
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
File: mgI7gKvPTmeX04jA3oFgoW6xXf4.mft (raw, json)
Hash identifier: lSCStuukZSKiYUEUMTjUKmMIlWrhgbEAY34vtvBu6mo=
Subject key identifier: BD:17:E8:79:AD:A4:87:FA:F3:34:7B:EE:6C:40:24:31:9B:BB:8C:55
Authority key identifier: 9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE
Certificate issuer: /CN=A91EF6EF/serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
Manifest number: EE
Signing time: Fri 25 Sep 2026 06:31:13 +0000
Manifest this update: Fri 25 Sep 2026 06:31:13 +0000
Manifest next update: Fri 02 Oct 2026 06:31:13 +0000
Files and hashes: 1: mgI7gKvPTmeX04jA3oFgoW6xXf4.crl (hash: 81lGVkweHWV8H+EawfFHyZM1NIr6EKMFEQaeGvSL9RA=)
2: 3C15F928579311F0B296C030C4F9AE02.roa (hash: PcxApA6oFAaKQrQP/VJxBmFi70SG6p/mmGbv5cjRlVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl
rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF6EF, serialNumber=9A023B80ABCF4E6797D388C0DE8160A16EB15DFE
Validity
Not Before: Sep 25 06:31:13 2026 GMT
Not After : Oct 2 06:31:13 2026 GMT
Subject: CN=6ab61531-63ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:b5:43:b8:02:fb:51:a0:66:0b:da:1c:37:
64:26:87:95:ba:f7:74:de:58:8e:bb:73:b0:44:5d:
99:46:6d:aa:59:0e:e3:8b:7d:3f:2d:1d:45:0d:9d:
34:2f:38:cd:37:f4:33:10:88:82:96:00:3d:50:23:
a9:44:e9:1e:31:b6:4a:0f:cc:fa:6f:8f:f8:a5:6f:
28:25:41:ef:04:0e:2c:d5:5e:d9:a3:a7:94:71:94:
6b:c7:54:80:82:64:3c:d6:d8:06:d7:aa:70:d2:a6:
82:97:6c:3e:68:18:85:02:a7:dc:c7:8d:b1:90:c4:
80:d0:0b:f9:32:29:ef:0e:6e:7b:b3:bf:e1:e5:40:
75:99:e8:16:2a:62:c5:58:c4:28:3f:2f:41:61:63:
4c:bb:42:26:27:b7:fa:61:74:4a:18:2e:35:7b:a6:
78:f7:a3:77:ef:1b:f9:e5:b4:93:a7:83:7a:50:85:
20:60:72:33:8d:bb:23:d0:a2:97:fa:4d:6c:e3:b0:
dd:46:ee:6c:9c:f0:4f:cb:07:04:34:90:17:c7:90:
e3:34:e1:38:a5:01:ee:5d:ea:6e:23:bb:ff:ab:d3:
f7:ab:14:35:0d:72:9c:a1:fa:d6:47:3c:c9:80:cb:
f2:e1:d0:8d:32:ae:63:61:44:96:51:0b:f4:7e:d5:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:17:E8:79:AD:A4:87:FA:F3:34:7B:EE:6C:40:24:31:9B:BB:8C:55
X509v3 Authority Key Identifier:
keyid:9A:02:3B:80:AB:CF:4E:67:97:D3:88:C0:DE:81:60:A1:6E:B1:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgI7gKvPTmeX04jA3oFgoW6xXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF6EF/ACBF6F2A574211F0BEDB455CC4F9AE02/mgI7gKvPTmeX04jA3oFgoW6xXf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b2:4a:51:bf:b4:af:7e:c4:2b:32:23:63:80:c5:2a:27:c4:
b3:cf:a5:88:df:0b:c7:e8:5a:46:31:5b:18:c6:f6:27:22:cf:
0b:d3:56:94:79:6e:c3:90:f5:93:9f:94:13:bd:8c:70:3f:53:
e7:36:50:e0:a8:32:34:42:8e:d7:fb:0c:28:f3:25:45:65:b1:
93:52:18:62:78:a2:99:e4:70:d8:fa:60:21:8e:45:3a:05:6d:
72:59:74:ee:7c:72:03:00:86:f0:d3:51:e2:db:00:e1:ca:7e:
e3:33:d6:df:05:e7:05:1c:e0:79:8d:03:52:65:6b:9e:f0:81:
ca:f4:25:84:e3:69:34:98:14:71:7a:f9:41:6c:9e:ce:a5:48:
4b:3a:d8:1b:ad:ba:cb:bd:87:66:0b:d5:32:b2:37:5c:49:51:
45:e9:ba:44:6f:d5:04:7e:b3:83:12:4e:84:d8:6c:2a:ce:92:
18:ca:82:49:59:5b:14:56:1f:bc:22:d7:93:ca:ae:13:10:d7:
51:1a:c9:5a:1a:a0:bb:91:1c:6f:ba:40:87:ef:62:b9:5e:66:
53:1e:0c:2d:0c:8b:8d:60:64:3c:2c:ad:6a:2c:c0:28:04:63:
5c:ba:a8:30:9b:d5:dd:71:d4:f6:57:81:c7:52:48:1c:cb:c8:
b5:d7:8e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:52:12 2026 by rpki-client