
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier: egKs9a3B5ZLcRapANxpFnu8XVokOaqz6r2BZrniTkQg=
Subject key identifier: EF:50:44:8D:69:87:60:EB:61:FD:7A:FF:C7:10:F6:10:BE:D0:77:38
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial: 122C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number: 1212
Signing time: Sat 26 Sep 2026 17:12:17 +0000
Manifest this update: Sat 26 Sep 2026 17:12:16 +0000
Manifest next update: Sat 03 Oct 2026 17:12:16 +0000
Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: Y2IYj9BoncOaH0f/6AGw6+pnoXAntPzNOanorNxO+S0=)
2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: dJ40ZvkvEtXP02NZp3lyJfj9qvrbjW3gvJFMNBqnO1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4652 (0x122c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Validity
Not Before: Sep 26 17:12:16 2026 GMT
Not After : Oct 3 17:12:16 2026 GMT
Subject: CN=6ab7fcf1-f224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:18:68:ed:6f:51:ce:4d:fe:a6:89:e1:df:
a6:d6:84:7f:b1:90:7d:82:99:9a:46:37:64:df:de:
81:d3:5b:97:ce:d5:08:ef:86:f4:5c:81:49:75:8d:
d6:a9:06:d2:4d:c0:a5:62:30:f0:f4:68:91:58:8a:
65:06:9d:a6:8e:c9:00:4a:13:18:30:32:1f:58:08:
30:83:d6:10:69:9f:41:a4:d2:35:12:99:cf:39:e9:
38:e1:ac:76:e7:fa:4c:1a:c4:fd:61:36:29:90:0e:
0e:d0:d1:d3:09:d4:7c:21:69:03:98:50:44:07:e0:
59:20:ee:e4:5e:75:37:24:2c:ea:f3:6a:ca:6e:a3:
30:34:b2:26:c1:e6:b1:36:94:94:e5:28:54:5c:41:
12:ed:33:39:27:53:a2:77:96:4f:8f:75:82:5e:71:
5e:ae:9b:58:ed:50:6c:2c:e5:56:da:a6:c0:21:ae:
16:11:e1:35:4f:58:2f:2b:24:c8:c2:ad:99:8e:d5:
bc:2d:a3:a5:e2:88:b4:88:9a:62:80:23:34:33:f5:
95:95:df:fe:18:02:2c:8b:ac:c5:fc:ef:37:38:8f:
27:a6:58:f8:1f:d0:34:d3:f5:91:e0:8b:de:65:f9:
b9:27:6f:65:0c:d8:2d:5d:0f:cf:e8:08:bc:25:44:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:44:8D:69:87:60:EB:61:FD:7A:FF:C7:10:F6:10:BE:D0:77:38
X509v3 Authority Key Identifier:
keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:3f:5d:1f:50:94:e4:95:b6:40:c5:36:de:02:2e:44:a3:c4:
c6:a5:b2:2c:ac:29:53:2b:45:fd:38:38:cd:35:a8:74:5d:1d:
5c:8f:1a:fb:90:ad:19:6c:32:d2:2a:39:08:cb:03:c7:7b:f3:
54:fe:0d:81:c0:d4:ae:c0:38:9a:b5:b0:d0:0c:34:f8:1c:1d:
28:9c:80:45:e5:c7:ce:44:b3:e4:09:10:5e:11:9b:42:dc:94:
2f:aa:d1:2e:49:76:1f:6c:20:66:1a:d3:80:ad:57:bf:ce:7f:
6c:31:64:04:7b:f4:61:43:ca:0a:a2:7e:2a:0c:a4:a5:0a:31:
61:4b:59:ed:86:65:a4:3a:f2:96:ea:6b:80:2a:4a:f7:08:6f:
cc:c6:71:3d:e5:6e:3c:7b:b2:28:7c:d9:1f:60:59:eb:38:18:
30:aa:20:28:59:93:a3:7c:21:16:54:f2:7a:70:5f:39:c4:aa:
75:de:99:0a:b1:b6:4b:59:c5:b4:1c:90:b3:99:a5:d1:15:f7:
1a:e4:2e:b2:2d:fe:58:30:b0:6c:9d:ee:77:83:ed:7d:cd:d6:
a1:04:69:ad:2f:b5:64:ee:d4:de:52:7b:f6:e0:56:6e:97:52:
28:7b:ae:cf:2d:5b:5a:0a:d0:c2:39:1c:6b:32:b8:c1:30:4b:
7d:5c:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:50:50 2026 by rpki-client