
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json)
Hash identifier: O5mHeSrZnRJRXE5iVCFJw0mr9rq2kWTgD1EGqjVBTsk=
Subject key identifier: E3:7F:5E:CE:22:85:BE:6B:8C:FA:78:59:52:9D:6F:CC:3D:1C:8D:D0
Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2
Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
Manifest number: 0100
Signing time: Wed 23 Sep 2026 05:58:59 +0000
Manifest this update: Wed 23 Sep 2026 05:58:58 +0000
Manifest next update: Wed 30 Sep 2026 05:58:58 +0000
Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: H9Fc60coiOoP8HEejTmMafTAkXpUPyPjHiD5rBr0eYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl
rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2
Validity
Not Before: Sep 23 05:58:58 2026 GMT
Not After : Sep 30 05:58:58 2026 GMT
Subject: CN=6ab36aa3-7f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:b1:f9:6d:62:46:2c:56:1e:d9:08:1e:c4:
6f:d3:b3:db:9a:de:eb:2c:c4:f0:11:81:9f:df:ba:
9a:a2:35:b1:43:b1:cb:d2:fe:15:fc:51:55:c7:7b:
99:b4:d6:18:a9:aa:45:37:9f:90:bd:41:62:6f:25:
61:4a:93:d0:32:8c:cc:ce:62:7a:ca:45:68:8d:87:
38:4c:bc:79:3d:3e:ec:e7:a2:ae:e2:3c:6d:2d:37:
d2:c5:6b:3e:d0:52:06:2e:16:1e:3f:cf:76:5f:a7:
eb:a5:bc:b7:42:8c:80:aa:78:2c:c3:31:ff:b8:e2:
1d:ed:61:8a:5d:34:29:ea:25:33:1b:20:69:31:14:
81:98:53:4e:be:d1:45:8c:2e:8d:18:05:fe:42:8d:
a0:09:5e:79:54:74:12:d0:f5:b0:51:02:ec:fe:68:
60:f7:8d:7e:79:fe:3c:a3:68:f2:41:16:c6:16:6d:
c6:53:e5:8c:d7:9c:5a:05:da:67:fc:7b:02:e8:60:
69:1b:de:d4:76:69:0d:f1:2f:48:1c:f2:53:d1:f1:
fb:90:57:55:6c:65:f8:b2:92:fb:02:c8:e8:63:08:
af:60:77:eb:3c:91:e7:18:75:a7:b0:48:06:c2:69:
4f:b3:6e:a8:7b:90:98:42:ac:1f:42:72:51:1c:f1:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:5E:CE:22:85:BE:6B:8C:FA:78:59:52:9D:6F:CC:3D:1C:8D:D0
X509v3 Authority Key Identifier:
keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:9a:83:0f:b2:f1:52:29:b6:c5:d8:c0:d7:f6:a3:ed:c0:bc:
99:ce:18:db:59:1b:95:22:92:6c:9c:95:3d:4a:ba:10:71:87:
66:b5:80:13:87:b8:03:00:13:4d:86:58:8d:69:12:23:9c:9f:
8f:8a:1f:18:d6:c9:bb:20:fc:7a:16:93:78:e8:c5:65:23:7e:
b2:e8:d5:10:24:13:14:81:68:68:24:5b:c6:f0:de:c9:6f:1e:
d8:2d:aa:6b:9b:1d:e4:d6:1e:b2:7e:58:0b:34:50:87:ce:1b:
e7:2b:62:15:ef:61:1c:4f:d8:22:30:bd:73:8b:1b:06:17:92:
d7:fd:b7:a2:bf:0a:34:4c:b2:01:45:67:ab:49:be:a7:e6:74:
3a:03:d1:ba:1f:14:7f:96:cc:5c:73:02:88:21:22:32:43:76:
03:c5:bf:03:ef:02:fb:9f:61:24:61:88:d0:e6:14:39:c3:bf:
5e:bc:63:4b:1c:17:92:fd:b9:67:82:26:ff:d5:e0:fe:62:9a:
57:a7:c8:26:c2:ab:3a:0e:2a:94:02:37:f7:ae:15:c6:cb:1a:
d0:1b:80:85:5f:78:07:12:fd:91:4c:0a:c8:c1:8b:f0:11:65:
8d:23:99:26:9c:78:3c:42:94:e1:8e:1f:08:27:de:a4:10:49:
92:11:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:28:16 2026 by rpki-client