
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
File: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json)
Hash identifier: hpHDJmzQxkfB7a66aR6T9XvmCSbSAFZahqTr4uAGeLE=
Subject key identifier: 21:ED:32:E5:5D:80:1C:36:3F:B9:2E:90:77:2F:31:F4:6A:C9:E9:45
Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
Certificate issuer: /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
Manifest number: 0238
Signing time: Fri 09 Oct 2026 03:09:44 +0000
Manifest this update: Fri 09 Oct 2026 03:09:44 +0000
Manifest next update: Fri 16 Oct 2026 03:09:44 +0000
Files and hashes: 1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: l5YLPc0n7e9RoqJCyLQR++eBnroJX+f10dP9esp0N0k=)
2: E50B556868D011EE8509F75CC4F9AE02.roa (hash: 9UOFLQfr6yh7l1cCv57Sa5R8BYW6D2LP6rLPOFGHb8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 03:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC24F, serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Validity
Not Before: Oct 9 03:09:44 2026 GMT
Not After : Oct 16 03:09:44 2026 GMT
Subject: CN=6ac85af8-f6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:81:1e:fe:d0:e2:b7:43:f3:99:fb:22:29:
61:a8:a5:94:47:ec:09:dc:eb:4c:27:13:b3:c1:93:
79:8c:fb:97:9b:6b:c9:76:6e:08:35:12:26:e3:1f:
46:55:ff:e0:1c:88:5d:45:09:de:c2:1a:a3:a3:11:
77:29:93:51:69:a6:cd:a6:e0:ae:7b:31:8d:63:1f:
c9:b2:94:d5:a2:2d:c0:45:cf:b1:83:ac:73:73:cb:
67:15:b7:1d:77:24:aa:c0:bf:1d:a3:99:1c:36:f2:
7e:0b:bb:67:67:55:e2:77:f3:a3:ed:72:ee:33:6a:
96:09:c6:17:33:be:db:40:d5:30:db:d1:7e:11:79:
75:6d:0f:c3:ed:5f:59:de:89:55:e9:fc:5a:d6:6b:
6c:4f:2a:12:c4:cd:4b:b5:2b:b4:f2:1c:15:ae:cf:
50:27:25:f2:f0:ab:92:84:18:9d:50:a1:10:eb:5f:
5e:f2:4e:ec:57:51:fe:14:c3:1c:a1:03:67:78:63:
d6:dd:9f:32:60:31:a8:8e:65:ad:13:b8:98:1c:66:
76:03:7b:49:0a:94:d1:33:37:49:eb:40:3f:74:e1:
5b:47:3d:0d:b2:e0:76:45:42:01:fd:28:e5:53:d6:
42:e3:be:f2:89:5c:6f:9c:87:ce:7c:a5:0b:44:dd:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:ED:32:E5:5D:80:1C:36:3F:B9:2E:90:77:2F:31:F4:6A:C9:E9:45
X509v3 Authority Key Identifier:
keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:92:c1:73:78:0b:e8:db:d4:86:14:df:e4:de:58:8b:b6:07:
bb:1e:7a:10:3e:59:a8:4e:f3:ae:f7:8b:9b:d6:f2:5e:b2:c9:
73:54:34:1f:fe:be:41:99:d3:19:ba:17:8b:51:45:1a:09:5e:
43:cd:50:f1:fa:05:26:b0:c6:f3:b1:3b:72:11:e6:ea:e6:1e:
8b:a9:13:58:f1:00:a9:b6:e7:34:41:b2:1b:01:9b:c2:49:c4:
46:51:f3:8b:09:0c:19:d2:c1:bc:bf:a0:19:5e:b5:20:1c:fd:
1a:f2:e0:e7:ed:77:69:3a:8d:59:c3:03:e0:44:c8:26:66:f6:
d6:c7:5b:c3:77:e7:c6:d2:89:53:81:2c:84:cc:62:92:bf:38:
b9:fb:a8:ce:c9:85:8e:30:32:88:4c:66:ca:de:ea:d8:8b:99:
2c:02:3d:fd:51:e4:13:7a:e6:bd:48:c7:a2:a0:e6:05:c9:29:
1e:a8:90:56:ad:3b:e9:cd:86:00:b5:c3:e3:5e:da:71:9e:a1:
00:3e:83:37:05:f1:21:bf:a1:3f:02:b3:10:13:2b:cf:f5:24:
b8:8b:0f:2b:af:27:57:93:90:b1:59:c4:b5:fe:df:cd:d2:31:
7f:98:b9:42:63:64:e3:af:10:2f:d1:4e:5e:fd:57:d9:68:87:
a7:f6:48:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:35:00 2026 by rpki-client