
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json)
Hash identifier: GKrxHVndmzla6zq7n7/PoSRbwT/eMRUNlaHWx+P9WVM=
Subject key identifier: 99:3F:1D:B4:32:67:AE:48:8B:7E:C4:B5:6B:1F:71:01:DC:F6:FA:28
Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Certificate serial: 09AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
Manifest number: 09A4
Signing time: Sat 26 Sep 2026 20:03:46 +0000
Manifest this update: Sat 26 Sep 2026 20:03:46 +0000
Manifest next update: Sat 03 Oct 2026 20:03:46 +0000
Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: slOSHAyEfeFgCgHr4ZY0u+6vpapkaiP4in0QcNe+r90=)
2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: K8ifKpf1OxSentj2ShFOfGXT/u0aCJtaC2BhvsjDEzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2479 (0x9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Validity
Not Before: Sep 26 20:03:46 2026 GMT
Not After : Oct 3 20:03:46 2026 GMT
Subject: CN=6ab82522-028e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:04:c0:d6:28:42:a0:47:7b:96:e0:52:45:
57:fd:f6:49:48:2c:52:1c:1a:e1:5b:d1:79:ca:ac:
70:45:3b:42:2c:22:d7:5a:28:14:cc:23:83:a0:26:
4a:10:49:cd:2d:ef:74:cd:45:7d:53:a1:a4:20:e4:
f0:43:04:0a:0a:53:5c:9f:b2:53:f4:79:bc:64:d4:
0e:06:44:04:29:92:a6:1a:2a:b7:ed:24:65:a9:8e:
78:9b:ea:f0:4c:a4:9d:29:55:18:dc:ea:f0:33:81:
8f:92:d2:a8:f7:fb:ff:7e:af:64:fc:17:5f:a9:0a:
e7:9f:c3:a5:ca:4f:09:c6:07:70:b5:ae:c6:3c:20:
b6:66:2f:cb:34:56:a1:bf:1d:7d:f8:88:24:1b:d9:
d7:2d:a3:e8:d1:35:5c:f0:96:0e:46:9b:5d:83:87:
cd:64:86:73:55:0c:dd:d7:df:0d:2b:bc:dd:ff:0d:
8d:27:04:52:80:ef:53:90:5e:6d:cd:a7:c8:6f:28:
28:a1:b1:e7:1f:53:d4:b8:47:05:bd:6b:b0:58:4c:
a6:cc:10:5c:4e:a7:4b:e3:51:3d:77:24:a2:13:7a:
31:ba:58:16:99:34:5d:fc:3c:fa:e9:30:70:7f:a8:
44:39:62:e8:3d:cf:d6:18:59:5a:34:a3:cd:18:f5:
eb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:1D:B4:32:67:AE:48:8B:7E:C4:B5:6B:1F:71:01:DC:F6:FA:28
X509v3 Authority Key Identifier:
keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:08:98:57:f8:55:10:62:b2:43:01:16:9c:45:a1:9a:40:c4:
b9:5b:21:b8:65:48:e2:72:eb:9f:91:34:a9:cb:44:36:ca:bf:
bc:f2:3a:ae:dd:1f:ea:4d:d2:b6:60:02:bf:02:3e:7a:3a:3d:
5f:af:5b:d2:67:a5:c7:7e:8f:e5:6b:92:77:10:05:d5:ad:cd:
52:ed:2d:10:b7:6d:ec:66:ff:f9:8a:bc:5a:53:46:b9:9d:62:
a5:fc:ad:90:4a:be:17:d4:5c:d7:e3:a4:fa:8f:3f:11:e5:17:
12:55:dc:eb:85:91:e9:dd:b4:b0:40:b7:de:7a:1b:62:11:48:
80:cd:5d:b1:a4:81:1e:14:f7:b7:c0:91:15:9e:e5:5d:67:38:
e6:40:86:0f:56:da:5f:7b:77:a3:3b:ee:34:69:c2:3f:bb:8f:
77:f1:85:24:c8:8a:4a:cf:16:df:60:55:8e:62:fb:e1:32:61:
91:39:c0:fd:d3:e5:bb:a5:5a:f8:14:41:70:5d:83:a0:3f:4a:
a1:84:66:da:c1:f0:67:4a:6e:39:bd:46:c6:e9:dd:8f:b7:23:
87:01:13:85:7e:82:ee:02:a3:fc:d9:f3:0c:72:77:a2:9b:cc:
1a:6f:54:ee:85:1d:15:fd:50:bc:ec:02:d0:9e:44:83:7a:7d:
73:de:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:16:04 2026 by rpki-client