
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json)
Hash identifier: ZPiDocklBQ+LkCf6G07JHGH/yfApHAaIR4Swg1gtkEM=
Subject key identifier: 51:28:85:0B:10:A5:F3:E8:2E:9E:F7:64:81:B6:6F:D2:C2:E1:D2:94
Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10
Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10
Certificate serial: 088D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
Manifest number: 095D
Signing time: Tue 22 Sep 2026 20:35:04 +0000
Manifest this update: Tue 22 Sep 2026 20:35:03 +0000
Manifest next update: Tue 29 Sep 2026 20:35:03 +0000
Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: 2VwvkjzTIfmI8ElfZ/eB1ZEN+4H7acTvoBPQs85aRzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl
rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189 (0x88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10
Validity
Not Before: Sep 22 20:35:03 2026 GMT
Not After : Sep 29 20:35:03 2026 GMT
Subject: CN=6ab2e678-5830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:b0:87:3d:7d:a9:3e:15:a9:c7:c4:59:b6:
07:fb:d2:e7:15:b2:ec:e6:1e:88:a3:b4:d4:4d:94:
50:07:21:9f:d0:a9:4d:33:be:88:90:dc:50:54:41:
d1:db:77:c8:10:45:60:dd:78:3e:1b:12:39:e3:c4:
2f:f1:2d:55:68:c9:cb:6a:24:db:45:d8:bc:33:c8:
f4:03:84:ab:e9:a8:02:27:09:b4:0f:6e:26:dd:f1:
f8:5e:43:2f:d3:fa:a2:7c:5f:0f:ec:d2:39:2f:1a:
8e:95:b7:87:8d:b5:1a:85:ed:ae:45:1b:14:01:76:
8e:1f:84:05:d4:16:54:2c:f7:9a:28:6e:61:c6:6a:
8a:de:23:db:05:fd:ff:d7:7f:ea:cb:38:f6:bc:27:
18:90:78:ed:9b:3f:ff:96:2b:5f:ec:ad:c5:3e:93:
e1:81:e3:97:22:dd:32:8c:71:ce:98:9f:87:b0:b0:
66:c3:ef:dc:fe:af:a8:38:68:58:7d:aa:90:ee:a2:
7e:42:b8:98:e0:3c:80:c7:38:ab:a3:a3:c0:d4:fb:
75:4c:8f:84:20:9b:15:11:41:06:66:29:73:73:74:
d3:f1:ff:04:b1:3b:30:35:79:18:ff:92:3c:53:5f:
c4:9f:82:f3:bf:8f:ec:29:1e:c5:44:78:79:c8:d7:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:85:0B:10:A5:F3:E8:2E:9E:F7:64:81:B6:6F:D2:C2:E1:D2:94
X509v3 Authority Key Identifier:
keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:43:81:82:db:59:28:6f:a8:42:3a:d2:a4:5a:72:58:a7:96:
2c:e8:e1:b8:77:f0:65:43:a2:bf:46:fe:99:ec:f9:b2:aa:ad:
e6:ee:b9:7f:b8:19:dc:ab:94:d8:ec:b6:d6:e8:59:d6:1a:36:
17:1d:2d:b6:17:e0:81:a1:07:e1:fd:bf:e1:2d:81:bf:7b:a4:
de:cd:03:37:44:73:46:ee:f5:97:80:45:8a:d3:d6:37:3e:73:
2c:6d:bc:d1:fc:6f:ca:10:76:65:e5:26:cf:da:2d:ce:a2:2d:
bf:5d:68:16:7c:63:b3:0a:ce:88:9c:86:a7:c3:42:e0:35:a6:
84:cf:a9:0c:3f:e5:f1:dc:30:e1:d0:1c:ec:ae:aa:1d:1e:1b:
5f:11:41:88:06:5f:3f:2a:e5:2a:47:1c:24:dd:17:cb:df:77:
d6:48:56:0c:97:0a:ab:7b:7d:e5:9d:c9:ca:d5:b8:d3:80:17:
8f:16:89:19:f6:82:0a:40:e7:87:4a:df:3e:28:4b:a6:b6:25:
23:7a:86:ae:c6:4d:98:33:30:2e:d9:45:56:83:b8:d2:08:b0:
a1:06:d9:d1:a6:0e:73:48:b9:ee:66:e9:a5:2f:6f:17:24:ed:
e1:f2:5b:0a:97:29:78:08:db:63:31:57:5f:94:bf:c2:0b:d2:
e8:f2:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:07:50 2026 by rpki-client