
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json)
Hash identifier: 0iQb/ffZrDxGILVZpCO6saCeA5TpDtSTCsWdvr3RiT0=
Subject key identifier: F4:54:F9:EB:83:1E:06:09:CA:D7:23:68:83:6B:0C:21:BD:30:39:EA
Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
Manifest number: 0104
Signing time: Fri 25 Sep 2026 06:12:15 +0000
Manifest this update: Fri 25 Sep 2026 06:12:15 +0000
Manifest next update: Fri 02 Oct 2026 06:12:15 +0000
Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: 6t8PIf360UKUr+wv86VbBU5qAeI2G8PXec6UB2OLJ6U=)
2: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: KPvqeYEjrP3rW7z9OSGAJVN9ZK2zCwOeNm8vtT/hE1E=)
3: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: GMRoxaiJwQd4I9blwc313RSuAiLyK99JqZt/L1LzUaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Validity
Not Before: Sep 25 06:12:15 2026 GMT
Not After : Oct 2 06:12:15 2026 GMT
Subject: CN=6ab610bf-2cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:cf:cc:bb:e1:aa:4e:ed:e6:8e:66:b1:89:
25:1f:f2:7c:aa:15:da:c3:2e:4e:de:0b:7d:0e:66:
1d:d9:59:34:23:f2:9b:84:86:3c:65:8e:d5:af:f1:
42:1d:da:5d:81:aa:10:bc:09:f7:42:4f:77:d6:ce:
f9:1d:03:67:81:d2:77:03:dc:ff:4d:c8:55:10:32:
3c:79:8e:46:90:9b:47:c7:c0:e9:0e:82:f0:d2:e8:
83:d5:be:7f:0e:5d:3e:22:ce:30:fe:be:42:bf:57:
a5:13:48:73:ab:52:d1:c1:4a:16:30:13:4f:0d:e9:
62:b4:dc:d8:7f:b5:0c:95:48:b0:99:db:4e:9e:19:
f7:ab:3b:07:c6:8e:96:e7:8f:74:c1:41:4a:75:ae:
36:e5:26:b3:65:a3:9c:a2:fa:6c:b4:43:55:2c:90:
d2:ca:a8:fc:69:e0:f7:bf:15:6c:56:69:ab:2a:79:
fc:e3:ff:1c:3c:ee:df:f5:58:36:17:ca:86:1d:06:
d2:9b:11:e9:f7:28:35:7a:08:ed:72:62:04:24:d5:
d0:0b:d0:2d:d0:dc:9d:dd:4e:b2:2f:e7:a9:b8:68:
14:b1:59:ea:7b:42:45:3a:15:b5:1c:17:13:32:a8:
90:74:e7:26:b8:67:53:e5:9c:b3:59:53:63:ed:29:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:F9:EB:83:1E:06:09:CA:D7:23:68:83:6B:0C:21:BD:30:39:EA
X509v3 Authority Key Identifier:
keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:25:74:ae:95:85:d5:01:d0:3c:1a:f2:96:66:49:61:62:c6:
b5:e5:e1:65:a0:fc:ea:1f:63:a4:a0:e2:77:75:d9:af:70:fd:
3c:c7:02:3c:0b:a7:15:9f:86:8c:43:3c:de:02:ac:d3:42:b1:
86:af:d4:6c:41:00:4c:2c:d6:df:2e:30:db:04:ef:07:37:3f:
71:23:c2:f8:f5:6d:94:4d:32:4f:20:14:fc:e1:98:6b:57:0e:
f3:0b:ff:dc:41:f2:a5:18:44:04:e9:b3:cb:76:f8:3d:db:03:
ab:a4:b2:cc:08:d0:0a:c7:b9:71:f7:3c:ae:d1:55:12:5b:21:
19:78:69:f9:7b:af:d9:eb:04:d4:87:da:3a:1b:92:cb:3c:8e:
37:b5:90:ea:f8:46:5f:f9:c8:25:01:3e:3d:b7:4e:4b:ed:78:
51:1a:93:9a:56:4f:cb:2c:f9:65:60:9e:7e:7a:52:0d:62:bc:
4b:3b:d4:2d:a8:bb:de:87:c7:a2:14:f9:03:c1:f3:e2:64:98:
98:86:74:fe:55:5f:50:8f:2e:b0:93:2f:c0:b8:cb:36:c6:20:
87:91:03:1f:a0:ad:ad:f2:fe:0f:29:a5:c4:6c:b2:db:09:f9:
70:f7:86:a1:46:cd:a2:17:13:3c:0e:41:3f:be:3b:cc:13:1f:
a0:f7:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:59:08 2026 by rpki-client