
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier: 9sqzcQI6lk36MijsraF5EnC5ft+DxTomnY9M8HABZ2o=
Subject key identifier: 13:24:D4:6B:F7:BF:0E:04:26:8C:54:FC:F2:55:2A:30:98:1A:49:C0
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial: 017D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number: 0171
Signing time: Fri 11 Sep 2026 04:59:24 +0000
Manifest this update: Fri 11 Sep 2026 04:59:23 +0000
Manifest next update: Fri 18 Sep 2026 04:59:23 +0000
Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: L3skXqT11BfODMuuKrySeZhc1CR/CpI4SlHizmqfcK4=)
2: 900E2938699411F19844B5108747A888.roa (hash: jus1+o58HPMre2DMSzeD+2S7keAR6F7xQ/skabW/OhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Validity
Not Before: Sep 11 04:59:23 2026 GMT
Not After : Sep 18 04:59:23 2026 GMT
Subject: CN=6aa38aab-28e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:69:70:a1:3a:d5:cc:4a:d0:be:5e:7f:a2:
85:b3:65:e4:ac:65:e6:61:57:13:fa:e0:5b:32:71:
3d:9f:91:7b:46:35:36:fa:62:7d:ce:21:ce:95:f6:
2a:4c:12:86:26:6d:ee:17:62:db:73:7b:f2:65:ec:
ef:a8:92:2a:6a:d8:19:d8:89:6f:a9:dd:95:f2:a0:
0d:18:9e:8e:2e:21:dd:cc:83:e8:a7:c4:46:3b:a3:
7b:2b:cf:00:aa:71:7c:d1:37:92:2b:84:19:17:72:
d5:4b:89:40:9c:d5:67:1c:55:65:e2:5e:88:78:84:
25:ae:c9:6f:ec:44:36:1c:e1:d4:17:e8:b3:53:d2:
55:77:5e:29:4e:7f:cd:4e:cd:cb:53:0b:fc:40:42:
b5:68:4e:38:61:e6:c5:ea:ba:99:00:61:e6:36:49:
01:f5:f6:a6:df:ce:28:d6:a6:fe:c1:98:2d:d2:63:
c6:b7:66:b0:cb:64:b7:6a:98:ac:e8:1a:27:41:af:
a0:bf:9e:cd:54:3e:9f:59:56:f5:fb:89:9b:ce:ff:
25:77:71:70:0c:cd:39:a6:b8:73:ad:b2:00:48:e3:
87:ea:08:a6:b7:13:6f:98:0d:d4:25:ae:f2:ae:64:
36:7f:a8:23:72:47:fc:48:24:60:40:ba:32:43:6d:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:24:D4:6B:F7:BF:0E:04:26:8C:54:FC:F2:55:2A:30:98:1A:49:C0
X509v3 Authority Key Identifier:
keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:fe:b8:21:36:22:00:78:85:57:fc:fa:72:45:7e:70:a9:33:
2b:de:1f:d8:e4:2f:12:18:77:a6:ff:ac:99:30:68:eb:57:a7:
3e:bd:58:58:0b:e8:79:db:c7:c0:1d:18:71:b9:57:59:83:10:
0e:8f:e3:fc:ce:df:32:56:aa:3c:ae:62:76:4f:5b:a8:f6:0e:
47:de:b4:7a:da:f2:e7:5a:0b:f6:de:72:6a:0d:be:ec:9c:0f:
20:2f:44:75:8e:3a:21:5a:b0:8e:c3:32:04:01:9b:5b:31:59:
35:ca:23:fd:00:1a:8a:05:86:48:3c:25:2c:3d:56:d4:37:19:
d7:e8:5b:cf:69:17:ee:b1:e0:88:a9:5d:2f:b7:fb:18:46:81:
69:c5:f8:9c:ae:af:d0:6d:85:05:e6:04:32:1f:8e:1d:5a:78:
bb:16:13:22:14:87:0d:43:4c:ad:28:df:fc:f4:75:47:8d:f4:
aa:c6:1c:13:08:3c:5f:c7:49:17:d2:ed:04:58:5b:45:52:28:
2a:15:a9:3d:5c:7b:4e:c1:a4:df:8f:d2:15:7c:d4:a6:84:01:
eb:26:74:91:f7:19:64:22:9b:7f:a7:45:70:93:09:7b:fd:f0:
e9:ea:84:da:a9:d2:da:5d:30:65:f2:fd:3e:41:e6:44:98:87:
78:a7:11:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:55:44 2026 by rpki-client