
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json)
Hash identifier: d92rXUDUAdV8vdGg03vfQ1HOjTSUt8HGdi3VeFbsuFU=
Subject key identifier: A8:1E:38:CE:76:4E:31:4F:91:46:5C:17:72:BB:3D:8D:61:36:57:F4
Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56
Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
Manifest number: A8
Signing time: Fri 25 Sep 2026 07:19:35 +0000
Manifest this update: Fri 25 Sep 2026 07:19:35 +0000
Manifest next update: Fri 02 Oct 2026 07:19:35 +0000
Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: csdVz+ryGpAu8sJT9HqjIySqh85cWoNnHF8Fvelo3Zc=)
2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: RzqxKvmQcOshBo/Ug1Mj842tyGjNfSYs0TkOvcUwxSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl
rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
Validity
Not Before: Sep 25 07:19:35 2026 GMT
Not After : Oct 2 07:19:35 2026 GMT
Subject: CN=6ab62087-79b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:74:d8:50:6d:8b:f9:e8:e4:ce:6f:18:5a:
0f:68:d7:bb:28:42:04:65:f6:4e:ee:49:7e:bf:a2:
7d:2c:da:cd:86:d8:08:31:70:65:da:50:cb:b2:cb:
c5:a3:ec:ff:9b:a7:ec:73:e6:bd:fa:22:91:f2:19:
56:b2:d0:a9:25:fd:45:b8:f1:4e:b9:fa:08:09:6e:
e4:5e:bd:26:fa:2b:0b:47:3e:1f:d7:bf:62:a1:f8:
d7:aa:15:bb:6a:3d:13:ef:66:0c:c8:64:7d:3c:b0:
3a:e1:6c:94:20:1f:d1:26:86:67:9c:02:aa:83:c9:
ae:32:ea:40:72:c1:97:b1:d9:fc:c1:dd:a8:4b:a6:
35:1c:fe:3d:11:bf:c0:d5:1b:68:3b:2d:f4:0e:b5:
13:bd:ce:61:62:f0:33:9e:03:06:4a:af:ca:e0:fd:
08:cd:dd:b1:3c:a7:25:c3:c5:ff:2b:58:bb:05:49:
b3:a2:b5:df:21:79:c1:66:ee:72:02:3d:e0:f3:23:
a2:fa:a2:d8:eb:f9:40:aa:95:f1:1c:17:64:0e:46:
c5:18:a6:4d:09:d3:7a:ad:27:e8:13:48:a4:33:82:
1e:34:ad:97:71:04:85:03:83:6a:83:70:72:11:28:
ba:0d:22:c0:43:b6:7f:f7:8e:28:3d:b0:bb:e1:d3:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1E:38:CE:76:4E:31:4F:91:46:5C:17:72:BB:3D:8D:61:36:57:F4
X509v3 Authority Key Identifier:
keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:df:50:f1:29:aa:54:45:e0:33:95:1a:0e:0f:f3:79:7b:20:
00:38:83:bf:e0:25:8e:a4:e5:31:15:66:2a:7d:4f:4a:fd:d5:
ca:ce:2c:0e:26:7f:8d:6c:04:64:83:88:d6:cc:88:5b:44:79:
31:12:7e:a2:88:a3:ee:61:02:0f:bd:c4:06:9c:b2:9c:e7:16:
ec:41:dc:ea:f8:c6:b4:b8:61:2c:83:1b:2f:52:8c:b7:79:12:
2d:f0:a5:fb:e5:e8:ea:6d:2c:33:f1:9a:96:6b:4d:5b:b0:27:
a4:58:2c:26:6b:6d:7f:ec:d4:b0:ba:04:b4:82:6d:5e:7e:dc:
08:e6:90:e8:f0:3c:5b:d3:53:ec:61:e1:1a:a4:07:79:74:b3:
78:18:f8:34:7e:43:aa:37:81:e1:f9:24:93:a6:47:69:cc:af:
3c:a8:29:23:de:e9:ab:a6:6e:d6:32:1a:2d:9f:ca:87:18:57:
d1:90:1b:ce:0a:f4:4d:ca:46:77:d6:51:d9:9d:15:99:80:9c:
e1:5d:47:9c:41:6f:30:54:a2:7e:4b:b4:a5:c2:f0:94:d1:a0:
ea:20:0b:ec:1b:f0:7c:81:f8:ae:44:da:d8:10:93:55:84:f6:
21:25:86:31:c0:ed:b3:c5:3b:e9:2c:9e:15:9a:96:ec:9d:70:
1b:e1:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:57:44 2026 by rpki-client