
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier: 0EfaMsudnYLP9Pq9xyHoskTeV6Ymg/rFmNPFYUMcasA=
Subject key identifier: B1:09:31:B5:19:F5:19:A7:B8:E8:2E:A8:5E:12:60:88:57:F4:CE:0D
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial: 0D1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number: 0D11
Signing time: Thu 24 Sep 2026 18:17:51 +0000
Manifest this update: Thu 24 Sep 2026 18:17:51 +0000
Manifest next update: Thu 01 Oct 2026 18:17:51 +0000
Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: YZNnXi/SIpxaeDeS4b7nx2J0bmr1qOsPPBagrCc5S3c=)
2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: lK8WYlW/sGNnnRMcLOEhnAiWj1a7xDPNyjs1znIbG8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Validity
Not Before: Sep 24 18:17:51 2026 GMT
Not After : Oct 1 18:17:51 2026 GMT
Subject: CN=6ab5694f-a06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:21:1b:79:eb:4d:cc:30:5d:fa:97:6d:07:
c5:e4:96:79:0f:4b:f6:d1:8b:75:7e:16:dc:36:2c:
c3:38:23:be:81:50:5f:c0:60:e8:61:b4:b2:f1:57:
ad:9e:a5:71:ca:f3:64:fc:b5:23:81:c3:40:53:4b:
66:7d:b8:7c:2f:e2:de:24:73:b9:63:b9:b1:8c:21:
4c:ef:2c:f9:a9:8d:4f:8f:47:57:a5:65:a4:3f:bf:
d3:c5:7b:f5:82:ef:b4:88:1f:89:76:1c:d1:53:e9:
f7:79:bb:b0:42:3f:d1:9a:bb:ef:f2:5a:14:34:45:
61:3c:eb:32:55:14:48:e0:e5:ca:d5:86:53:9a:26:
ae:b9:29:c0:42:f5:52:df:9a:5b:e5:fc:20:e5:ca:
05:f0:09:b6:de:79:42:64:80:08:b3:4a:07:07:99:
85:af:fb:a9:e7:96:28:38:5a:5e:14:37:2b:68:94:
86:3c:c5:3a:0c:5b:eb:1d:90:96:56:64:3f:85:7e:
67:cd:79:4d:27:a1:e8:1e:25:88:fa:84:36:54:07:
0a:80:e3:7c:fd:c1:40:98:2c:81:ef:1c:be:cd:71:
a6:59:ec:7a:93:fc:5e:bc:8e:30:23:a7:f5:68:66:
f1:54:85:4b:78:12:47:93:0e:84:dd:d1:67:1c:6b:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:09:31:B5:19:F5:19:A7:B8:E8:2E:A8:5E:12:60:88:57:F4:CE:0D
X509v3 Authority Key Identifier:
keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ce:f4:92:96:74:36:9b:ef:99:e8:52:7e:60:39:7e:09:34:
27:76:67:ba:34:49:97:cf:5e:a1:d6:12:9d:b5:c7:f0:89:24:
6a:df:88:1c:1e:15:e6:ee:56:d0:bf:56:e5:45:3f:f5:78:d3:
04:16:b0:b0:5f:2f:b4:78:e3:c3:aa:ca:84:c9:d8:95:be:85:
a8:fd:cf:e7:84:9f:58:a7:92:c6:42:56:6f:c1:dd:45:44:6a:
36:53:e1:4e:3c:c8:7f:5d:aa:c7:cb:e7:7f:90:ce:a4:6c:ac:
45:b0:c3:06:96:5a:59:ab:01:f1:d9:40:d5:79:40:33:4f:cf:
c6:d9:0e:8e:4f:c2:ca:19:68:8a:b2:81:b4:1c:19:94:cd:3e:
4f:be:33:2f:f0:ac:1d:00:9c:7f:62:ed:12:6e:70:b0:77:e5:
8a:be:20:97:54:38:3f:f2:b4:f0:ee:bb:fc:50:25:9a:8e:ca:
4c:60:2b:57:b2:3b:10:83:4d:f6:dc:c4:3e:2e:c4:aa:83:53:
38:84:30:b0:10:6b:98:1b:bc:7b:ef:d4:3f:99:fe:67:af:30:
7a:dd:6a:7d:4e:5c:06:c6:89:3d:1e:e8:4c:2f:19:d1:87:17:
8d:47:17:39:bd:c0:20:8a:9b:03:3e:35:87:dc:e9:ba:1a:7c:
27:b3:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:21:53 2026 by rpki-client