
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/p1sW7D77waj1E_o1f6A5SjJDOlI.mft
File: p1sW7D77waj1E_o1f6A5SjJDOlI.mft (raw, json)
Hash identifier: 4PT63x43Juu7PM32H3L3aCPYvOadqNpOxhKFXYJdna0=
Subject key identifier: C1:2E:42:E8:65:96:6B:4C:2F:1E:B4:CC:99:77:31:89:31:E8:48:FF
Authority key identifier: A7:5B:16:EC:3E:FB:C1:A8:F5:13:FA:35:7F:A0:39:4A:32:43:3A:52
Certificate issuer: /CN=A91924C9/serialNumber=A75B16EC3EFBC1A8F513FA357FA0394A32433A52
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1sW7D77waj1E_o1f6A5SjJDOlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/p1sW7D77waj1E_o1f6A5SjJDOlI.mft
Manifest number: 09
Signing time: Sat 03 Oct 2026 09:58:57 +0000
Manifest this update: Sat 03 Oct 2026 09:58:56 +0000
Manifest next update: Sat 10 Oct 2026 09:58:56 +0000
Files and hashes: 1: p1sW7D77waj1E_o1f6A5SjJDOlI.crl (hash: HXARGsi4MYOPXjzix9/qPKnd3znnYd1sLXKGvRoOhig=)
2: 17AB2896B63E11F1A51127D96511F970.roa (hash: qhGk9BOpK/PikG39MduxVpuCfC6q1uXoToROKPyccRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/p1sW7D77waj1E_o1f6A5SjJDOlI.crl
rsync://rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/p1sW7D77waj1E_o1f6A5SjJDOlI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1sW7D77waj1E_o1f6A5SjJDOlI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:58:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91924C9, serialNumber=A75B16EC3EFBC1A8F513FA357FA0394A32433A52
Validity
Not Before: Oct 3 09:58:56 2026 GMT
Not After : Oct 10 09:58:56 2026 GMT
Subject: CN=6ac0d1e1-f3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:c6:90:76:dd:3c:d4:90:cd:ae:02:0b:7b:
7a:c2:db:e2:fb:7d:3c:dd:38:b4:65:df:b7:a3:f0:
c0:34:b6:5b:b7:3e:22:f2:f4:3d:8b:d5:e4:48:28:
2f:a3:48:c2:1b:da:10:b0:6c:50:97:f3:98:92:e9:
5b:16:d1:94:80:da:ab:d2:71:ab:f6:d8:07:26:33:
d3:99:38:71:f6:52:d9:64:ac:a1:52:18:19:66:01:
98:40:7c:94:60:ac:ec:ca:9c:2a:c7:f9:55:ea:03:
ee:1c:0b:28:84:d6:1f:8a:42:74:ef:3a:53:ef:df:
4f:89:24:79:dc:e9:bb:46:4b:5d:90:3e:0b:87:6b:
4f:6d:a8:a9:b4:46:e5:b5:52:b3:c2:62:6f:c7:d2:
84:a9:fb:0d:9d:93:85:7d:96:26:39:03:0c:25:8a:
2f:66:53:23:cb:ba:f3:e6:cf:be:02:d4:fd:bf:5a:
8a:05:e4:05:d6:14:20:b5:04:de:b6:e6:8b:22:bc:
e2:8d:e8:48:d7:e8:35:32:5c:5a:c2:e1:6e:dc:af:
69:78:37:f9:0d:fc:d0:28:73:57:07:84:07:8d:d5:
b3:26:55:89:b0:84:c8:32:a1:c1:a4:77:6e:10:1b:
a8:cf:32:da:2a:95:67:da:ba:e1:fb:c6:4e:18:69:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2E:42:E8:65:96:6B:4C:2F:1E:B4:CC:99:77:31:89:31:E8:48:FF
X509v3 Authority Key Identifier:
keyid:A7:5B:16:EC:3E:FB:C1:A8:F5:13:FA:35:7F:A0:39:4A:32:43:3A:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/p1sW7D77waj1E_o1f6A5SjJDOlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1sW7D77waj1E_o1f6A5SjJDOlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91924C9/E8E4817CB63A11F1B5B8F1526411F970/p1sW7D77waj1E_o1f6A5SjJDOlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:f6:a3:ea:2b:f7:15:a6:4a:1e:44:3c:f3:90:5e:13:30:2b:
5f:8c:b0:ed:eb:36:06:a1:31:6d:39:59:43:0c:07:82:70:10:
47:b5:4b:ac:15:98:23:2a:aa:a3:0c:00:ef:55:c3:34:6e:02:
2c:77:ca:89:6a:a7:cb:28:fa:4d:5e:5b:9c:82:4f:d8:ff:02:
26:8d:98:2d:85:35:ac:be:65:d9:49:33:a7:3f:9d:ee:83:7a:
67:c9:61:7e:32:cf:55:f7:11:73:41:b3:da:8a:35:9f:0c:7e:
42:3b:65:8a:e6:0a:1e:00:17:b1:33:8c:cd:5e:f0:49:57:42:
62:e7:b2:18:b2:53:41:de:9f:f1:99:de:7d:e1:4a:1e:5f:99:
07:f2:60:25:85:25:71:4d:20:71:ae:15:78:26:88:4d:b4:0b:
21:96:2d:b9:fc:3f:6f:11:d1:50:0e:7e:a7:ae:db:f7:4e:89:
6f:73:0b:63:e9:24:e7:95:fa:36:48:4c:e1:45:9e:ff:6a:ae:
17:d8:b1:76:ed:82:a9:1a:3c:72:6b:51:e8:a8:21:96:65:ba:
84:4e:93:02:31:8a:02:59:94:09:28:15:36:77:8f:64:df:de:
f9:75:87:f5:cd:2e:0e:85:0d:41:82:c2:36:e5:4f:b0:78:af:
b2:59:f2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:14:39 2026 by rpki-client