
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json)
Hash identifier: s7uTF+XdR4L0TV8BWly9DXvxmJyjiqcDylYijWGmZLA=
Subject key identifier: 8E:0E:A6:EA:76:D2:65:11:B1:F1:BE:1E:6C:A1:8C:6F:96:96:E9:B3
Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Certificate serial: 02B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
Manifest number: 02AD
Signing time: Wed 23 Sep 2026 01:21:55 +0000
Manifest this update: Wed 23 Sep 2026 01:21:54 +0000
Manifest next update: Wed 30 Sep 2026 01:21:54 +0000
Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: fJ5i33X7bbdNOBUEzFGGB7lL21xpINfcK1dMyDQK90Q=)
2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 6qNNz/jU6Jc8rG9yGhVLuObMTM5ias6oQqU63sjwttY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Validity
Not Before: Sep 23 01:21:54 2026 GMT
Not After : Sep 30 01:21:54 2026 GMT
Subject: CN=6ab329b3-cd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:61:9d:95:ad:01:00:f5:d7:d9:93:d9:56:
af:8d:dc:0f:57:6c:a2:89:de:75:42:22:3d:b1:00:
35:95:22:9f:a3:c7:be:5a:39:14:25:d2:01:e2:6e:
bb:f9:e5:db:22:b8:68:ce:2a:20:45:ca:33:8f:7e:
86:15:4c:33:8f:aa:e6:37:a1:c3:9d:54:53:8a:be:
8e:64:fb:75:b4:d6:ae:0d:22:3a:91:e1:1b:ba:2e:
35:ad:9b:e5:46:1a:de:b4:24:df:0b:51:2f:5f:b8:
a6:6e:66:b2:ad:24:b9:30:71:e9:30:32:12:2b:6c:
bc:6e:c3:57:75:d0:aa:df:a1:82:37:5c:3d:5a:a1:
a2:2f:bc:7d:be:df:68:9b:33:22:38:47:5d:7a:34:
e4:a5:40:2a:0b:d3:68:bc:d1:e0:f6:c8:c6:48:d2:
51:d8:f5:ec:36:12:47:10:d2:f1:60:3c:3f:b1:c7:
2c:75:7f:b7:97:66:4c:6f:10:00:a6:2e:24:9b:67:
16:43:e1:8e:40:c8:0b:70:21:9f:84:1a:5d:a2:8c:
b9:d7:99:ae:54:a4:49:4b:fe:06:62:e9:76:44:38:
c1:8e:48:fe:1f:c3:41:4b:52:fd:58:bf:89:6f:5c:
a5:96:8a:4f:6f:d1:3c:e7:b5:11:18:19:6e:67:e4:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0E:A6:EA:76:D2:65:11:B1:F1:BE:1E:6C:A1:8C:6F:96:96:E9:B3
X509v3 Authority Key Identifier:
keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:95:30:26:42:57:b6:bf:87:fd:f0:6d:3f:27:b2:8a:f2:60:
4e:af:b3:4c:ff:17:af:b8:80:e0:31:3d:bf:6f:e6:95:f1:44:
59:08:7f:25:0d:17:b6:04:4f:89:22:2b:94:c9:62:eb:8c:46:
28:31:98:ab:12:07:3e:ae:70:9d:dd:c4:91:af:4a:c7:9c:35:
90:e9:fa:2a:9f:32:53:00:fb:03:e4:12:7d:36:55:59:ea:c5:
54:e2:04:89:4c:83:4f:2f:78:4b:c2:ab:fa:e2:6a:ef:93:bc:
b7:dc:7e:1c:35:77:54:5f:87:87:05:68:1b:6d:eb:7f:0a:b0:
4e:9e:b3:a3:e4:54:d7:30:0c:2f:a2:42:a1:22:f2:d2:92:91:
92:86:29:58:fd:97:22:5a:ab:86:f0:df:61:aa:23:9d:20:a6:
32:25:8f:df:74:9e:f0:24:38:53:39:c5:9c:1f:65:d0:f1:99:
2c:b9:53:ad:18:67:40:e3:74:99:a8:20:7b:a4:ea:6e:23:2a:
df:95:e0:51:a4:87:3d:5b:5f:e0:cc:40:c5:05:b0:c5:07:e5:
35:9d:07:30:e0:03:d9:75:70:68:d8:43:87:2d:d5:d3:70:fa:
f5:56:4b:fe:e7:84:ef:c1:b9:07:96:3b:ca:28:7a:c2:a3:aa:
83:2d:7e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:22:54 2026 by rpki-client