
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
File: -94EjDgE9v13dFfXTlx8bq-XMcc.mft (raw, json)
Hash identifier: y1Axj38G4xiq38BcEe7WvamcHpusmYlHCYerglomW6E=
Subject key identifier: EE:06:EF:16:87:BB:FC:5F:A1:93:E1:FA:BD:37:E6:41:FF:79:89:4F
Authority key identifier: FB:DE:04:8C:38:04:F6:FD:77:74:57:D7:4E:5C:7C:6E:AF:97:31:C7
Certificate issuer: /CN=A91F7113/serialNumber=FBDE048C3804F6FD777457D74E5C7C6EAF9731C7
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
Manifest number: 33
Signing time: Wed 23 Sep 2026 08:24:14 +0000
Manifest this update: Wed 23 Sep 2026 08:24:13 +0000
Manifest next update: Wed 30 Sep 2026 08:24:13 +0000
Files and hashes: 1: -94EjDgE9v13dFfXTlx8bq-XMcc.crl (hash: 0SUbvVNwOgq90UrAKREkMVag/Kjr1TH0JotWYAlhyFY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.crl
rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7113, serialNumber=FBDE048C3804F6FD777457D74E5C7C6EAF9731C7
Validity
Not Before: Sep 23 08:24:13 2026 GMT
Not After : Sep 30 08:24:13 2026 GMT
Subject: CN=6ab38cae-0730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:bc:0d:37:64:86:29:d8:d3:68:eb:99:3c:
1d:d3:32:9b:b2:24:49:f8:3b:af:6b:0d:8c:2d:b8:
e5:2b:90:b6:69:52:b8:57:c6:d2:f2:bf:cf:dc:fc:
86:8b:77:67:e9:c5:32:2f:76:67:69:87:fd:ec:67:
b0:ac:41:37:94:c8:dd:68:1f:ae:6f:18:ae:a0:94:
fa:94:be:b2:00:05:e7:73:14:f3:f6:8b:66:4c:81:
0f:e0:86:be:2b:23:bd:64:4b:0a:cf:c6:ef:6d:a1:
d3:c2:0c:77:83:a0:7e:f3:bd:33:cd:27:fb:63:e1:
e6:e7:1a:c9:14:cf:82:f2:04:69:87:4e:8d:e5:0f:
f6:6f:f8:ed:3b:ad:e3:d0:55:9f:6e:06:0b:d9:69:
05:23:c7:3f:c2:5d:d2:d5:f9:cc:25:ac:76:36:58:
13:91:5d:d2:93:dd:39:b9:66:d4:0b:de:e6:91:bd:
8c:a1:9f:57:fc:85:ce:7d:e2:2f:93:65:8b:1a:74:
a5:a8:e6:7c:1a:e9:b7:f1:8d:ae:1c:75:9f:a5:3f:
78:c2:85:ff:55:99:49:df:8a:ea:1e:cc:f8:a2:be:
d1:fe:69:e0:90:af:8f:8d:bd:de:48:59:75:a9:5a:
db:01:42:62:fa:87:b9:d6:54:8b:8e:26:ba:d3:69:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:06:EF:16:87:BB:FC:5F:A1:93:E1:FA:BD:37:E6:41:FF:79:89:4F
X509v3 Authority Key Identifier:
keyid:FB:DE:04:8C:38:04:F6:FD:77:74:57:D7:4E:5C:7C:6E:AF:97:31:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:93:a6:d1:e5:a9:6a:2b:06:23:a3:2c:08:46:9a:29:15:
60:43:d4:17:03:59:69:fe:8d:12:17:40:db:02:88:d3:9f:05:
79:2f:d9:41:27:bf:8c:68:78:1e:57:91:96:8d:18:fc:8a:ae:
f2:14:0f:f3:0f:c9:fa:97:c1:c5:06:e4:43:39:9d:6a:7e:b4:
69:a5:fb:ce:60:27:da:31:6c:6f:cf:1a:70:55:da:ac:e5:30:
4e:6c:55:6b:77:40:af:52:e1:4c:58:ef:56:69:cd:ae:96:c0:
09:48:69:2b:f1:92:ea:3a:64:00:c0:10:ea:da:cc:cd:97:f0:
74:7b:88:cc:d1:ba:42:3f:03:fd:3e:3c:78:b5:d7:46:32:68:
c4:b8:26:24:1a:91:84:e0:20:fa:e4:a9:dc:cb:c8:3c:01:ca:
6c:3b:c0:61:f0:00:e2:65:87:26:cb:8e:f7:0f:8f:b3:f2:75:
c9:3b:92:ab:e1:72:ef:a0:63:68:79:61:53:27:11:63:46:13:
b8:f6:e0:ec:ab:72:c2:95:8f:87:dc:68:e7:ae:1e:10:a6:6b:
a6:51:a7:0e:d6:06:4b:2e:ad:7b:c6:87:ab:3c:56:70:09:65:
69:5d:8c:25:dd:cc:ca:43:64:76:d5:f1:30:61:ec:4d:08:75:
83:ed:5b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:08 2026 by rpki-client