
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft
File: Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft (raw, json)
Hash identifier: FAazmMj6SemyZ1tyeSfXUUaONjHy4+va9x2Ci28HhRA=
Subject key identifier: 1E:29:33:4D:6C:DA:96:E0:BC:87:DE:6B:03:38:F5:26:F6:1B:60:B4
Authority key identifier: 31:F9:35:FE:C9:E2:E7:0B:CF:BC:5E:64:25:7C:31:8C:9B:D9:3C:2D
Certificate issuer: /CN=A91A4BD5/serialNumber=31F935FEC9E2E70BCFBC5E64257C318C9BD93C2D
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mfk1_sni5wvPvF5kJXwxjJvZPC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft
Manifest number: 0C
Signing time: Mon 05 Oct 2026 09:39:22 +0000
Manifest this update: Mon 05 Oct 2026 09:39:22 +0000
Manifest next update: Mon 12 Oct 2026 09:39:22 +0000
Files and hashes: 1: Mfk1_sni5wvPvF5kJXwxjJvZPC0.crl (hash: 0lBBBoPlAAs0DRVeBliENuEw5zT6RA9FnzMu2fSuw+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.crl
rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mfk1_sni5wvPvF5kJXwxjJvZPC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD5, serialNumber=31F935FEC9E2E70BCFBC5E64257C318C9BD93C2D
Validity
Not Before: Oct 5 09:39:22 2026 GMT
Not After : Oct 12 09:39:22 2026 GMT
Subject: CN=6ac3704a-ff97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:41:34:44:3c:8a:ce:15:bb:b9:51:ca:ea:
45:fd:5a:ba:0a:06:36:39:5f:ac:5f:3a:77:6e:8d:
4f:5b:b0:15:e1:0f:1d:f3:3f:6c:58:cb:20:32:90:
e6:66:37:2b:29:3b:06:a6:8a:7a:4e:2f:0c:c2:0d:
35:d1:03:50:70:8d:b0:31:7f:8c:1f:53:65:d9:db:
f0:be:81:cb:a1:c9:34:e0:0d:12:38:1b:ac:a2:86:
9e:dc:cb:52:bc:0c:19:0b:ea:95:ce:86:40:d4:c3:
1c:de:a0:d4:a1:7d:42:94:e9:3a:f4:3a:06:b8:e9:
d8:f6:94:c6:de:cc:00:25:10:ae:50:90:62:26:65:
bb:b7:68:8e:8b:92:75:13:d0:de:fd:04:55:38:00:
a5:17:2e:71:33:9f:5e:72:29:9c:11:25:44:99:0a:
aa:3b:85:75:94:9d:fc:d4:a7:3d:76:fc:4a:f2:c0:
cb:09:dc:96:51:f8:73:30:40:f7:d2:be:1a:1b:c2:
6a:74:a2:e3:9b:3e:21:e9:e2:17:33:a3:db:e8:a0:
08:e0:b3:41:4c:18:8f:fd:23:d5:c6:74:24:ec:aa:
ef:51:ca:5e:86:27:b0:fc:be:83:a4:dd:79:87:3b:
f2:c2:75:01:59:ef:40:e1:15:38:f7:2d:af:08:b6:
87:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:29:33:4D:6C:DA:96:E0:BC:87:DE:6B:03:38:F5:26:F6:1B:60:B4
X509v3 Authority Key Identifier:
keyid:31:F9:35:FE:C9:E2:E7:0B:CF:BC:5E:64:25:7C:31:8C:9B:D9:3C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mfk1_sni5wvPvF5kJXwxjJvZPC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/F1DEEA86B0C411F1B94FF2076A11F970/Mfk1_sni5wvPvF5kJXwxjJvZPC0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2d:26:3f:4a:cc:e1:08:4a:45:73:01:55:4e:e7:72:91:40:
