
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
File: m2fIchTtmWVAcRkL688LjZ-hr04.mft (raw, json)
Hash identifier: UvPUZ9eIg9aa1/UpMe/5y5bAgvbx2dvBcaypNNEbgS8=
Subject key identifier: 78:B3:A9:F5:5B:77:93:4B:B5:C9:F4:0D:3D:88:F2:75:FE:E4:F4:AB
Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E
Certificate issuer: /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E
Certificate serial: 0D0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
Manifest number: 0CF3
Signing time: Thu 24 Sep 2026 18:25:38 +0000
Manifest this update: Thu 24 Sep 2026 18:25:37 +0000
Manifest next update: Thu 01 Oct 2026 18:25:37 +0000
Files and hashes: 1: m2fIchTtmWVAcRkL688LjZ-hr04.crl (hash: 4uv0WZKE4WJwyfBgqYfHTJLxI3izvzei7o9Q6i1amY4=)
2: 988741FEDB8111F0B008B5AB60D3641D.roa (hash: rh5kanvG5QXPAMOrNiNLJLVHnbyU12f7aHXUzCF2hMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl
rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBDC8, serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E
Validity
Not Before: Sep 24 18:25:37 2026 GMT
Not After : Oct 1 18:25:37 2026 GMT
Subject: CN=6ab56b22-82d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:b1:d1:54:f9:f1:89:a2:69:88:81:26:20:
8f:e7:61:68:3a:d8:f8:e3:fe:1e:c8:5b:a6:61:a3:
d7:d7:03:cf:74:ea:a0:9a:01:42:8c:b5:76:cd:fa:
2e:26:02:74:8a:ac:3a:1c:f6:bf:26:d2:55:03:ec:
1e:ed:d6:3d:45:21:21:d6:7f:4a:08:4f:dd:76:10:
1b:76:ce:05:53:e7:6d:38:39:cd:e1:2f:d5:73:2c:
19:63:96:07:de:87:44:89:18:c6:cc:eb:d4:4e:88:
02:13:83:49:d9:85:4e:83:78:37:e8:96:25:ba:4c:
6f:9f:68:1f:37:ae:fa:83:66:33:eb:cd:49:c0:31:
f5:b5:88:ba:9d:11:84:98:6d:ea:4e:c9:64:a5:a0:
1c:0d:f1:d7:8a:a0:8c:d1:7f:5c:db:e8:2f:ae:73:
56:74:a7:dc:50:21:18:e7:35:d7:e9:1d:f7:83:59:
b0:9f:ae:f7:29:57:00:4b:df:3d:8c:ae:15:8f:43:
f3:62:4a:3c:9a:a8:fe:59:f5:7f:0e:eb:f8:38:7f:
1e:16:ec:68:bd:ea:c9:f4:6f:1c:d5:82:fb:86:61:
52:d3:aa:e7:66:c9:b2:44:4d:f8:b0:41:87:fa:b6:
c8:75:0c:29:6e:7c:60:df:2f:c0:82:c5:7d:65:9f:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B3:A9:F5:5B:77:93:4B:B5:C9:F4:0D:3D:88:F2:75:FE:E4:F4:AB
X509v3 Authority Key Identifier:
keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cb:de:0a:17:4b:4d:a1:41:e0:c4:22:1f:f0:00:0f:c5:6d:
87:7f:0e:54:48:b4:75:56:ff:df:43:7a:c5:e7:4d:5f:64:0a:
d8:6e:06:57:9d:88:ff:86:b3:1f:25:4a:3a:59:e7:7f:9a:c3:
5b:8d:ef:a4:f0:33:16:d3:bb:c3:ac:8e:8d:dc:bd:07:d2:d4:
c0:dc:b9:b6:b9:08:a7:99:36:55:f4:70:75:bd:2b:87:ef:2a:
9b:fe:97:a1:a1:b7:e1:10:ab:2e:b9:2f:d2:97:26:5e:4b:24:
83:96:f8:59:04:4f:06:80:9f:6b:b0:8f:99:c5:a1:6d:40:f9:
9e:ed:5f:65:15:77:41:9d:2e:4c:70:d2:96:d9:98:33:e5:e7:
17:1a:5d:c1:a7:f6:27:fb:ba:b6:92:2a:7a:de:40:19:dd:8e:
a8:15:66:75:1e:80:4b:dd:95:53:13:ad:40:fa:8d:26:1c:89:
6f:c7:53:7f:80:fe:c7:3c:bd:ff:ef:d3:f1:5e:f5:c4:a1:b6:
e3:ba:df:51:62:a8:c1:a6:58:21:e8:64:ee:f2:74:0a:62:6c:
05:4f:81:fd:66:76:c0:c3:a7:b1:a5:9f:6c:19:00:ec:4f:2c:
19:23:08:2d:de:de:3e:8c:74:5b:9a:82:6b:5a:63:d1:77:91:
7e:31:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:18:06 2026 by rpki-client