
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
File: hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json)
Hash identifier: dubUbj/jP6pYOtVpr1UFF1QcfMSLZcJM6oh+3KYl7SQ=
Subject key identifier: F4:44:F5:DF:FD:F5:33:44:A4:D1:9B:72:9C:EA:8B:7D:50:F2:0E:FA
Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
Certificate issuer: /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Certificate serial: 02F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
Manifest number: 02EA
Signing time: Tue 29 Sep 2026 01:22:19 +0000
Manifest this update: Tue 29 Sep 2026 01:22:18 +0000
Manifest next update: Tue 06 Oct 2026 01:22:18 +0000
Files and hashes: 1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: 08jTRIFTB7vJSyKNpWJWTH/kJYFSQzJTZirL+LIZCkw=)
2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: 7p4rLHYnygUc3vxsznjWwl4rW0fbM1D6EfxyvZyU7Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 01:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Validity
Not Before: Sep 29 01:22:18 2026 GMT
Not After : Oct 6 01:22:18 2026 GMT
Subject: CN=6abb12cb-0fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:b8:07:30:da:1a:e3:7e:4c:11:10:89:95:
0e:c2:f9:be:a0:c9:53:2a:90:b6:14:e4:f6:65:d2:
b6:7c:3a:fc:47:d3:e9:95:74:7c:02:f1:f8:d6:c5:
38:dc:76:72:bf:bb:b2:09:3c:a2:59:5a:7f:e8:32:
ca:a7:f7:43:4a:2d:50:a1:55:22:47:7a:8c:4b:67:
ba:88:44:df:b6:e9:35:ca:1e:2d:1b:4c:58:d9:40:
62:8f:7b:81:3a:a7:0b:c4:20:77:00:92:0c:ed:47:
ba:64:bd:3b:18:d1:b0:f7:ac:5e:ac:6e:da:53:af:
03:cd:82:19:f8:73:f6:2d:85:8b:88:21:86:5d:85:
26:e0:6a:fa:b3:1e:f3:91:47:e9:a2:7d:d0:8c:6e:
cd:90:59:6c:e1:23:5c:95:2a:4c:80:a2:5b:e5:65:
eb:0c:e4:b0:30:87:81:63:bb:f4:34:f6:2f:55:d1:
5a:b3:12:c7:e9:28:f9:9e:c9:1f:1a:1a:b0:90:fc:
d2:1d:09:aa:80:e4:a6:61:2f:98:c5:31:55:de:dd:
fd:41:d7:25:cd:84:3c:3f:4e:be:01:79:eb:8d:2f:
50:c5:e3:eb:35:49:86:dc:5d:a8:52:ec:94:ff:5b:
c7:37:7a:a9:e5:62:7c:7e:1c:5f:62:ec:47:88:c4:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:F5:DF:FD:F5:33:44:A4:D1:9B:72:9C:EA:8B:7D:50:F2:0E:FA
X509v3 Authority Key Identifier:
keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:66:e3:be:11:6b:cf:7b:3e:5c:6d:23:1b:ac:6c:5b:16:c8:
06:ed:3a:3b:62:aa:f3:a3:e3:d5:66:dc:c4:9a:12:62:cc:df:
93:a2:46:e4:6b:a4:a2:93:e7:47:de:16:34:51:8d:e0:83:be:
f5:cd:35:fd:83:37:26:00:16:05:3b:6f:1f:40:25:06:b4:46:
a9:7d:33:94:63:70:6b:7c:b4:8d:7a:3e:77:99:e9:10:6f:e6:
c4:f6:b8:71:ec:3c:c8:38:b6:26:b4:64:df:80:6a:41:77:03:
45:84:f6:eb:92:ef:df:6a:77:56:94:2e:6d:b2:ce:fd:ee:cc:
71:18:01:99:cf:6a:d2:96:37:ac:ff:17:d4:77:61:bd:b4:ee:
28:92:2d:02:79:dc:cc:3a:0f:b9:86:c9:37:ab:de:d1:7e:66:
f2:ad:f2:76:d6:e9:54:4f:d8:43:7d:ee:dd:1d:bf:10:7d:e9:
cd:38:f4:b3:93:10:52:cb:0b:c5:74:05:3d:8f:af:ff:9d:99:
c5:1a:70:a3:ea:32:59:cd:bc:ad:2e:d7:dc:4c:9e:37:55:48:
68:8a:c6:a2:4c:7f:35:a5:67:c7:84:b2:98:c7:05:b8:c8:4d:
d8:45:81:92:2a:a7:23:97:e0:f2:5c:d5:7c:c7:8f:11:bf:ad:
20:a7:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:06:10 2026 by rpki-client