
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
File: 5Ihhomij6U17foS6dO6vR3KJZwk.mft (raw, json)
Hash identifier: gWn7FzC6CmThQoI8r+OEa83cLpuELAcZZdJF1V4ctno=
Subject key identifier: C1:B9:F7:D3:43:DA:5F:65:AD:E0:64:FA:60:1F:CC:82:7B:1B:9C:9F
Authority key identifier: E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09
Certificate issuer: /CN=A91D3060/serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
Manifest number: BC
Signing time: Sun 27 Sep 2026 07:27:53 +0000
Manifest this update: Sun 27 Sep 2026 07:27:53 +0000
Manifest next update: Sun 04 Oct 2026 07:27:53 +0000
Files and hashes: 1: 5Ihhomij6U17foS6dO6vR3KJZwk.crl (hash: GVXZOixd+k9IGdj6uxdfiwsTREtnrubWeOQlK61Koks=)
2: 0FCEAD129CF111F0A76B5F3AC4F9AE02.roa (hash: ifQONvULGYpYHvM+bvP3PgrTKc94bp+crLb4/d1Vd4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl
rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 07:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3060, serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
Validity
Not Before: Sep 27 07:27:53 2026 GMT
Not After : Oct 4 07:27:53 2026 GMT
Subject: CN=6ab8c579-fbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:62:2c:c1:df:07:13:c9:21:4b:0e:25:3c:
87:38:f8:a7:2f:a5:33:e8:cb:61:e2:06:75:68:c5:
8b:29:90:81:1f:70:d6:fa:e7:86:44:46:2f:5f:ef:
af:d0:25:f8:60:8c:48:6a:e5:27:8e:a3:79:a1:3f:
9d:e5:2c:4b:83:49:48:b8:68:e0:3a:44:ee:57:aa:
b9:df:58:a7:0d:a4:00:18:36:00:fd:93:03:52:d2:
e9:2e:b4:63:30:49:98:c5:01:df:28:1a:c1:19:1b:
4a:7e:be:20:49:d8:4f:da:c1:00:b6:65:1c:fd:26:
dd:d5:06:5b:51:7b:bb:dc:b9:a2:be:e4:8d:66:ef:
39:e6:68:b3:d0:cd:c1:70:a9:36:21:24:f6:34:db:
7e:30:4e:dd:e0:37:d4:ef:ae:fc:ab:96:f1:07:3a:
6f:23:f3:34:ae:38:fb:9f:55:95:2e:c9:1b:ff:f4:
7b:10:1d:78:bf:22:eb:96:15:6a:d8:ec:c0:e4:95:
5b:9a:26:ca:e3:75:6c:e2:6c:cd:41:c4:a5:e2:7f:
da:5c:45:03:fa:b0:d4:44:01:00:b7:b6:ce:02:55:
3b:b6:f3:24:10:9e:bd:55:d7:8a:fc:43:ca:c2:9f:
53:78:aa:89:00:80:63:a2:77:7d:20:ed:26:2b:35:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B9:F7:D3:43:DA:5F:65:AD:E0:64:FA:60:1F:CC:82:7B:1B:9C:9F
X509v3 Authority Key Identifier:
keyid:E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:9e:54:40:78:b5:a6:c5:af:ea:61:9d:37:a6:57:26:0a:06:
d8:97:4b:ea:c5:7f:08:0a:be:1b:87:33:a8:a6:9e:a5:76:3a:
35:5d:ca:c8:11:5d:1f:71:97:a3:af:df:79:24:da:f0:bb:9c:
87:45:bc:03:58:3e:74:7a:4a:4d:f1:61:5b:0a:42:e5:96:4c:
61:57:09:eb:b5:af:a2:fa:8b:5e:08:15:c6:93:09:58:88:0b:
55:62:17:9f:2f:1e:71:b6:4d:4c:23:1f:4a:ce:75:50:b1:da:
45:f5:bb:a2:08:94:64:69:c4:b6:3f:0e:90:fa:0d:c2:6d:5a:
e0:28:bc:05:1e:77:9d:ae:97:d1:0c:b6:3c:7e:42:ba:97:47:
f8:83:52:6a:ab:bc:56:c8:b3:16:d0:49:67:02:6c:43:69:bd:
db:b9:a2:9f:43:90:0e:ea:2d:8a:5c:31:04:12:f2:27:b1:95:
7b:11:85:d7:f2:a9:a3:fb:ea:da:2f:b2:24:d6:53:68:3c:5c:
87:63:bb:f7:5c:4f:54:0c:e6:69:d6:a5:df:6a:cf:13:81:11:
77:b6:44:33:0c:38:7b:c7:ec:38:9d:e8:c3:4d:28:88:b6:98:
25:2a:a4:d2:0b:c9:01:07:28:fe:0c:0b:37:87:d4:c3:40:ae:
df:14:7a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:43:36 2026 by rpki-client