
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json)
Hash identifier: t65JyQCd6IyCLVGR0H3FsrZ/2QIFYEm7HzWGwu4vNuk=
Subject key identifier: 6E:53:64:49:A6:58:18:15:FF:99:F5:C3:7B:74:B4:93:06:FB:CF:00
Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Certificate serial: 0986
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
Manifest number: 0974
Signing time: Fri 04 Sep 2026 19:58:01 +0000
Manifest this update: Fri 04 Sep 2026 19:58:01 +0000
Manifest next update: Fri 11 Sep 2026 19:58:01 +0000
Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: 5HZdMaTiWAsQF6g09hkH8gmJuXksBHsgnVddaaT9oN4=)
2: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: 3bV0TzjiZh3KuPq0SqliImca0k0LkcZjFA0YvIEuGRg=)
3: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: l+f+4/9n0vpB3extgQLx1sn5WvnqyOODvFogGPzHRvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Validity
Not Before: Sep 4 19:58:01 2026 GMT
Not After : Sep 11 19:58:01 2026 GMT
Subject: CN=6a9b22c9-8502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:23:f3:79:ca:d3:a0:7f:08:96:d3:9b:03:d2:
3c:b0:23:28:76:ff:fd:07:dc:f4:bd:70:d9:c3:9d:
5c:24:52:96:8c:61:57:e7:eb:32:c9:a5:6e:fc:80:
1e:d8:b0:be:43:49:12:0f:e2:5b:c7:38:ab:2e:1e:
96:51:d9:25:53:45:19:af:3f:ca:81:3d:47:b1:45:
9e:61:88:45:07:d9:92:66:de:79:b1:c9:51:8b:b4:
4d:7c:00:71:3f:0b:d9:e9:d1:e9:6a:db:5c:f0:9c:
da:02:55:a7:77:ee:22:3d:bb:df:61:3f:46:37:65:
36:9d:ac:eb:e7:27:ae:0e:6a:77:8f:1c:09:1f:55:
65:61:27:1a:96:10:fd:df:a5:27:9e:e7:6a:75:e4:
22:4b:55:4f:fc:e0:f7:69:a7:60:94:e0:cc:ac:99:
e5:25:d9:0c:8b:83:f9:1f:57:72:d7:3d:84:ce:32:
25:9c:1f:53:03:97:4f:98:0c:08:ce:21:61:d9:f4:
a4:2a:e1:99:e6:a9:43:ad:b6:95:bc:ab:4c:36:43:
65:2b:bf:35:00:2d:d3:15:cf:54:74:93:2e:f8:0d:
65:3b:6f:db:58:11:c4:c0:6b:7a:15:30:31:a8:27:
61:9d:aa:c5:3e:bf:1e:82:6e:28:2f:7a:4a:74:2d:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:64:49:A6:58:18:15:FF:99:F5:C3:7B:74:B4:93:06:FB:CF:00
X509v3 Authority Key Identifier:
keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:e5:80:23:ca:b6:38:15:c4:2f:10:e4:bb:08:53:d2:83:c4:
6a:6e:19:03:5f:86:52:b5:da:46:ea:80:84:60:bb:16:12:b4:
39:0f:18:a0:ff:d7:1c:44:aa:8a:0d:49:7a:90:11:b9:69:fb:
40:1f:ac:ed:9b:0a:e6:ea:bc:d5:51:f6:9f:1b:70:80:68:d7:
29:45:4e:56:a0:72:f8:30:39:0f:c4:14:f6:2c:e0:20:fe:d0:
88:24:5d:15:20:e1:71:f6:1b:14:f7:cb:c7:e7:01:07:bf:ff:
7c:05:0f:ae:04:38:1d:47:53:e8:cd:93:76:8b:9a:e7:5b:74:
2d:e9:b6:12:68:85:a3:d6:a9:5a:9c:ec:74:43:92:8c:ac:f8:
0c:93:ae:32:f8:1e:31:2b:9f:ac:e1:ad:31:6a:96:61:83:da:
42:7c:c7:4e:9a:b0:e2:0f:18:9c:f4:fe:f5:1b:b4:a0:a1:58:
b2:d7:42:a6:a0:41:dc:12:d7:2f:4d:f3:5c:60:ca:e5:b6:0f:
ee:1e:c1:0d:6c:69:dd:b4:00:16:80:1a:ed:b1:f6:4e:b8:b8:
7c:1b:87:fa:e0:a6:ff:9d:70:1d:eb:f6:65:51:ed:b9:07:3c:
5f:49:21:a2:e7:0d:74:ee:76:54:00:81:f2:78:4a:7f:25:a2:
15:b8:a4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:57:55 2026 by rpki-client