
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json)
Hash identifier: K53pckSngmHuTyaknvT5xS5o/xNb/6VJrm4jHK6NVTQ=
Subject key identifier: 22:87:35:1B:13:34:52:86:D3:FA:D9:5E:3C:9E:63:33:51:63:1C:DF
Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
Manifest number: 0234
Signing time: Mon 21 Sep 2026 02:38:38 +0000
Manifest this update: Mon 21 Sep 2026 02:38:38 +0000
Manifest next update: Mon 28 Sep 2026 02:38:38 +0000
Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: QTbHmcFiN/nm9O7MnxeMbe/xxwm+aW9HMNUmFUH3R9U=)
2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: io5dld31RUnwYgZ/Dwfg+0sG66TjiFzZtX4OoxE/S44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Validity
Not Before: Sep 21 02:38:38 2026 GMT
Not After : Sep 28 02:38:38 2026 GMT
Subject: CN=6ab098ae-5816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:93:b6:df:9a:80:ab:ae:70:37:11:6b:70:
07:bc:9e:3e:1c:66:97:27:6e:88:a9:7f:94:08:f6:
db:d4:1c:64:40:b3:ba:34:fa:ad:4f:ac:29:fa:ca:
7d:b7:3d:b2:bb:82:80:1a:4b:9e:d5:fa:36:a4:6d:
17:1e:b8:85:2c:4a:fb:5e:8b:72:ee:14:30:cf:1f:
6f:fd:f0:ad:b0:89:95:1b:00:31:78:e3:0e:5f:6d:
dd:79:b2:c8:4f:39:e5:23:ea:e4:4e:8a:c7:b4:d8:
c6:5f:9f:bd:29:95:4d:15:5d:74:49:06:fc:c7:a4:
87:27:ae:9e:f9:1b:df:2a:8c:2e:44:c9:b6:b8:90:
e8:94:34:72:59:3f:b6:2b:e9:47:00:3d:5d:1c:2f:
1b:5f:2e:ed:0f:08:24:96:86:79:b6:66:c3:cf:7b:
78:40:bc:66:95:1b:01:13:a0:c0:95:f3:6c:68:ce:
d4:2f:bb:9b:a5:4d:f5:21:4f:94:18:9f:8b:0e:b0:
f6:4f:0a:59:81:21:c0:52:55:23:6b:46:71:af:db:
e8:ce:f6:70:70:94:7b:2a:79:45:c1:71:98:6c:49:
fc:52:0c:c1:ad:16:5c:15:3d:41:e7:8a:1d:a1:93:
ac:f8:e8:46:2f:32:5d:3e:d3:d6:be:d4:7f:47:e0:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:87:35:1B:13:34:52:86:D3:FA:D9:5E:3C:9E:63:33:51:63:1C:DF
X509v3 Authority Key Identifier:
keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4b:34:65:ee:12:15:5e:6b:d9:77:90:83:df:d6:2c:ae:ba:
0c:e5:f8:e1:94:6e:1e:07:4d:77:13:9a:1e:95:aa:fe:30:a9:
16:cb:04:4b:cd:dd:ef:2c:02:08:18:8e:f9:4a:86:c4:ba:fa:
57:84:c9:04:2f:c7:b7:91:d5:c6:5e:f9:6f:27:d7:4d:1c:e0:
7b:ba:9d:ee:20:3e:be:b9:e5:03:7b:ac:8b:b6:66:48:5b:d2:
4a:35:5d:aa:5a:5a:f9:98:76:3d:f7:92:3a:c3:0e:b4:2c:c2:
5e:07:be:d0:b2:18:c9:2e:44:ea:1c:d2:6f:81:ea:c8:13:28:
b1:ce:7b:44:51:b3:c3:f0:b3:e9:c7:50:18:e0:ba:85:0d:4b:
82:1f:c0:62:db:cb:89:c9:b7:8d:ed:e0:af:83:d5:2c:5e:12:
c8:1e:3b:67:6f:32:1f:c0:e6:e8:d1:61:0d:b4:08:6f:3b:d1:
17:b9:ce:7b:83:39:a2:e5:af:2d:03:3e:ca:4c:b9:03:22:0c:
0d:b8:39:3b:3b:97:9f:ca:a9:85:ef:92:25:34:ae:f1:a3:47:
f1:3a:29:6d:a7:89:c2:30:46:ca:6f:f3:bb:31:eb:63:11:de:
63:f4:e5:ba:4c:b9:d6:b3:04:b9:fe:20:0f:d6:c9:75:14:29:
99:b1:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:50:46 2026 by rpki-client