
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
File: _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json)
Hash identifier: VQU4ONTZC42MvdIlTGpXzp40djBZO/ep9gk6m81t+Nw=
Subject key identifier: 1A:BD:A5:BD:18:63:B4:28:D5:8D:AB:D5:8E:88:20:BE:BB:0A:3A:77
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial: 030B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
Manifest number: 0304
Signing time: Wed 23 Sep 2026 00:44:14 +0000
Manifest this update: Wed 23 Sep 2026 00:44:14 +0000
Manifest next update: Wed 30 Sep 2026 00:44:14 +0000
Files and hashes: 1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: i+ZudiAi5hWihS2zcyghGMJmDEtnBpk3kTA9JXVQ16s=)
2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: qWq9FBfV0TlO+Nnhl0xmqfZ2SJgk0It8nQYA3EDnxXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Validity
Not Before: Sep 23 00:44:14 2026 GMT
Not After : Sep 30 00:44:14 2026 GMT
Subject: CN=6ab320de-b0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:90:a5:aa:7c:a4:5f:0d:31:21:61:cb:64:
fd:ad:ce:bd:27:ad:13:37:e6:38:0c:20:c5:e7:0f:
7f:9f:eb:2c:43:98:37:05:c1:2d:05:f5:c6:8f:db:
2c:5d:33:60:75:30:17:34:19:ed:cf:1c:1a:e3:22:
a2:f2:6a:ac:32:42:ed:31:b3:67:3a:70:eb:43:2b:
88:1a:31:20:5d:3a:c3:57:63:f9:b5:c3:11:4c:b1:
29:fa:b1:be:f9:9f:e7:e0:1e:a5:82:06:36:94:f7:
0f:59:eb:63:37:46:05:d2:7c:63:d4:ff:f7:ba:8e:
95:b6:79:a1:3b:59:86:19:5c:c7:78:9d:d3:d1:44:
1d:56:dd:9f:dd:4f:90:17:c6:46:38:3b:21:6c:c4:
91:ee:29:3c:f4:5f:12:4a:0e:68:d8:b6:1e:ef:f6:
92:6d:52:e2:4f:9c:65:6e:ce:4e:4b:03:de:29:21:
9f:6a:e1:0e:9d:22:95:49:2d:67:c5:bf:b0:62:2a:
50:fa:79:41:9c:9a:79:06:8b:9a:66:dc:e2:d3:c1:
69:6b:94:4b:17:96:a1:17:83:08:0e:de:69:32:68:
68:e0:58:87:4c:04:35:4e:98:14:69:bc:83:dd:94:
ac:ac:90:34:f6:95:44:64:a0:9f:20:3e:1c:33:70:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BD:A5:BD:18:63:B4:28:D5:8D:AB:D5:8E:88:20:BE:BB:0A:3A:77
X509v3 Authority Key Identifier:
keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:4c:d0:28:00:17:e8:85:b1:40:d6:49:de:82:f9:66:d6:0e:
41:52:0b:fc:a5:e2:3f:8c:69:fc:a1:33:04:9e:e6:bf:94:1d:
52:54:eb:55:91:42:5a:58:94:30:f2:7c:6e:78:1f:11:40:84:
d4:6b:0f:73:d0:e6:1d:91:bb:a2:62:69:75:8b:60:34:a3:25:
d2:73:d1:58:94:9d:a2:fe:28:d3:6d:d5:f3:e7:b3:5f:6b:f7:
1d:f8:29:d9:e6:93:83:b0:96:a6:fe:21:2d:2e:3c:37:7c:f3:
92:bd:55:69:c3:42:84:c0:f3:f6:18:62:2e:d8:8e:b9:86:9c:
54:ca:c5:22:67:4f:4c:80:6d:0c:d0:9e:a5:e4:7f:54:53:e2:
eb:7c:4c:6a:2c:9e:d0:39:9b:b3:81:88:c7:33:5b:f6:23:5f:
a1:3d:ae:5b:3f:97:52:ee:5e:71:8a:9e:50:db:9e:83:69:9a:
cf:61:82:cc:7a:6d:66:e1:bc:28:aa:5c:8d:d5:a8:d0:73:8c:
81:57:ad:8d:fa:a7:7d:0c:bc:66:d8:37:c5:25:4d:04:89:ae:
12:3d:e5:45:79:89:83:06:31:bc:7c:08:f3:82:91:11:46:b8:
82:2d:28:06:af:fa:b5:32:a3:a4:10:18:03:cf:93:d7:34:fa:
93:c7:94:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:35 2026 by rpki-client