
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json)
Hash identifier: 8lTTp8CDhpRWQgyv190kAFf16OyUbWbAVDBgMs6cvj0=
Subject key identifier: 3B:82:73:8E:7B:89:07:29:5F:1D:A7:C8:8F:0F:66:3F:9D:B4:5A:54
Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6
Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
Certificate serial: 1919
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
Manifest number: 1903
Signing time: Fri 02 Oct 2026 16:35:13 +0000
Manifest this update: Fri 02 Oct 2026 16:35:13 +0000
Manifest next update: Fri 09 Oct 2026 16:35:13 +0000
Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: 8JOLeYkn7y4ZjboMonskn+X2IdVz4W0LmhMRu5FZ1YA=)
2: TFsOg13ZBqAbWxl-EsSyPQJTHKs.asa (hash: 7ZDTmhAUT+M9Jy3Ebpjbx71ETxuefLsapEjttf42itE=)
3: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: f8X+npi+JLQaJzm85+PGyFP1DtvAuywwMt9O4+IYXEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl
rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6425 (0x1919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
Validity
Not Before: Oct 2 16:35:13 2026 GMT
Not After : Oct 9 16:35:13 2026 GMT
Subject: CN=6abfdd41-138e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:06:cb:cc:09:0d:73:8e:7c:bd:20:49:02:80:
73:d5:75:fc:e4:11:12:7a:97:a2:49:6d:42:a8:fc:
51:87:f7:cb:e8:fb:42:a2:10:e2:70:9c:c9:c1:23:
44:ef:5b:17:b9:54:32:51:6b:ea:fd:28:42:45:de:
7a:b1:64:9b:c4:b2:ca:4a:69:cb:2b:88:9c:bf:57:
55:36:df:21:3c:2b:19:fe:14:75:e1:62:ce:d0:fe:
a1:d8:87:ee:3c:dd:74:7b:c5:c8:e7:02:57:b6:11:
bc:ce:7b:4b:62:a4:34:44:f1:45:b3:28:ab:4e:cf:
ec:90:c2:11:ef:05:13:bb:34:eb:4e:37:70:e7:f6:
33:a8:11:e5:ab:0c:d0:2e:89:96:6b:46:62:13:84:
e9:47:94:d9:ee:db:4a:90:25:69:2c:86:c7:c7:d3:
d4:06:06:96:fb:dd:d9:37:85:5b:ed:49:8c:7f:fd:
1e:8b:b9:6d:fa:a9:19:33:a3:24:b0:11:ab:24:f2:
97:89:13:45:aa:f0:7b:06:c8:69:7d:8e:00:d2:7b:
62:9a:7f:1e:c1:c5:ce:fa:b3:d4:25:5d:53:28:9a:
63:97:a6:e5:3e:50:f9:2e:a3:40:6b:36:a4:22:40:
d9:0d:75:3d:b2:e3:22:5c:56:5c:91:b6:97:13:22:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:73:8E:7B:89:07:29:5F:1D:A7:C8:8F:0F:66:3F:9D:B4:5A:54
X509v3 Authority Key Identifier:
keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:24:16:03:13:97:0a:4c:af:28:c2:c4:f1:9c:79:83:68:55:
02:ab:0d:71:5e:b4:90:40:5c:80:4b:2f:8b:12:c7:35:f3:47:
ee:3f:17:02:1f:09:ba:bd:c1:a7:25:12:12:3f:e5:ed:13:48:
a4:de:52:5f:4f:58:94:00:de:ad:61:1f:c8:69:e9:4f:e8:45:
4d:6d:66:f7:ab:75:2e:e8:5a:fe:45:a3:d2:31:51:e1:37:01:
b6:ce:70:fa:97:9f:87:4b:7e:ca:51:c9:98:21:23:a5:ab:e5:
d3:f7:43:b3:8b:47:d7:bd:95:e8:32:f6:ba:8b:14:62:2f:ec:
1d:94:07:de:e9:1a:f5:a8:72:25:33:cc:b4:ce:d5:02:68:b2:
5c:a4:7d:e6:72:57:7d:1d:b6:ff:a3:56:37:0d:cc:43:52:1c:
3c:13:bb:97:3c:ca:69:b5:9e:af:c5:32:86:d3:2b:6d:f2:be:
b7:59:4c:64:fb:39:4d:c0:35:6c:2b:5d:ca:51:a2:e6:9a:41:
94:81:0b:86:2a:5f:26:68:6d:eb:57:7f:7e:75:73:f5:44:3b:
d5:45:a1:aa:6c:d1:33:65:d3:65:8d:87:01:92:b0:58:23:4e:
99:99:49:d6:15:b5:23:51:31:53:10:42:d9:e7:2e:e9:15:e2:
76:5d:ae:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:17:50 2026 by rpki-client