
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json)
Hash identifier: vY07Tfuu50TSLAJwYGNjhC/RAhobtf6XxiXVkYABHDo=
Subject key identifier: BA:3F:AD:6C:3F:36:26:89:BF:1B:C3:70:77:FC:FB:0B:27:42:74:FF
Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Certificate serial: 0417
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
Manifest number: 0410
Signing time: Thu 29 Oct 2026 00:33:34 +0000
Manifest this update: Thu 29 Oct 2026 00:33:33 +0000
Manifest next update: Thu 05 Nov 2026 00:33:33 +0000
Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: eANzSO81gXv45Di20JZXwLuJLeRIvJ9kGvqPoCN5spM=)
2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: SFrPVIEcm3Sob1UjztJCMJRsgyH7hMthtgc0D0N7bCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 00:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Validity
Not Before: Oct 29 00:33:33 2026 GMT
Not After : Nov 5 00:33:33 2026 GMT
Subject: CN=6ae2945e-4b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:84:15:46:aa:17:5c:73:d2:26:a0:11:28:
ea:ef:c8:b2:5e:0b:9e:2b:72:6c:b6:82:45:29:fd:
fc:03:46:b2:5f:93:97:3d:ae:a5:ff:7e:16:70:19:
15:59:ef:e6:f3:20:a7:c5:52:37:e0:44:31:a5:f7:
38:15:73:b0:d7:44:5a:95:a8:38:29:00:6c:86:5d:
44:03:59:41:6e:8d:03:63:cc:da:c3:60:a1:f1:4c:
2d:c6:23:dc:a6:af:c6:09:bf:f1:b8:d7:14:1e:42:
e3:15:88:ec:d4:80:cf:4a:7c:68:ef:a8:95:96:6e:
38:d0:1c:94:ef:81:54:45:9d:0a:81:49:fc:2d:8e:
49:fa:21:27:ed:a7:da:53:e8:d5:c4:fd:3a:c7:d9:
8b:bc:90:32:85:94:a7:2b:48:c3:14:1b:ef:de:8e:
4b:3f:e8:f4:e3:8b:ea:b2:5e:3f:75:91:9f:72:24:
e6:b8:09:26:48:87:da:a8:a9:30:5b:ca:47:3b:e4:
74:21:a2:31:f4:c3:46:0f:07:18:1e:bf:6b:e1:65:
8e:46:9f:4b:7b:4e:e4:87:4c:5a:6a:2a:e6:aa:38:
5e:3a:65:c1:e4:ef:d6:46:1b:05:bf:ea:4b:ca:ad:
e0:24:da:b1:a5:8f:fc:2a:64:d4:39:ae:f7:4b:44:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3F:AD:6C:3F:36:26:89:BF:1B:C3:70:77:FC:FB:0B:27:42:74:FF
X509v3 Authority Key Identifier:
keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ef:14:29:a5:ee:42:02:91:94:28:28:c6:c8:17:d4:e5:8a:
a6:31:57:da:53:d8:de:ca:48:07:0b:ca:f5:3c:7b:d7:1f:c6:
15:da:79:c2:78:4c:9f:3c:41:6d:0c:35:b4:a0:da:15:73:39:
c2:b0:78:f2:a3:dc:df:ad:ef:c3:6f:9f:e8:94:6a:23:8d:93:
7a:dd:75:7a:96:a5:53:80:f5:22:73:7e:e6:c0:0c:f5:65:72:
40:0a:2f:87:68:ad:b7:e6:fd:d8:df:5d:24:9a:ae:35:5d:c3:
fb:1c:f5:87:89:8b:1d:6a:ea:a2:4c:c3:90:9f:2b:61:b8:41:
5a:7c:34:51:af:21:6c:20:0f:fe:e4:86:6a:b3:eb:94:4e:2f:
0f:9a:36:06:03:da:8e:44:5d:cc:c1:72:d8:76:42:2f:fd:dd:
f6:2f:6f:fd:76:a2:b8:36:5d:7c:47:24:a9:7d:e9:40:ed:ee:
d2:de:1e:26:24:df:e2:67:17:07:bb:be:24:4b:b1:91:22:71:
59:61:db:ae:7e:ef:71:64:43:45:62:52:cb:aa:11:5e:b3:46:
85:03:61:c7:b4:7f:b1:d2:b0:f6:b2:a0:05:ff:28:34:d5:55:
a5:56:33:b0:57:fe:2f:de:c8:6d:4a:6d:11:b2:e8:c1:ef:c2:
6b:c8:f1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:17:28 2026 by rpki-client