
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json)
Hash identifier: wqtMc9amsv8G4HPOXnosbVNBapeSqKRf++RZbKua/XE=
Subject key identifier: D8:33:1B:9A:5C:80:46:2D:14:99:F7:74:31:85:0C:B5:A9:A3:E6:0B
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial: 08D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
Manifest number: 08BA
Signing time: Tue 22 Sep 2026 20:21:37 +0000
Manifest this update: Tue 22 Sep 2026 20:21:36 +0000
Manifest next update: Tue 29 Sep 2026 20:21:36 +0000
Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: H6kSUVM089Nl5Xp4gRSVXF+gwWIuAulH0ko8+tfvGIM=)
2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: ZEKagWdv0yeK8YKk4M4X2WCGHhhS2XrEDrg/1/ecl20=)
3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: W7VEuZ0XJHIgHkuqLntiZruVzDvsuhDDdtNUQSpIguA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Validity
Not Before: Sep 22 20:21:36 2026 GMT
Not After : Sep 29 20:21:36 2026 GMT
Subject: CN=6ab2e350-709b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:bf:71:69:d5:70:db:86:cc:7e:f0:f8:25:
94:cb:b2:ac:05:1c:53:be:ec:73:c8:97:a9:e7:81:
55:2e:2b:eb:0c:b3:7b:8b:46:fb:f4:17:d9:ca:8a:
4e:ea:fc:e7:35:a3:d3:ad:91:8a:8f:0e:07:1f:e3:
b8:32:ad:ec:6e:09:ec:b9:0b:a4:f4:8c:51:98:11:
a9:7b:af:bb:d3:66:28:96:3d:19:10:63:99:5a:ef:
e9:fb:b8:5b:01:c5:61:db:c4:de:cc:33:8f:95:c0:
8a:e3:60:45:bf:00:9c:4a:99:90:ae:c3:1a:4b:4e:
71:0e:d7:a3:34:82:55:38:da:6b:ae:b8:7a:c0:aa:
ba:aa:8b:97:08:ff:ff:54:88:60:52:0e:e0:f8:a9:
b8:ec:bb:84:0d:f4:0b:c7:46:54:b7:87:b1:58:04:
e4:8a:d8:ad:b5:a0:6a:2d:49:e2:39:69:4a:25:7d:
02:93:61:5c:f8:17:29:c0:ee:46:c6:1c:59:df:e5:
41:bb:d4:42:3b:fa:5e:b7:19:d8:29:50:9e:b7:59:
60:5f:4a:db:44:00:45:7e:7d:50:31:ba:93:55:ec:
b2:7b:e1:fc:db:8a:aa:72:40:ff:a9:45:90:bf:1e:
f0:0b:3a:aa:6c:b5:86:dc:d7:de:55:af:c7:67:22:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:33:1B:9A:5C:80:46:2D:14:99:F7:74:31:85:0C:B5:A9:A3:E6:0B
X509v3 Authority Key Identifier:
keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:01:23:b4:84:4c:e3:2e:d1:33:b9:3f:27:34:4b:76:b8:28:
4c:86:a7:d7:6f:41:23:2c:50:2f:b8:b6:3b:ea:7b:3d:fc:26:
b7:b2:e0:de:71:47:c6:01:7e:34:2b:2e:d3:ec:ab:d2:3d:8b:
f3:cc:42:d6:f1:ad:fa:88:a7:c8:8c:a4:21:f3:46:a4:8d:f3:
1c:c6:62:01:25:ed:14:75:a8:77:b2:fd:f4:f7:bd:88:6c:d8:
bf:6c:e2:c5:f8:9f:c8:90:09:ad:a8:5a:77:41:89:8d:8f:21:
07:4a:7a:5a:79:22:04:6c:cf:36:44:61:8b:b8:36:8b:b1:1c:
af:23:b0:cc:5b:3c:b4:5e:4f:87:b2:c4:a7:d4:78:e6:26:05:
1d:17:22:86:14:64:55:c9:79:77:f2:36:09:81:82:72:a6:8f:
2f:19:0f:2d:8f:32:40:1a:0d:78:26:c2:19:21:2d:1b:d3:00:
2a:08:9c:9c:87:d9:4c:60:71:e9:4d:21:b1:84:78:36:9f:34:
a9:08:c9:c5:e1:8d:65:8c:af:2a:12:20:61:bb:b0:03:22:e4:
1e:75:6e:80:ff:c0:1f:97:a0:7c:04:41:a4:c0:c8:c1:a7:21:
50:24:33:d4:1f:35:4e:cf:1a:97:1b:b7:f1:b8:18:30:aa:09:
94:4e:e9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:21:36 2026 by rpki-client