
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json)
Hash identifier: p6Z2qf2TRJvqzXS7AYsxB4OntIeiBchCiQb2k3EsLrg=
Subject key identifier: 05:EB:7F:9A:7B:C0:79:E3:12:31:06:BA:B1:F6:B0:EF:F7:4C:C7:A7
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial: 1391
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
Manifest number: 136B
Signing time: Thu 10 Sep 2026 16:57:24 +0000
Manifest this update: Thu 10 Sep 2026 16:57:24 +0000
Manifest next update: Thu 17 Sep 2026 16:57:24 +0000
Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: YT1GFxBhUFcoPE2roYa4Pwx7n8hr72PssmRJKk5MmeM=)
2: 48B8F476089911F0B2664480C4F9AE02.roa (hash: KjogEvmeziwi8gySjs9Ywm3IXf9Y7i+lrZLVGgULe+c=)
3: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: VTQTT8xuT6Dg+SWzxk2QMe23LBYYzjpf4J2jxRAO07I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5009 (0x1391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Validity
Not Before: Sep 10 16:57:24 2026 GMT
Not After : Sep 17 16:57:24 2026 GMT
Subject: CN=6aa2e174-44bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:44:c8:e8:12:2b:de:31:96:fc:72:c5:11:
64:14:b1:95:6b:5f:72:0d:d4:92:84:76:0a:e6:3d:
a4:5a:ea:a6:29:e6:a8:6a:fd:9c:37:d8:22:f5:e1:
6f:c5:e9:c1:27:c3:c9:4e:c0:52:8c:b0:21:ad:06:
63:45:70:38:c0:02:2b:dd:69:4f:b0:4b:b6:f3:c8:
39:26:b7:87:c4:a0:d5:f8:35:a5:4f:39:2b:58:3f:
d0:61:27:34:06:7f:8c:c3:09:5b:58:c9:3e:40:cf:
08:db:81:42:9f:7a:8f:86:cf:45:37:45:f8:8d:83:
17:52:e0:5f:be:6b:7a:39:bc:d6:ee:20:df:89:c7:
47:b0:89:03:67:34:2e:57:fe:95:0c:88:dc:b3:dc:
47:f4:a7:62:e0:cc:90:d5:6b:4f:0b:bd:8d:74:ee:
d7:87:f9:32:bf:b8:09:10:d5:bd:20:1b:26:61:dd:
5f:38:f5:ca:7d:9e:da:36:d6:66:20:69:2f:1a:6a:
6d:60:6d:91:9e:76:d3:38:14:ec:d6:3b:cf:c0:f8:
a7:36:9c:94:19:ea:c1:a4:68:9a:19:e9:42:5a:9b:
aa:e7:73:68:98:2c:59:34:c7:00:02:59:5f:b4:f6:
4b:0c:17:20:36:03:2f:16:14:66:34:db:ab:2f:b1:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EB:7F:9A:7B:C0:79:E3:12:31:06:BA:B1:F6:B0:EF:F7:4C:C7:A7
X509v3 Authority Key Identifier:
keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:4f:5c:72:de:51:68:b2:b8:6f:f5:5a:f4:50:7a:3b:28:b3:
79:df:fb:9c:90:c4:d4:e9:74:bc:0d:38:a7:1a:4b:c5:06:44:
83:26:49:07:ee:1a:31:4e:97:7a:80:01:44:ef:6f:9c:f1:d1:
c4:08:e2:e5:9a:58:a0:cc:5c:1f:af:1d:8e:9b:a7:dc:00:13:
c7:15:9c:0d:03:07:37:0c:f9:35:ee:50:e6:6a:2d:15:6a:df:
a8:d1:4c:cb:c2:ae:82:29:48:08:7e:ec:06:c9:9a:49:fd:cb:
22:5b:09:9b:d0:e2:a2:7e:cb:2b:7d:88:4d:cc:91:59:ad:bf:
e6:99:2a:19:69:aa:3d:d1:63:a5:99:22:ef:17:cc:22:79:51:
d4:47:ad:ad:3e:e3:5b:17:d2:68:7e:f4:f8:f0:9b:ee:88:e2:
7a:db:8f:8d:44:e4:0b:9d:bd:c4:51:64:75:d1:37:29:00:e1:
1d:9c:a6:3e:e6:66:21:6e:c1:5e:92:9d:75:c2:92:e5:81:68:
40:cf:2f:8e:26:1e:fd:93:71:ad:88:28:37:c7:be:07:ab:ba:
bb:eb:a2:0b:be:f0:9c:37:01:05:2b:f9:6c:a4:26:91:e3:9e:
03:a0:04:d3:06:44:09:5a:2f:58:cb:1c:60:b7:82:b5:49:27:
e8:fb:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:56:19 2026 by rpki-client