
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json)
Hash identifier: z2aFB4b/47CvoYTdkUmlQIQ7Z4mpEre6fTFqovbq47g=
Subject key identifier: 5C:39:6B:42:F2:12:DE:47:2E:44:7E:08:E5:0E:20:60:F6:39:48:58
Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Certificate serial: 072A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
Manifest number: 0721
Signing time: Fri 02 Oct 2026 22:19:56 +0000
Manifest this update: Fri 02 Oct 2026 22:19:55 +0000
Manifest next update: Fri 09 Oct 2026 22:19:55 +0000
Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: Sd4UPJrY4UGCiM6kNBLCoQaz/oZhylY5+4dvhoGGZ+g=)
2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: nL3vp/CU21MSnng2C+poLgofAZHvrlCtCeZrfBZOSyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834 (0x72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Validity
Not Before: Oct 2 22:19:55 2026 GMT
Not After : Oct 9 22:19:55 2026 GMT
Subject: CN=6ac02e0c-dcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:3c:99:55:d5:46:30:15:f9:e4:60:de:af:
1b:94:0e:89:7c:49:3d:83:9c:eb:ee:5a:b1:1f:f2:
9b:4b:26:03:d6:18:c4:73:32:51:a3:ed:83:7c:6a:
d0:2c:4c:04:ae:75:5f:3e:69:28:4e:d4:9b:84:8a:
f3:58:c8:a1:cf:eb:75:f2:43:66:09:74:13:98:57:
ac:ed:6c:56:50:e2:d1:7b:95:a3:90:0b:05:23:16:
6a:25:88:12:69:a9:7f:30:b3:d3:e3:a1:48:5b:96:
c8:fb:37:8e:b4:2c:49:18:b4:dc:61:2a:da:c3:dc:
44:a6:69:fc:5e:84:c0:d0:84:60:bc:de:4d:82:11:
44:ce:72:44:c2:35:d0:35:0d:00:85:cd:af:08:38:
81:56:68:4a:a5:d7:07:b2:a9:d3:35:54:4b:96:51:
73:8a:71:58:08:10:d9:1f:6e:1c:a3:bc:0f:72:e4:
30:1c:8a:b3:eb:6d:5a:e9:fd:c1:3e:e3:f8:6e:5f:
6f:22:8c:37:5f:10:cf:ca:9d:b9:1a:85:66:b4:6a:
27:a5:fa:a4:df:6d:8d:f3:a3:da:2b:1b:cc:0e:34:
84:93:df:51:ca:51:90:0f:34:c9:2b:27:8a:23:3d:
aa:88:3a:40:37:db:59:da:f8:38:52:49:e8:61:53:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:6B:42:F2:12:DE:47:2E:44:7E:08:E5:0E:20:60:F6:39:48:58
X509v3 Authority Key Identifier:
keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:24:72:01:8f:78:ce:b7:50:1e:f4:87:28:cf:c0:09:13:d8:
49:8f:b7:c8:c7:17:cd:17:94:ca:37:8b:57:9c:57:88:13:9b:
a5:ba:f7:fe:31:95:6a:cb:ad:f2:66:53:40:bd:35:5a:7d:9b:
81:b8:91:65:90:09:a2:de:fe:36:95:66:93:32:bf:0e:91:da:
1a:da:ed:5c:92:3d:5c:17:2b:90:c8:2c:fa:a6:19:14:3c:06:
42:b1:ad:7e:c1:21:99:c2:ce:d3:c9:1a:24:68:d8:d3:8e:be:
6c:2e:65:26:bf:8a:46:94:be:78:3c:cf:0c:53:cf:d0:94:00:
0a:09:34:75:a3:ab:15:13:a3:19:a4:d7:46:eb:c5:36:c1:76:
0d:94:ef:f7:e2:b0:98:34:8b:11:39:a7:07:b0:28:bc:73:b9:
38:a5:c0:04:7c:91:cf:1d:dc:11:f0:c1:9e:6f:4b:df:be:67:
c9:2e:39:d0:52:7c:56:16:f6:b0:be:d9:d0:bd:17:bf:af:62:
fd:47:59:79:1d:c3:86:18:98:98:ca:2c:e2:6c:9f:d5:92:07:
ca:ca:7e:93:0e:3b:84:fb:fe:b9:9a:f7:3c:1b:ee:9c:2f:b5:
a4:7e:e0:d8:05:87:a2:e7:69:c8:d6:1f:ba:f0:23:25:6e:03:
6c:dc:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:29:06 2026 by rpki-client