
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json)
Hash identifier: JGhF/x1YRx80vBxqgP7sdzHpz6Sk525fxgzMcZOrOhY=
Subject key identifier: B4:91:EB:1C:44:BB:65:9B:D6:E8:BF:43:BE:34:54:DE:4B:F6:56:BF
Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66
Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
Certificate serial: 2205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
Manifest number: 21F6
Signing time: Tue 22 Sep 2026 15:50:19 +0000
Manifest this update: Tue 22 Sep 2026 15:50:18 +0000
Manifest next update: Tue 29 Sep 2026 15:50:18 +0000
Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: jHsua/pbz8sxlx1npW6wuuHelPxnbIf9DhZBN5m0vLc=)
2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: h5Pjnbs6tYIgU2xEGeVFnaHiDWrTR38hutsH6p/eIKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl
rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8709 (0x2205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566
Validity
Not Before: Sep 22 15:50:18 2026 GMT
Not After : Sep 29 15:50:18 2026 GMT
Subject: CN=6ab2a3bb-d49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:55:2b:8b:93:51:c3:99:ce:ff:64:0d:b1:
1e:c9:df:ac:e5:b3:00:dd:81:82:f3:78:38:9c:52:
09:f8:55:b7:19:b0:74:a6:8c:d1:a8:b5:8f:6d:51:
3b:35:03:24:b2:9e:36:59:26:fc:2c:a4:66:0e:ea:
73:60:f5:bf:5e:63:f2:56:c2:c0:c3:51:b0:2c:01:
56:9a:62:74:b1:8e:fc:59:bc:4f:06:1d:fa:18:99:
4f:0e:08:74:4f:99:0c:27:ee:95:ec:22:1c:ee:db:
28:10:e6:fd:f1:00:b4:8a:f9:66:32:06:0e:df:d5:
dd:3a:20:0d:87:6a:d6:08:a5:7f:fa:75:8c:4c:64:
e8:de:5e:6a:35:88:8d:47:67:89:14:76:3d:be:8c:
a8:79:d3:2f:6e:6e:33:99:84:3d:00:19:93:47:36:
b7:9c:06:75:b9:5c:c4:23:8b:96:f4:ae:71:86:83:
0f:dc:2f:5c:d0:14:2b:9e:90:61:2f:a5:73:5c:49:
df:c3:5c:44:57:c6:31:51:3d:d3:d2:dc:21:f4:b5:
36:6f:af:05:8c:7e:aa:28:21:7d:59:e3:3e:6a:13:
eb:4a:1c:59:85:63:84:73:39:e7:62:e1:66:4a:e9:
1b:87:b0:82:20:d5:ef:da:f3:06:84:ab:78:c3:5c:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:EB:1C:44:BB:65:9B:D6:E8:BF:43:BE:34:54:DE:4B:F6:56:BF
X509v3 Authority Key Identifier:
keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:26:1d:8f:1a:ac:9c:14:43:3e:be:c7:9d:5f:eb:7c:eb:b2:
13:9d:87:cc:99:f8:ec:a7:65:cd:8d:bd:5e:19:2a:69:db:e2:
60:42:72:9c:4f:33:23:16:4d:50:7f:15:46:f8:0d:be:40:57:
b4:06:10:97:2c:2e:ec:7f:0a:d8:e8:67:ff:e4:aa:1b:22:91:
08:18:26:3b:1e:8f:53:40:a3:69:76:3f:2e:53:2d:21:15:6b:
2c:c1:e0:d6:46:07:79:29:8b:9a:97:46:87:28:12:6a:9e:2e:
c4:4c:bf:aa:4f:a3:48:9c:4f:40:54:d9:a1:1b:ea:bd:ba:b7:
62:22:91:16:e0:a9:54:40:dd:8b:03:a2:af:5d:30:57:a2:2f:
8b:77:1a:b8:83:61:94:ae:5d:3d:41:93:4c:e7:14:83:89:b1:
6f:d5:ee:18:0e:2c:c2:64:9b:de:f1:48:c8:04:02:b5:0e:72:
f0:1d:58:88:56:3e:cd:91:61:f1:96:61:34:1e:f1:14:f0:92:
9f:80:be:b3:82:df:90:50:b5:15:68:df:7b:57:1b:d2:41:8f:
aa:3c:80:cd:56:c7:b8:f2:7b:4e:1e:d2:d2:39:5a:12:ef:cc:
5e:87:69:08:88:03:d8:b3:c8:fe:48:bb:c7:f3:39:ae:97:c1:
cd:17:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:00:16 2026 by rpki-client