
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
File: ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json)
Hash identifier: qZpwZNnsekKIEo75KDI2p+zVeC5dmIFFJFd0gjhlsco=
Subject key identifier: CE:12:C0:24:0C:39:9B:B9:50:70:64:D5:DB:9F:DB:95:84:4F:E6:BB
Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
Certificate issuer: /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Certificate serial: 0841
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
Manifest number: 0837
Signing time: Tue 22 Sep 2026 20:51:27 +0000
Manifest this update: Tue 22 Sep 2026 20:51:27 +0000
Manifest next update: Tue 29 Sep 2026 20:51:27 +0000
Files and hashes: 1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: oisX3JcEEGtRcJgjkDLpRwzz6RtWcPgzS2VfUf+xx00=)
2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: lE2Sm7xdj8DAHwT04SLyh8rHvpeARY7nTCmbI3VK9u8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Validity
Not Before: Sep 22 20:51:27 2026 GMT
Not After : Sep 29 20:51:27 2026 GMT
Subject: CN=6ab2ea4f-3b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:e8:c6:0f:ad:99:34:a1:56:fd:5c:70:ed:
1c:ee:fc:e4:7b:42:97:d1:20:07:1c:53:d5:e5:c4:
a6:d7:c4:6c:46:f3:4c:2e:6d:3d:52:66:bb:ac:ea:
ea:c8:b3:c1:50:13:84:19:1c:45:18:b2:bf:04:8d:
fd:ec:9e:45:2e:27:08:94:c1:78:65:3f:6b:72:3e:
3f:7e:cc:77:25:ee:b1:36:48:73:cd:f2:1c:49:00:
d6:68:e4:c0:36:8d:fb:40:13:27:5d:b9:74:da:96:
8b:ec:5a:cd:e8:e1:89:a8:fb:fc:6b:cf:9b:51:58:
69:46:dd:0e:5e:ba:4f:df:50:33:5f:de:a8:2e:72:
73:c1:c1:46:45:55:1c:49:af:e3:64:cf:2f:42:b7:
d1:bb:e7:a0:35:1e:7b:7d:c1:de:44:74:38:02:0e:
98:b2:4a:a6:a8:a9:b0:50:d0:bd:af:37:30:ca:6a:
bf:15:c3:d6:cc:67:04:84:c3:26:57:20:51:94:c0:
7f:52:04:2d:e8:78:9c:e0:61:b4:e6:a2:be:b5:ed:
58:fb:c3:38:2e:34:02:1d:85:3e:e1:0c:01:bc:10:
db:6d:e5:70:49:f5:f9:fa:1c:c2:21:ca:01:ad:4f:
52:cf:6c:cd:85:de:c0:3f:e7:0a:18:47:23:31:6b:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:12:C0:24:0C:39:9B:B9:50:70:64:D5:DB:9F:DB:95:84:4F:E6:BB
X509v3 Authority Key Identifier:
keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:24:89:19:d8:2b:c1:fc:14:a5:d5:44:1b:f1:a5:f5:ab:de:
0e:2f:30:06:73:df:7e:a9:1e:6a:77:19:06:94:5a:20:a9:21:
e9:ed:c4:e6:ad:65:87:bb:bb:bf:fc:f3:db:f7:e1:5c:f3:a2:
b6:f6:37:4f:dc:20:52:ae:94:b5:c9:10:17:72:33:96:0b:86:
25:8a:3e:bc:47:2e:35:24:b9:b6:64:cc:42:7c:39:57:5c:04:
20:d0:cd:b1:17:6b:cb:19:58:d4:4c:05:88:9e:3d:2f:f7:b7:
37:ba:46:6e:01:cd:88:97:a1:f6:46:14:e3:04:a2:18:8b:4c:
a8:af:90:e6:73:ed:09:81:b9:ab:54:7e:ba:17:26:88:79:78:
9e:63:71:8a:e9:23:c3:6e:2f:64:08:c7:31:79:b7:be:cd:18:
6b:01:9f:74:bc:92:d6:93:f4:24:06:f0:01:87:a3:46:98:c1:
1f:c1:51:14:f5:4f:c2:db:83:eb:ee:e0:e7:b8:64:a3:b9:c3:
01:e7:8f:0c:2e:30:f7:df:3b:c6:6d:05:30:f4:44:0c:4b:66:
76:56:9e:04:64:97:2a:a9:25:69:a1:90:73:ec:22:70:55:d4:
aa:63:45:f1:25:26:85:8c:4e:0c:8e:0d:4f:fe:1b:28:93:34:
76:0f:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:30:55 2026 by rpki-client