a:5b:77:3a:2d:08:5b:01:ce:2f:e0:48:36:14:9a:44:5a:
8f:6a:74:1e:1b:0b:86:6d:3e:9d:d1:28:4e:c1:64:a9:5a:f1:
5c:29:0c:dc:c3:62:db:4a:a1:f3:04:83:03:f5:85:28:68:fe:
26:41:c7:91:4a:d2:ba:81:4d:e3:c9:30:6f:4d:18:4d:b6:77:
b1:65:65:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:03:00 2026 by rpki-client