
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
File: rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json)
Hash identifier: RvoRrg2Ye7OPf4HA3c7b/A9f7JYTwb3SMvmR4x0gMM0=
Subject key identifier: 60:28:EE:AC:1D:21:4B:75:9D:F3:E1:B8:A3:CD:52:DD:1B:5B:6B:61
Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Certificate serial: 0A81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
Manifest number: 0A6B
Signing time: Mon 28 Sep 2026 19:46:52 +0000
Manifest this update: Mon 28 Sep 2026 19:46:52 +0000
Manifest next update: Mon 05 Oct 2026 19:46:52 +0000
Files and hashes: 1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: i9UT8zrpq6OnvYN++WWkcNqxz7ALCiHr5ISNfLfd3wM=)
2: 7AEEA290829E11F0975FC440C4F9AE02.roa (hash: NJ63YJDh2rXhGyC41ze8yWJyNkK6DiJWZj8EZ4mClWY=)
3: E7F141609E9911EBB4117632C4F9AE02.roa (hash: BWMRKEzqCdvPb4VJWbmdWJfwpPUSHKLOetVFGH3P10s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 19:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2689 (0xa81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Validity
Not Before: Sep 28 19:46:52 2026 GMT
Not After : Oct 5 19:46:52 2026 GMT
Subject: CN=6abac42c-b00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:a6:14:3f:eb:1f:c7:ac:e0:38:bb:47:51:
cd:c2:d0:f7:9d:91:b6:09:72:93:5e:00:ae:07:c6:
5e:12:3e:12:e5:57:a7:b2:55:b0:71:0f:56:4f:dd:
ab:6b:82:17:94:38:e0:0f:e1:38:89:40:86:64:e0:
8c:d6:4d:8d:07:b5:6b:e0:a0:d1:ff:6a:55:0a:2f:
3e:fc:69:5b:49:e5:29:b6:d6:6b:ea:50:3a:ae:6b:
09:43:70:4a:be:b7:25:4c:d1:25:75:42:8b:ea:3e:
bb:8d:46:bd:89:17:4b:70:17:6c:7c:29:72:81:89:
0c:8d:bc:6d:f6:bf:42:49:a4:a7:cb:a5:73:07:7e:
60:22:67:58:2f:f1:9a:5b:3d:00:8b:24:8f:22:d3:
07:3a:7e:e8:7c:5e:dd:3a:d7:e7:b4:74:5c:26:26:
24:bd:32:ca:6f:f8:64:41:cd:85:6d:3b:0e:56:17:
d6:9b:2e:b0:e1:7a:eb:d0:84:fd:76:57:d6:2a:66:
2b:ee:93:86:0a:1c:b3:49:45:e5:9d:ce:4c:4b:de:
77:f7:84:b6:1b:0e:27:bf:14:fd:a1:04:89:1d:fa:
2e:b8:84:35:93:1f:13:13:d4:8c:a3:c9:84:7f:f2:
eb:e7:fb:89:ff:11:4b:e3:12:cb:04:8f:ed:05:31:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:28:EE:AC:1D:21:4B:75:9D:F3:E1:B8:A3:CD:52:DD:1B:5B:6B:61
X509v3 Authority Key Identifier:
keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a2:29:ae:54:44:4a:df:65:7f:f2:18:bb:40:80:99:61:04:
d8:8b:73:bd:f4:06:05:78:69:08:c6:18:59:bf:37:49:d2:be:
13:8f:65:7f:5e:2b:85:af:ba:79:5c:fa:e9:95:37:6e:57:41:
d8:fb:b1:26:01:17:10:be:dd:50:20:2c:3b:a6:9d:14:0c:24:
ae:06:a0:35:78:37:5f:b8:a8:4b:50:8f:e8:05:08:aa:fa:15:
1d:83:00:34:84:4f:ae:33:68:67:5b:74:28:dd:0d:bd:62:bc:
04:bb:30:de:cb:d8:06:a4:c9:88:7f:3a:23:a6:23:a3:9d:5f:
04:ec:cc:be:65:e7:0c:e7:38:9b:cb:af:f1:72:81:54:af:22:
0d:b5:27:19:6b:ec:b6:d2:76:9b:6e:38:78:d3:a2:51:50:6c:
7c:72:f8:3b:aa:2f:d9:7c:3b:1d:60:e1:89:fc:29:e9:88:9b:
8c:04:55:33:fc:e0:e0:2a:58:52:d6:5a:89:7d:a6:44:51:62:
53:d2:e1:1b:c7:c0:7f:7a:01:36:58:1e:80:3b:a1:7c:6c:74:
d0:4b:60:75:d8:c7:bf:88:c3:4c:de:3a:6b:14:c4:87:68:16:
44:c4:67:eb:03:81:b1:24:a6:a0:ac:ab:75:5a:ee:a6:ec:47:
b3:ad:d5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:07:53 2026 by rpki-client