
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft
File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json)
Hash identifier: llfeUku3TRB4GB6aMzvocadlc8/HSn2FvRTI4yMmM64=
Subject key identifier: 3A:1F:E3:8D:C6:E5:66:6D:16:94:62:F3:D2:43:81:0C:3E:7C:05:EC
Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43
Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343
Certificate serial: 35AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft
Manifest number: 4945
Signing time: Sat 26 Sep 2026 14:21:23 +0000
Manifest this update: Sat 26 Sep 2026 14:21:22 +0000
Manifest next update: Sat 03 Oct 2026 14:21:22 +0000
Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: dHDvQWQwpWUYxft7VRroEHdxM3ktdptrlqfozM6wiMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13740 (0x35ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343
Validity
Not Before: Sep 26 14:21:22 2026 GMT
Not After : Oct 3 14:21:22 2026 GMT
Subject: CN=6ab7d4e2-ae6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:d2:cb:6e:62:f9:99:46:8d:83:1c:1f:ec:
98:93:6f:55:2e:b8:35:f8:93:a9:2e:88:d3:d5:06:
b7:b3:cd:ee:e5:dc:c2:6c:ab:d3:4b:1b:a8:41:31:
33:cc:9f:9d:83:3f:a1:1d:8e:5e:02:cb:67:6a:cc:
bf:eb:56:98:1a:ad:94:fb:ac:9f:65:3b:da:6d:f7:
42:30:b3:55:74:1b:06:63:7b:60:d9:05:d7:07:b9:
8b:e5:52:f0:f5:27:24:10:5b:05:d4:ea:f9:d0:bd:
9a:f9:51:09:bd:c1:2e:36:61:db:82:08:b2:18:31:
c6:e5:16:de:b2:d0:65:3e:cd:67:41:c6:0c:dc:d8:
68:6a:1b:a7:9e:0f:80:04:f2:85:7f:58:6c:21:f9:
cf:fc:94:fc:ef:e3:43:a7:fe:65:64:0a:9b:aa:b9:
c1:bb:2f:2c:8f:87:74:01:97:5a:12:27:cd:07:62:
3c:d0:fa:4a:33:3c:76:d0:f5:d4:02:f3:16:8b:a9:
58:bc:c6:88:a6:1d:60:50:04:ba:20:b8:86:c1:9a:
41:4d:7e:66:ae:52:4b:39:28:91:cd:73:9b:d7:d2:
f4:f5:35:3d:36:8a:aa:68:f1:a9:51:14:28:6a:7e:
70:5b:a5:39:33:f1:53:0d:e8:cb:45:cb:d4:c5:c2:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:E3:8D:C6:E5:66:6D:16:94:62:F3:D2:43:81:0C:3E:7C:05:EC
X509v3 Authority Key Identifier:
keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b0:b2:ae:5e:b1:b3:a7:05:c4:5b:39:52:31:4c:3f:c9:8d:
23:0a:80:1e:84:4d:1d:3f:6d:76:e4:73:4c:72:65:d1:de:d7:
83:77:e3:e7:9a:cd:7d:8f:38:ea:b9:c3:b2:d9:87:41:f5:6e:
f3:d3:b5:a2:84:5a:3b:0b:a6:b7:7f:1f:c9:fb:44:41:61:06:
9d:a2:5f:d5:d0:d0:a8:ad:a6:b8:47:01:a5:19:5a:bf:34:c0:
5e:b6:2f:2c:36:25:df:4d:c2:3f:74:bc:8a:26:8a:ce:9f:67:
54:4d:28:3a:4c:38:78:e4:19:f9:3f:04:dd:1d:ed:23:9d:8f:
51:c7:ad:70:f7:72:71:41:f7:f7:7a:03:d4:90:d5:63:e8:cf:
d4:3a:58:79:f5:ea:c8:db:fd:e7:b9:bd:bc:76:d8:87:fd:bd:
ff:a2:33:d2:23:f4:32:f6:dd:5c:86:07:b7:39:d7:d9:ff:96:
42:45:f7:7c:c9:85:f7:37:66:40:e1:73:b7:ae:ca:fe:48:92:
36:7f:fc:74:bf:14:f1:9d:23:c9:4c:38:51:a4:69:1a:dd:80:
ef:3a:7b:1d:53:99:fd:08:b9:3b:15:b0:ac:2c:53:8d:e0:a3:
dd:26:a6:2b:8c:d9:d4:14:76:ab:7a:63:ad:86:f4:50:4c:91:
c6:9c:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:42:30 2026 by rpki-client