
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json)
Hash identifier: okfU+JLQFCpiohiDpF7UJJDSb41gw0aqrU3G09QpEu0=
Subject key identifier: 95:C1:EB:38:9C:D6:96:54:A3:87:28:57:09:20:3C:D0:EA:92:BD:B9
Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
Manifest number: A9
Signing time: Tue 29 Sep 2026 03:05:48 +0000
Manifest this update: Tue 29 Sep 2026 03:05:48 +0000
Manifest next update: Tue 06 Oct 2026 03:05:48 +0000
Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: YgInfoAL6U5ki+HpQ1KjwCiUrYDsi8XQmIsrJkIEPrs=)
2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: j8RPUxU1i8jQNbwP8gL4o72qQiyb5SB1xrhWEeZuKzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960
Validity
Not Before: Sep 29 03:05:48 2026 GMT
Not After : Oct 6 03:05:48 2026 GMT
Subject: CN=6abb2b0c-e7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:9f:82:40:5f:8d:7b:39:ef:1d:6e:0d:42:
39:80:b6:86:d3:b6:29:cb:8e:b6:f7:34:0a:56:94:
a0:6f:d8:93:e6:f1:61:0a:25:4c:20:dc:23:6c:04:
7a:f2:b9:71:a1:dd:c2:c1:d4:fa:de:4e:e9:0b:b5:
34:7f:99:5e:78:92:f8:b0:39:da:e1:9e:50:4c:75:
0e:51:0a:46:4b:eb:5e:7a:cd:47:e6:7a:2f:d0:71:
bf:3b:b4:75:59:4b:56:46:38:5f:b4:24:1f:83:b2:
d0:b2:7a:9e:ec:25:21:9d:74:23:38:9b:a9:3e:e6:
32:80:e9:f6:d7:61:1c:ee:12:26:a9:dd:c2:19:8e:
fe:bd:0c:f3:b2:59:8c:f3:f8:4c:18:a4:84:f2:2f:
8a:c5:01:59:31:d1:f6:74:95:c8:77:92:89:1e:0a:
97:e4:d8:57:38:5d:e0:26:12:00:82:9b:39:7a:13:
85:94:b7:f0:58:13:15:47:d0:a5:e5:8f:5e:92:7a:
f5:23:c9:8f:bf:16:55:61:f1:6e:d1:6c:b6:9b:70:
dc:0b:9c:d6:8e:55:5d:74:43:71:61:0a:4d:ac:63:
fe:d8:17:ed:50:5b:a1:ac:e7:3d:5a:85:60:00:4d:
e0:80:42:18:97:6d:8a:e9:f2:28:d9:35:45:f9:b9:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C1:EB:38:9C:D6:96:54:A3:87:28:57:09:20:3C:D0:EA:92:BD:B9
X509v3 Authority Key Identifier:
keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:30:44:36:e6:02:c1:49:5a:05:8e:a1:dc:e3:9a:61:16:bb:
58:86:49:03:35:3a:a2:0d:28:32:d4:c7:c0:e0:60:ee:15:c3:
c2:24:3a:f3:1d:18:86:5b:95:db:3e:19:7c:fb:32:b7:95:2d:
76:ac:b7:16:8a:53:54:e0:8a:8e:f9:f1:97:ed:61:16:c4:77:
75:b8:65:31:c1:58:94:e7:14:f5:69:31:96:7f:8d:76:3b:6b:
b9:7b:7b:0b:b8:cb:21:44:40:c0:55:2e:a2:d9:a7:7f:65:6c:
15:8b:7e:1d:18:fc:e4:f6:0f:71:6b:11:1c:29:ac:f5:c5:b9:
f8:ba:c6:aa:e0:b0:b4:7f:7c:9f:39:78:d6:e6:bf:d7:ee:eb:
08:e6:f8:bd:3a:0e:92:41:47:5b:1c:89:b2:bf:fa:9a:c1:1c:
8d:61:98:89:c6:d9:28:64:0b:51:6c:1e:44:cf:e1:47:27:72:
88:b5:cf:a8:5b:d2:b1:ea:f8:43:e1:e9:f5:64:14:a9:89:7e:
14:14:92:e4:9b:e2:6f:29:9c:23:b1:3d:54:7f:44:17:c6:c5:
01:15:db:89:6b:98:91:6b:78:29:32:29:1a:21:60:ca:aa:64:
f7:7a:cd:74:4d:47:ae:ec:b3:dd:c4:13:22:21:ee:53:f8:d3:
cd:24:7d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:02:11 2026 by rpki-client