
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
File: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft (raw, json)
Hash identifier: pxPyfLlfUy5Y/EbmO8AfODVuVdByva35i6agC53Iuaw=
Subject key identifier: 00:D1:1E:79:53:7A:76:22:1F:2F:92:25:68:42:78:6B:46:46:1E:E7
Authority key identifier: 8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
Certificate issuer: /CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E
Certificate serial: 0B95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
Manifest number: 2D94
Signing time: Thu 24 Sep 2026 15:52:37 +0000
Manifest this update: Thu 24 Sep 2026 15:52:37 +0000
Manifest next update: Thu 01 Oct 2026 15:52:37 +0000
Files and hashes: 1: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl (hash: cA7Iw1na5SrSPzoH1CECC7osB1eVB0OrvqpPN3wwrV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl
rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2965 (0xb95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4413, serialNumber=8AA8786526852346839372631DFB09984BC3005E
Validity
Not Before: Sep 24 15:52:37 2026 GMT
Not After : Oct 1 15:52:37 2026 GMT
Subject: CN=6ab54745-aaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:0d:49:b5:81:10:36:9d:e3:e5:91:88:0c:
02:d8:9b:07:a3:67:de:39:cb:93:0b:b4:fb:b9:d8:
23:6a:db:42:a3:45:3b:82:89:18:66:05:26:bd:ef:
9d:eb:8f:f0:b6:ad:89:08:07:e3:a5:f1:b1:02:a5:
2a:4c:2b:79:05:ee:31:63:f5:f8:4f:ca:0c:b7:05:
22:f7:a3:b6:10:56:ed:54:d0:b0:f4:2e:6c:aa:d1:
29:ed:12:c7:35:ce:69:c1:b1:b5:f1:bc:f1:27:e1:
37:8e:87:5b:23:50:7e:46:1c:92:23:ba:e6:22:07:
db:9f:7b:1c:d3:ab:28:db:84:07:6f:17:7f:b3:d2:
b6:bb:09:cf:1e:2f:8f:fd:62:a8:98:db:ac:a2:96:
9c:90:f2:ab:69:eb:22:36:92:d6:67:73:48:4e:6e:
8a:d9:cc:09:33:09:2a:2d:6f:fb:35:77:b2:aa:e2:
d9:d9:40:8c:85:f2:57:75:1b:bc:b5:cb:43:09:25:
77:f0:06:e5:51:bb:6a:7d:aa:03:c2:26:50:cd:94:
9a:a2:10:9f:c3:40:4d:b2:97:55:e8:63:8c:f0:91:
80:d4:13:8f:d2:f4:ac:cb:e6:c2:8f:72:ec:14:4e:
0c:62:bc:1c:83:7e:c1:4b:72:55:f7:4d:95:34:9f:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D1:1E:79:53:7A:76:22:1F:2F:92:25:68:42:78:6B:46:46:1E:E7
X509v3 Authority Key Identifier:
keyid:8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:14:f2:c8:5c:b7:1e:33:29:cf:f1:8e:44:8b:ac:43:af:2c:
83:ea:72:58:2e:c2:18:b3:aa:44:04:24:71:ba:da:b6:63:53:
29:68:d0:a6:1b:b6:eb:e0:e5:c4:a9:14:be:c7:cd:0e:c3:bd:
e8:92:02:e4:33:d9:61:f7:0d:a5:f5:54:2f:15:0f:c9:3f:74:
15:75:08:97:c5:c8:ae:b6:2f:cc:a2:5a:33:e6:c6:9f:c3:11:
f2:17:2e:4b:80:65:30:65:43:67:43:6f:3d:fb:63:ac:6f:8c:
20:20:72:e4:a9:02:4b:01:39:88:98:cc:4f:38:e3:ae:93:ce:
1f:26:ea:59:52:58:ff:88:8a:56:0d:09:20:9f:23:98:50:4a:
62:0d:0b:f3:64:32:2e:42:04:e7:f9:b6:c1:f3:53:cb:ca:c9:
60:48:26:06:62:07:10:ff:3a:b5:d7:27:37:d7:9a:6f:9d:8d:
52:ae:d0:9e:79:b6:01:14:92:18:05:c4:15:76:6c:dd:d1:e0:
89:65:60:39:9c:44:31:d2:cc:c4:3b:03:cf:3c:11:76:cb:3b:
e6:01:6e:2d:66:5a:48:18:6d:52:bf:33:25:40:26:4c:0f:c6:
ce:f4:3a:9d:9b:e8:79:84:d7:b4:1e:c5:26:42:23:4b:7c:a1:
43:98:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:44:04 2026 by rpki-client