
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json)
Hash identifier: Qqez/IpfQekUxNVMyNhrvh81GIYRB+cgMvAik5/aMHw=
Subject key identifier: 96:F4:CC:D9:08:2B:6B:02:51:B4:7F:96:8E:3D:9E:F9:B4:16:98:A9
Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88
Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
Certificate serial: 0684
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
Manifest number: 067C
Signing time: Fri 04 Sep 2026 22:19:40 +0000
Manifest this update: Fri 04 Sep 2026 22:19:40 +0000
Manifest next update: Fri 11 Sep 2026 22:19:40 +0000
Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: C8U/zeqv/9X8lqBeq1QJcnoFF8cOr5/YpbKfFq4QPSk=)
2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: 7ciUUzLJ+kZgShwA8i58YsGujRYv/UGV/4XGImsbT2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl
rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1668 (0x684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
Validity
Not Before: Sep 4 22:19:40 2026 GMT
Not After : Sep 11 22:19:40 2026 GMT
Subject: CN=6a9b43fc-e129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:ba:9c:db:cf:59:0f:5c:2e:75:f5:e0:a7:
a1:e2:48:47:29:98:d1:f2:be:2a:d0:e8:77:04:56:
0c:b9:a7:a5:1b:dc:d1:ca:44:a6:00:e7:a2:46:4f:
f8:c7:1f:ae:13:5e:63:57:c3:f0:76:51:cb:0e:51:
5d:d4:e9:b1:99:95:c3:97:49:21:18:10:a0:b5:0f:
23:46:46:da:20:46:ca:6f:47:a5:98:d2:9f:b8:53:
9d:f0:6f:83:ca:c7:06:57:c2:5e:5d:7d:7d:a1:86:
0c:10:ad:4b:ba:aa:ef:f6:ba:d2:65:39:b1:6a:4d:
bc:52:11:e0:b3:cc:ac:42:4b:a0:c4:1e:c9:99:17:
df:7d:97:b7:05:fc:1e:dc:01:76:19:7e:f0:f2:4c:
f1:84:5b:9b:8b:0c:d0:8c:c7:40:52:99:ec:c1:d4:
af:f1:61:31:ea:f3:d6:06:d5:ba:dc:b3:45:af:e4:
e4:ae:21:da:06:46:63:4f:d7:cf:7c:cf:e2:47:8c:
65:47:b5:b5:b0:9f:55:4f:b5:28:3a:b4:ac:14:5c:
db:f2:4a:e9:98:bd:56:d8:bc:0f:9b:8b:9f:16:8a:
97:cd:b3:ff:4b:c7:bb:ee:83:61:61:ab:70:17:fa:
35:9b:0b:b5:02:67:9a:63:d1:2b:cd:bf:3f:61:39:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F4:CC:D9:08:2B:6B:02:51:B4:7F:96:8E:3D:9E:F9:B4:16:98:A9
X509v3 Authority Key Identifier:
keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:91:eb:7e:b6:01:fc:03:be:c1:1b:e8:0f:7a:2f:a2:bf:62:
19:02:1f:f1:b5:a3:1a:ac:d2:5f:e4:d6:80:48:11:68:91:df:
cd:0c:7a:6a:2d:93:f1:ab:e0:10:1b:d1:95:90:4e:eb:aa:9f:
9e:b0:b8:5b:14:e4:89:6b:34:b9:46:0e:78:85:67:05:ac:59:
52:6d:53:79:08:ce:fe:ef:27:12:c2:35:64:dd:50:03:80:3e:
e6:94:8e:e3:11:12:29:0b:f5:0c:e2:b0:da:74:8f:53:0c:7f:
4d:d5:2d:2a:ed:d4:53:43:71:c3:e4:42:4b:e4:81:a6:85:5e:
e1:f7:58:ee:90:16:3d:a9:71:9f:a4:be:ef:66:51:e3:1e:c2:
ec:db:7e:72:ed:51:01:54:2e:44:5e:2f:98:c7:10:22:1f:28:
30:de:ed:4b:78:b8:35:72:05:29:47:7f:35:d3:1c:af:9a:01:
8f:30:9c:27:f2:80:1d:c4:66:47:09:67:00:58:40:67:12:c4:
0d:f7:79:d1:fb:c7:ba:eb:74:c4:a3:b2:d0:d3:d9:72:8a:d6:
1f:00:07:5c:78:d4:df:2e:10:42:bc:89:cf:90:ec:3d:95:d1:
66:a2:80:63:1e:d4:1b:a1:f3:22:1c:45:7e:e9:a3:a3:30:b2:
ab:c7:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:46:18 2026 by rpki-client