81:7d:3e:dc:1b:af:09:92:80:c7:c1:d8:69:c5:c0:d7:1f:86:
53:9e:a0:6d:1b:03:5c:84:d7:f2:99:6e:05:d1:59:c3:d3:2a:
17:c7:99:a4:c4:cf:ea:dd:f7:cc:82:95:16:33:8f:60:fa:b7:
e2:50:83:e7:17:b8:64:e2:9a:44:19:83:6d:22:7c:1f:f9:6c:
0e:af:34:39:53:e4:72:57:30:8c:87:55:e5:7c:ef:d6:b4:de:
49:42:c8:35:26:87:5a:e9:38:e6:c6:cf:b5:75:d1:70:36:4f:
35:52:e2:2b:c9:d7:11:f0:f6:52:70:30:1b:5a:bb:23:32:c9:
b8:39:17:61:b0:02:ca:6e:33:03:89:b0:c3:5b:0c:cd:bb:aa:
47:79:35:d6:b3:23:6f:5d:67:3b:ac:82:a4:0a:54:15:e2:11:
ff:14:64:21:be:0b:9f:b3:46:c5:16:e6:b4:95:87:d1:43:8e:
57:c3:c1:43:40:a7:9a:ae:fa:91:4d:0d:7a:fc:87:4b:92:24:
f8:65:52:82:0c:f9:f3:65:d2:ec:79:b7:39:8c:ea:c6:f6:3e:
03:f3:e9:18:90:97:78:e6:26:47:20:2c:55:d4:66:3d:9c:ca:
28:4e:13:19
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NEJENTExMC8GA1UEBRMoMzFGOTM1RkVDOUUyRTcwQkNGQkM1RTY0MjU3QzMxOEM5
QkQ5M0MyRDAeFw0yNjEwMDUwOTM5MjJaFw0yNjEwMTIwOTM5MjJaMBgxFjAUBgNV
BAMTDTZhYzM3MDRhLWZmOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdS0E0RDyKzhW7uVHK6kX9WroKBjY5X6xfOndujU9bsBXhDx3zP2xYyyAykOZm
NyspOwaminpOLwzCDTXRA1BwjbAxf4wfU2XZ2/C+gcuhyTTgDRI4G6yihp7cy1K8
DBkL6pXOhkDUwxzeoNShfUKU6Tr0Oga46dj2lMbezAAlEK5QkGImZbu3aI6LknUT
0N79BFU4AKUXLnEzn15yKZwRJUSZCqo7hXWUnfzUpz12/ErywMsJ3JZR+HMwQPfS
vhobwmp0ouObPiHp4hczo9vooAjgs0FMGI/9I9XGdCTsqu9Ryl6GJ7D8voOk3XmH
O/LCdQFZ70DhFTj3La8ItocbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHikzTWza
luC8h95rAzj1JvYbYLQwHwYDVR0jBBgwFoAUMfk1/sni5wvPvF5kJXwxjJvZPC0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QkQ1L0YxREVFQTg2QjBD
NDExRjFCOTRGRjIwNzZBMTFGOTcwL01mazFfc25pNXd2UHZGNWtKWHd4akp2WlBD
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTWZrMV9zbmk1d3ZQdkY1a0pYd3hqSnZaUEMwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0
QkQ1L0YxREVFQTg2QjBDNDExRjFCOTRGRjIwNzZBMTFGOTcwL01mazFfc25pNXd2
UHZGNWtKWHd4akp2WlBDMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB8LSY/SszhCEpFcwFVTudykUCBfT7cG68JkoDHwdhpxcDXH4ZTnqBtGwNchNfy
mW4F0VnD0yoXx5mkxM/q3ffMgpUWM49g+rfiUIPnF7hk4ppEGYNtInwf+WwOrzQ5
U+RyVzCMh1XlfO/WtN5JQsg1Joda6Tjmxs+1ddFwNk81UuIrydcR8PZScDAbWrsj
Msm4ORdhsALKbjMDibDDWwzNu6pHeTXWsyNvXWc7rIKkClQV4hH/FGQhvgufs0bF
Fua0lYfRQ45Xw8FDQKearvqRTQ16/IdLkiT4ZVKCDPnzZdLsebc5jOrG9j4D8+kY
kJd45iZHICxV1GY9nMooThMZ
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:53 2026 by rpki-client