
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json)
Hash identifier: 2IPMHCyjBqLxa2pR9qEXBBqZWL/PKwCZRpvI51J0eFs=
Subject key identifier: 78:C8:76:89:A4:C5:1A:4E:6A:22:C6:12:C2:00:28:2B:4A:9A:78:C5
Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73
Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
Manifest number: 011B
Signing time: Sun 27 Sep 2026 06:24:49 +0000
Manifest this update: Sun 27 Sep 2026 06:24:49 +0000
Manifest next update: Sun 04 Oct 2026 06:24:49 +0000
Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: XzARnlhf9DEoUzbahfbYgZz0xD4s0VIp/D/QWDIqA6M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl
rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 06:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
Validity
Not Before: Sep 27 06:24:49 2026 GMT
Not After : Oct 4 06:24:49 2026 GMT
Subject: CN=6ab8b6b1-55eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7f:ec:8a:af:41:18:34:08:cc:c4:8d:15:ad:
43:e0:57:3c:ce:ef:67:e0:ab:06:27:3c:fd:96:6d:
32:12:77:1b:cb:fe:f7:11:39:75:91:f7:72:76:dc:
2f:2d:43:3b:a9:5a:7c:7f:89:77:0d:ef:6c:51:b0:
8d:23:16:6b:48:78:4c:33:b1:2b:b2:06:eb:f1:b7:
d7:81:95:26:70:e9:af:89:81:9b:f6:4b:40:9d:0a:
c3:5b:7e:06:64:90:83:c9:6d:8c:34:49:27:83:77:
63:1d:55:97:74:11:13:2b:11:1c:6c:ba:ca:4a:72:
d3:6f:36:ca:9d:60:ee:fe:13:6d:83:10:1d:24:6e:
85:cf:9f:72:21:c4:01:66:8d:eb:a6:6e:4f:0d:ed:
36:f5:35:34:09:b8:5d:c6:5a:02:b4:88:fd:c3:03:
48:b9:f2:c9:b8:36:3e:80:b5:c5:2c:7d:98:e8:22:
5e:4f:58:d2:10:29:9b:fe:98:02:73:f0:1a:2d:bd:
b0:56:49:be:db:1c:53:8f:79:c1:3b:1d:6b:7c:38:
94:7e:38:2b:77:f7:30:81:1f:aa:97:6c:ed:c2:2b:
46:43:e1:9d:91:52:a8:62:cb:99:48:87:93:80:e6:
3d:b2:25:d6:db:f1:e9:88:43:5f:93:a1:24:cf:24:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C8:76:89:A4:C5:1A:4E:6A:22:C6:12:C2:00:28:2B:4A:9A:78:C5
X509v3 Authority Key Identifier:
keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:79:6a:d4:90:cc:b8:f1:d1:91:e3:87:56:98:f0:62:f6:e8:
a2:b2:a1:3f:09:a9:53:64:d4:9c:1e:ec:2b:82:fc:3b:9c:6f:
79:30:06:b7:35:86:b9:34:09:ef:8f:37:48:c6:51:13:72:47:
c7:c0:a3:73:b0:72:97:d1:b1:f5:72:e2:6c:1f:a1:1f:4b:98:
15:70:0b:97:56:10:98:11:b1:36:10:08:bc:81:4c:42:83:ea:
d1:f1:53:10:7a:ca:c2:87:3c:1e:d6:dd:d4:f1:3b:1c:da:da:
71:44:ca:7a:de:c4:ca:75:0b:d0:e4:f4:a7:db:9c:2e:a6:65:
68:54:89:b0:99:61:a1:c2:4d:ec:c3:2c:53:b9:25:34:f0:5e:
0e:52:c7:8a:5b:7b:58:e6:ff:e3:c7:d3:36:03:f5:d3:64:0c:
fb:6b:61:1f:4d:69:94:f2:72:c5:e8:49:3e:c8:ec:13:f5:41:
5e:b4:63:f6:5d:fa:07:41:61:8c:1c:09:d6:0c:63:7e:e7:06:
fc:90:84:79:30:41:0b:4e:7d:80:df:da:15:67:31:e7:62:d2:
8d:3b:52:0d:94:76:41:53:9d:8f:c3:df:04:a1:36:7a:24:35:
6d:56:c0:01:e7:a4:c8:f7:82:da:34:f2:82:eb:8c:ee:5d:a3:
6a:db:80:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:30:09 2026 by rpki-client