
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
File: mD14MALFTaj4puKVg4ucrwE2Q1g.mft (raw, json)
Hash identifier: Q5OwRmqyKAxYrdPKf/jxQ+LVbWS0f2sfIEWOFuwwIo0=
Subject key identifier: 3F:F7:39:CC:46:EB:3E:01:98:C9:22:3E:33:2F:31:6A:98:72:52:DE
Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Certificate serial: 0933
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
Manifest number: 0925
Signing time: Thu 24 Sep 2026 20:09:53 +0000
Manifest this update: Thu 24 Sep 2026 20:09:52 +0000
Manifest next update: Thu 01 Oct 2026 20:09:52 +0000
Files and hashes: 1: mD14MALFTaj4puKVg4ucrwE2Q1g.crl (hash: R8dohRoBNp1o5Zt2/jO3RYKHwoyn2IJX7Vqtmqi5hAw=)
2: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (hash: y0ZDNF6cJnenBSxzNT9Zg+guSF3PdEPjBHywfaHzzjo=)
3: 8FADE73CA49B11EEB19E774BC4F9AE02.roa (hash: cE48WGS9kboOii2J8VTr2sUZ9DzkZ2EoWEhl3gouzMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2355 (0x933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358
Validity
Not Before: Sep 24 20:09:52 2026 GMT
Not After : Oct 1 20:09:52 2026 GMT
Subject: CN=6ab58391-19f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a0:76:e7:ac:f6:01:c7:4a:f0:c0:c0:0e:6d:
9f:6e:d7:81:1b:d4:aa:f9:2d:ff:a3:c2:e5:a6:c5:
56:6a:13:e6:57:17:4a:93:82:58:0a:e1:b6:89:e8:
c1:f7:e7:be:8c:4f:cf:e2:15:26:2d:ea:62:65:0c:
20:b5:d5:6d:5a:59:3d:04:07:4f:de:aa:5a:7c:bd:
93:1a:1b:8e:84:6a:7d:55:f8:06:3a:34:2f:4a:56:
19:b2:aa:ba:60:19:11:8b:09:07:ca:55:89:6a:a6:
ae:62:96:a5:41:31:7b:f7:37:fa:dd:51:99:e2:82:
7e:0b:23:f4:2e:f4:07:08:d0:83:4f:a7:59:50:d9:
0d:bd:9a:bd:16:35:d4:8c:91:8a:cc:42:71:f8:45:
63:49:8b:bc:30:6c:3e:3d:f9:e8:26:4c:23:fc:ed:
7c:fd:77:a1:fd:b8:da:45:ac:ff:c9:8b:7d:bf:0f:
23:ce:65:f7:63:37:6e:95:e7:d2:8f:af:d5:34:05:
c8:a3:28:81:f7:b1:ed:0f:ae:d4:bc:43:1e:ef:ef:
54:f6:a1:90:2d:6b:d7:dd:1c:47:17:b2:de:0b:08:
e2:a3:ca:33:1e:f0:67:ff:ee:10:d3:76:26:0e:58:
6a:06:44:c3:88:9d:2a:6f:15:23:71:88:58:33:9d:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:39:CC:46:EB:3E:01:98:C9:22:3E:33:2F:31:6A:98:72:52:DE
X509v3 Authority Key Identifier:
keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:4a:1e:3b:0c:81:de:47:fa:4e:e4:30:a1:fd:92:64:b1:38:
37:e0:bd:a8:ce:45:64:a0:1a:a7:8c:03:bd:bd:47:b5:98:a3:
65:df:c3:29:b1:ea:03:60:87:89:76:d8:86:14:e0:53:24:50:
f9:ab:72:ae:ce:60:62:c5:32:4d:76:9d:60:ec:de:02:c3:c2:
a7:84:ef:d8:1c:fa:5f:9a:23:f6:15:f7:dd:c1:a0:aa:12:e0:
83:a4:00:32:13:e8:3f:00:fd:ce:a2:28:e6:42:31:97:1c:ee:
83:ef:7f:86:c1:90:69:f2:55:8e:f6:67:2a:80:da:23:21:9e:
de:16:db:92:f7:b2:a3:61:c6:93:d0:ab:bc:2f:95:d0:a0:07:
c5:cc:c7:45:31:ee:93:c5:65:73:7f:07:27:09:0d:23:89:4b:
94:19:ec:34:e4:11:d8:f2:43:16:18:d4:68:26:ac:51:29:eb:
d0:8f:51:9c:90:c3:01:05:2d:5f:65:de:cf:b9:15:2b:f0:57:
b9:2d:96:43:35:9c:4a:2e:0d:c5:97:e2:b0:86:bb:4e:ce:ab:
0c:c2:3b:ce:3a:b8:70:26:be:79:6a:7a:f5:1b:fe:85:58:9a:
96:ab:e1:95:3a:f3:78:62:35:6b:a9:b0:b8:ba:0d:cc:de:7e:
78:e2:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:32:30 2026 by rpki-client