
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
File: k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json)
Hash identifier: QJvXMTCGDHxCGZ8WYDaRGr10EQrcQHdqdDuPidmcw6c=
Subject key identifier: E6:E0:5C:F4:E6:5C:76:0D:33:68:62:77:CA:31:40:2D:B4:31:1E:59
Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
Certificate issuer: /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
Manifest number: AB
Signing time: Fri 09 Oct 2026 07:46:50 +0000
Manifest this update: Fri 09 Oct 2026 07:46:49 +0000
Manifest next update: Fri 16 Oct 2026 07:46:49 +0000
Files and hashes: 1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: rTpcWUmOKqIpkWJ24Fj2nTyjJdPbbCzYT5eqaBhZWDg=)
2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: W13G9UJDUOXNhE35H+xQmcCjaFGO3pjeXgy05QF6k+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Validity
Not Before: Oct 9 07:46:49 2026 GMT
Not After : Oct 16 07:46:49 2026 GMT
Subject: CN=6ac89bea-0973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3c:c6:fa:03:02:79:d2:bc:b3:eb:55:b1:ba:
e0:0a:8f:73:14:5f:d9:c2:98:63:80:75:72:cf:e0:
bd:f7:4f:39:0e:01:32:14:19:32:37:8e:66:14:4c:
0e:12:67:52:7c:e0:7e:e2:d4:42:a9:83:44:cd:4f:
19:b4:07:01:19:ad:45:44:02:d6:f1:9d:e6:4d:70:
b0:08:7d:ca:40:12:b5:b1:29:4b:fe:7a:9f:01:59:
0b:64:a5:bf:be:26:07:0d:3c:07:12:68:d9:59:d6:
77:e7:73:56:31:32:f9:5a:bc:44:2b:e3:04:9c:9f:
17:1d:f9:74:3d:03:00:c9:03:f3:3b:ed:d0:21:1f:
1c:ba:40:78:ca:0f:c3:1b:54:35:cd:9b:01:48:51:
f1:63:a4:bb:fd:00:c0:ff:ad:7f:7c:53:31:3c:a6:
bd:17:14:d3:b4:c2:51:7c:40:59:c5:df:c0:3d:c5:
45:08:8a:ce:00:61:23:20:c1:ee:d5:13:66:fa:0b:
dd:7d:94:eb:80:87:29:2e:68:99:1f:b0:26:10:73:
ad:01:1b:5d:c4:6e:99:ce:21:04:2e:72:c2:71:57:
44:0b:07:05:98:c1:2b:55:4d:d0:82:6f:91:5c:69:
7e:b9:d3:6d:23:6c:5a:3c:34:86:3b:8c:c8:03:6e:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E0:5C:F4:E6:5C:76:0D:33:68:62:77:CA:31:40:2D:B4:31:1E:59
X509v3 Authority Key Identifier:
keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a2:08:fe:ff:b6:b2:82:19:3e:b7:12:47:bc:4e:5c:38:18:
1f:a0:df:6d:6a:cc:c5:aa:2d:3a:1f:95:56:4e:97:e5:4b:6c:
ed:39:f0:66:d9:2f:9a:70:3b:df:92:ba:ff:52:ec:94:e9:b2:
28:99:7b:c5:38:91:8a:e4:f7:38:72:95:d1:21:b2:07:af:07:
ba:ab:0d:4e:64:47:22:fe:00:24:15:34:26:ea:a4:87:12:34:
dd:44:0d:bc:ef:e5:5c:a1:2d:2e:5f:db:c5:c4:fa:eb:cd:a8:
23:21:d4:9c:95:43:40:f8:98:27:e2:a2:be:a3:00:a1:1e:a8:
df:2e:f1:fd:fe:6c:b3:30:02:8b:90:5b:53:10:f6:ee:9e:0b:
7d:3c:d3:a9:1e:d9:4b:70:6b:a7:97:78:bf:ce:cc:b6:f6:06:
b2:55:c5:d4:af:42:24:45:1e:fa:51:1a:37:62:c1:6b:66:c1:
04:a9:d7:25:72:3d:04:32:67:d6:7c:9d:0f:b3:40:e6:0e:08:
0a:53:ae:a0:27:15:8e:49:bb:65:3d:57:e4:29:ac:90:a6:dc:
b0:07:ed:36:0d:5a:85:f3:2e:46:f5:05:27:ba:c6:c0:7b:72:
7b:ea:fc:36:fd:ca:be:a7:98:37:0d:ed:4a:fd:14:c9:9c:f9:
31:ad:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:22:48 2026 by rpki-client