
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json)
Hash identifier: DoKjmBwZ8XlSEart77xAU0t25DnZFfrYAkhTl9ejEWY=
Subject key identifier: 85:13:A4:F9:A0:F7:B6:FA:E8:68:6D:20:08:E7:FA:C6:8C:F2:75:16
Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Certificate serial: 0338
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
Manifest number: 0331
Signing time: Wed 07 Oct 2026 01:09:36 +0000
Manifest this update: Wed 07 Oct 2026 01:09:36 +0000
Manifest next update: Wed 14 Oct 2026 01:09:36 +0000
Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: 3Ub5BBgu44Ck5dUSmLFoRARALkfrTT2ejOCtXHG3sSY=)
2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: 3EomuYTOYpdRonmxsDgyICA/moRstX6OW0zEPClInuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 824 (0x338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Validity
Not Before: Oct 7 01:09:36 2026 GMT
Not After : Oct 14 01:09:36 2026 GMT
Subject: CN=6ac59bd0-1d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:77:17:87:bd:8a:7f:05:99:87:3c:8a:ea:
17:18:08:c2:3b:76:74:53:50:52:ce:99:5d:09:8c:
72:73:f4:37:b1:61:6b:1f:5e:04:79:8d:6b:49:fe:
17:06:d2:90:86:55:d6:3b:49:1f:de:5c:58:c0:af:
65:37:a9:fc:25:c4:2e:76:95:72:75:4a:c2:64:31:
91:d4:42:0a:86:c4:55:48:d9:4b:04:14:91:ce:d6:
d5:64:8c:49:95:8f:6a:a6:5b:5c:55:e0:5d:a5:8d:
cf:43:52:3b:71:66:2c:4d:07:1b:e3:50:8a:d3:4a:
39:c1:26:bd:ac:d0:4e:5a:2e:c0:bb:ab:ef:1d:bb:
18:78:a7:df:15:ef:60:eb:a3:9f:fc:8f:a2:27:2a:
1b:11:fc:51:f4:52:b2:7c:28:83:0d:dc:4a:24:25:
17:b2:6f:91:87:44:fb:63:d5:32:21:ad:13:29:3b:
cb:0a:27:c5:dc:6d:c4:6e:6d:9c:2e:0f:67:0b:be:
78:47:6e:6a:e3:20:35:b7:3e:b5:44:cf:2c:84:32:
f7:93:60:c3:88:64:5e:a2:bf:b9:fd:5d:cc:82:f7:
ee:09:d6:f0:a5:ac:73:9e:b3:e3:7f:92:5c:65:69:
39:72:2f:20:12:41:aa:b6:0d:82:4c:50:42:2d:b6:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:13:A4:F9:A0:F7:B6:FA:E8:68:6D:20:08:E7:FA:C6:8C:F2:75:16
X509v3 Authority Key Identifier:
keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:50:53:b8:12:04:93:08:67:05:13:aa:e7:b7:7b:0d:c2:d6:
54:88:56:c4:80:92:72:3a:45:6c:e7:31:ee:99:ad:d0:11:83:
8f:a0:ee:02:cc:62:f1:29:93:79:55:10:8e:12:8c:98:e7:cd:
12:d3:92:37:87:80:88:82:6d:67:30:9d:43:ca:e9:8d:ac:51:
62:00:c9:bc:3e:32:f3:af:c7:d6:01:1c:93:d6:21:44:45:0e:
f4:56:ab:50:04:ff:83:9b:14:45:3c:4b:42:8b:18:a9:2e:fe:
c5:49:3f:ad:2d:24:ea:ce:24:01:21:08:ae:1d:a1:66:0d:dd:
83:ab:1c:6c:fc:38:6e:f8:3e:04:14:05:43:57:f6:82:49:c2:
f5:fc:a7:1d:86:fb:3b:09:45:91:3b:fb:53:c8:88:6f:60:50:
6a:f8:d9:d9:b3:13:cc:11:ac:da:e3:d0:04:72:0b:0e:ab:b0:
20:15:2d:f7:03:17:39:4a:a1:f9:1c:b4:0b:56:48:8a:27:41:
aa:80:ca:7e:e5:8c:71:d4:ce:1e:26:87:a4:4d:38:1b:5f:0f:
de:35:c0:df:bb:41:d3:c2:d9:ca:30:37:1c:db:65:18:45:e8:
f4:dc:b7:c3:16:90:3c:4b:08:4d:c8:37:c2:4b:fc:f8:9a:d0:
ff:60:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:59:54 2026 by rpki-client