
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json)
Hash identifier: wkCghaBwFLqPNwK8QQIOggRl23YY4eyFWF9+D2a5sss=
Subject key identifier: D1:DA:10:08:C0:1E:A2:EF:92:DB:AE:12:D6:4C:E1:18:C5:AF:D5:0B
Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
Manifest number: 0267
Signing time: Fri 25 Sep 2026 02:11:24 +0000
Manifest this update: Fri 25 Sep 2026 02:11:23 +0000
Manifest next update: Fri 02 Oct 2026 02:11:23 +0000
Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: ySZswgd1H/u9Tkd3gX4DUv58TvvjVUaODa9p3PIV/E0=)
2: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: HkA6U1wFsTKTzUQHdDn6LGozzBTZRy33eQX4h5sxnuY=)
3: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: k50pyswPVAJjF83tcl2ttbv+lV78Nbi1RduGBQNNES0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Validity
Not Before: Sep 25 02:11:23 2026 GMT
Not After : Oct 2 02:11:23 2026 GMT
Subject: CN=6ab5d84c-2445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:be:e6:f8:41:cb:35:f1:e8:b8:7f:cb:b4:
5f:4e:e6:a7:19:5c:f8:ca:54:d3:6a:c6:90:de:10:
dc:3f:c7:58:de:d8:19:8d:33:a3:33:78:ee:3a:2b:
2c:fe:98:70:0c:f3:a7:b6:90:c6:3c:b7:30:7c:fd:
7b:3f:4a:5f:9d:47:c8:75:1e:d6:08:50:61:43:ad:
7f:da:cb:8f:48:1d:90:b6:a4:8b:30:4a:f7:8f:dd:
bd:11:99:fa:73:c6:46:8e:d2:ad:1c:b1:ba:32:64:
b3:ef:cc:67:57:d3:9e:98:9b:fc:b4:f8:2f:85:18:
56:5a:e7:9f:bc:76:89:fd:3a:bc:48:d4:13:b3:e6:
4d:a7:d5:90:d9:b2:91:58:67:d7:14:49:53:1e:0b:
e3:73:83:b9:ec:63:ab:ca:52:22:a5:82:22:cc:99:
da:47:52:bb:e3:a5:c7:d0:30:18:b4:2f:73:6c:44:
3a:70:31:42:76:f3:63:eb:9c:d4:34:1e:1a:3a:59:
7b:10:a3:a2:1d:eb:b4:61:72:17:c5:fe:aa:5a:32:
7a:78:f7:e9:04:d3:db:b6:48:74:4c:11:a8:87:cc:
32:89:50:50:d8:45:98:1c:b4:76:bf:0d:67:32:1f:
5d:1b:54:b3:2f:02:72:b7:16:ed:e1:4a:f0:98:d2:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:10:08:C0:1E:A2:EF:92:DB:AE:12:D6:4C:E1:18:C5:AF:D5:0B
X509v3 Authority Key Identifier:
keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:1f:cb:e1:48:17:c0:a5:c9:19:9b:5c:ff:66:b9:11:01:ff:
25:14:ad:0c:73:86:a7:f4:31:d4:d8:b2:49:9c:b6:e2:e2:de:
dd:b1:ff:20:e8:04:ce:5c:be:82:3d:90:3a:ee:a6:3b:de:fb:
64:ed:3c:af:53:1b:92:b7:b0:2e:99:47:da:a6:c0:38:e2:e6:
7c:ac:1e:e1:96:42:79:30:66:dc:1e:12:36:5d:37:71:99:39:
41:2c:8c:48:11:2c:ba:cf:b7:4e:e1:5c:b3:0b:ed:93:98:dd:
b6:db:ff:9a:b4:04:89:0a:f4:74:13:4c:c3:7f:d9:ab:94:d9:
cd:34:a2:4b:8d:40:83:22:e1:dc:a4:9b:b2:a7:8a:ce:aa:69:
c0:62:08:11:26:41:1e:36:49:87:1e:8c:c9:93:44:05:58:65:
51:2d:ad:a0:f8:5c:ac:b4:dd:b0:48:1c:8b:b1:bf:7b:6f:1c:
25:33:e0:86:83:59:4b:02:97:62:80:70:42:21:c6:c9:60:a3:
94:1f:08:f1:d9:7d:6d:a3:da:69:3f:4d:ac:2a:53:2c:62:1c:
94:d4:7a:48:6b:f2:01:78:68:c8:9c:ae:73:2c:95:72:2a:74:
79:f6:4d:22:32:61:0e:61:dd:d1:bd:6c:52:b9:30:6f:b6:1e:
b1:bb:0d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:05:48 2026 by rpki-client