
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier: HfCYy4JRmtfXmAxz4ddLXvYsvTfLFCLN/LOlltKWPGU=
Subject key identifier: D1:E5:5A:F7:D8:02:AD:9E:4C:5C:EE:79:33:52:1D:00:0F:5D:76:A0
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number: 016C
Signing time: Fri 25 Sep 2026 05:00:42 +0000
Manifest this update: Fri 25 Sep 2026 05:00:41 +0000
Manifest next update: Fri 02 Oct 2026 05:00:41 +0000
Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: 1hQC0d4p320LrrP8/S1JPTC3NtQg1bxw3CgJ8oPs2sY=)
2: 496B943085B811F1904E05A160A30FBC.roa (hash: kzKLI8ZxIk66mC3lTcah6XxCKgGcbN+/Y9xbXXYxul4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Validity
Not Before: Sep 25 05:00:41 2026 GMT
Not After : Oct 2 05:00:41 2026 GMT
Subject: CN=6ab5fff9-9b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:f6:41:cf:ec:a8:6a:a1:50:2c:88:31:b3:
34:05:45:c6:db:97:2b:88:24:18:c1:85:0c:2d:a2:
31:c9:91:e6:ab:cf:d7:6a:7f:ae:77:20:c4:c9:8f:
4a:32:85:bc:1a:6b:09:82:e7:66:57:a5:b2:e6:e8:
25:5d:d3:f8:21:13:ac:dd:ed:c0:7d:5e:5e:7c:cd:
39:6e:4f:5e:ff:01:3f:f2:74:23:5c:7c:5e:d1:1d:
fc:cf:12:b6:fa:3a:4c:5f:0f:58:f7:9c:29:02:10:
f6:fa:cf:6b:03:a8:09:15:c9:ff:fa:ee:44:97:79:
f8:36:5e:c0:43:46:a0:83:91:5f:6a:c7:fb:09:1a:
91:54:2f:61:c5:67:d6:49:0c:72:46:4d:75:cc:1d:
00:ff:30:11:ba:96:e1:a2:fe:2d:7b:c7:6a:23:81:
55:44:ea:78:d8:7b:c7:d2:d3:58:72:a6:50:4b:f3:
03:51:05:1d:2e:c7:9b:24:eb:1e:5d:73:94:19:28:
08:e9:3c:7b:32:01:61:85:af:8e:93:34:79:8f:8b:
8a:49:dd:85:81:25:ca:88:1d:a8:a4:e6:90:f2:6e:
e2:68:06:bd:34:b8:39:e8:8b:f1:62:8e:61:fd:f4:
4f:1c:f2:d4:82:e2:16:a0:81:ee:71:bf:22:f5:85:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:5A:F7:D8:02:AD:9E:4C:5C:EE:79:33:52:1D:00:0F:5D:76:A0
X509v3 Authority Key Identifier:
keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c2:26:e4:a4:e6:69:77:e2:44:82:66:06:e2:41:9b:2e:60:
af:f9:59:4c:d0:6a:ad:d6:20:42:a2:2a:f4:dd:ec:c1:ec:0a:
31:b9:bc:63:80:cb:63:46:75:9e:c2:58:31:8a:af:77:b2:d1:
04:c7:69:51:d5:bd:d7:34:70:98:c6:6a:9d:e1:1a:62:a5:53:
24:88:4b:34:f5:f5:62:88:d9:ab:db:b1:cd:75:49:22:d2:67:
66:57:85:1d:53:27:12:58:9e:3b:58:2e:f1:e3:61:09:96:ab:
96:de:1d:27:2f:cc:d4:96:1f:41:de:9f:77:9b:c4:49:3c:f1:
16:b5:c1:f0:b5:e4:cb:d7:51:37:ef:85:28:94:65:5e:aa:17:
d6:56:e1:e0:e1:ac:e5:77:01:b1:c5:af:e9:e3:a0:a7:88:c3:
30:29:8c:22:84:4a:1a:b7:bf:75:b4:80:8e:cc:08:dc:3c:70:
c6:9d:30:20:34:a4:22:de:83:14:ab:69:c8:c8:17:42:a4:11:
5b:0c:ac:e3:13:81:19:31:15:f9:3a:71:d1:8d:a2:72:d2:71:
70:f9:9b:10:18:04:cc:c0:23:25:05:a6:eb:87:06:b2:4f:c9:
68:b6:99:1a:0e:63:93:c9:56:7a:8e:9b:82:ac:e1:77:3f:dd:
3d:69:2b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:58:30 2026 by rpki-client