
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
File: aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json)
Hash identifier: OpaAyAM56XMaIB+khDCMo087QGynAEARfpsxWU/r/Nc=
Subject key identifier: 31:5A:E4:8D:5E:9E:AC:CF:4C:52:40:F3:7C:0A:A1:8D:58:B6:8E:41
Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
Certificate issuer: /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
Manifest number: 0148
Signing time: Wed 07 Oct 2026 05:52:53 +0000
Manifest this update: Wed 07 Oct 2026 05:52:52 +0000
Manifest next update: Wed 14 Oct 2026 05:52:52 +0000
Files and hashes: 1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: 9MgL3xgNbn7WxFBQF2wWSj++C+AYMDvlv0/Oaq8whOo=)
2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: GJJAq7Y4rDKXzfncSIrWC7/k2iyBuKfDbZCWqya2Ycc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Validity
Not Before: Oct 7 05:52:52 2026 GMT
Not After : Oct 14 05:52:52 2026 GMT
Subject: CN=6ac5de34-0add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:92:39:41:52:6b:48:d2:c4:80:48:94:cc:
88:56:4c:9e:e6:84:33:4d:60:6c:b5:8c:85:96:d0:
42:96:13:11:1d:08:bc:a1:fe:30:3c:36:64:fa:7f:
b7:ce:8b:f9:60:1e:c8:5b:54:d7:1e:5a:57:ba:bc:
e0:38:dd:a5:8b:f2:48:7d:da:d0:8f:98:1c:13:55:
cc:82:e6:50:56:b4:a9:f7:14:d9:29:05:20:66:f4:
ce:92:56:64:8f:1c:a3:ec:44:90:02:e6:84:61:45:
b4:4a:32:7e:9d:ff:e7:52:1c:ee:5e:90:f1:bc:96:
16:ef:40:59:d6:c1:cf:7d:25:33:00:2e:61:8d:cd:
5f:ea:8b:68:a9:af:99:27:97:7d:9f:68:a8:68:da:
a8:47:ba:aa:c1:66:52:2e:14:da:a7:22:25:c9:c3:
ea:a0:97:95:56:33:e6:ce:c9:47:4e:6c:ae:27:87:
83:ea:18:3b:fa:9d:7b:55:4c:ac:0b:da:ac:39:fd:
f5:f0:17:b3:b9:ee:16:74:cc:a3:71:2d:eb:0b:35:
7b:4a:15:c3:d9:e3:b6:06:dd:df:0c:0c:e1:97:66:
ae:c1:0b:95:d3:ea:27:d3:80:f1:aa:9b:37:d2:f9:
fe:47:52:96:84:50:49:37:3e:88:3c:32:57:d5:42:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5A:E4:8D:5E:9E:AC:CF:4C:52:40:F3:7C:0A:A1:8D:58:B6:8E:41
X509v3 Authority Key Identifier:
keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2f:ff:cf:c0:ef:08:79:d4:07:58:ef:e1:1c:41:6a:ca:2e:
a0:82:00:52:b4:29:1f:a6:8e:0c:08:6b:81:76:af:9c:05:ae:
fb:ce:42:fb:15:4b:7b:a2:e1:c0:7d:46:fe:99:3c:9f:2e:55:
71:6d:89:38:41:37:3a:07:e4:96:85:d9:6f:19:54:a4:6e:6c:
e5:9e:ec:2f:c8:09:0a:14:21:ed:e5:be:00:e9:38:07:4f:2c:
e4:c3:f7:2e:75:0d:d6:22:e3:9a:2b:3b:5e:9d:7a:71:4b:ab:
7a:ff:09:3a:54:1e:8d:23:72:ad:a4:2e:03:c9:d3:f2:d7:a9:
3a:b2:b1:ca:86:b3:c5:10:44:3e:21:85:e2:fe:8a:93:b5:83:
1b:89:86:e0:de:b0:0c:76:47:a2:4a:93:d6:2c:09:21:35:75:
56:81:cb:23:41:1e:e3:1c:83:90:1d:ea:b2:d5:02:26:2e:f6:
37:aa:19:71:8a:f4:7a:da:86:85:31:ce:d5:d3:9f:cf:ca:9b:
f2:e3:ff:81:f6:e9:8f:6b:d2:bd:20:6b:14:16:2c:84:94:84:
27:54:33:b3:ea:eb:68:c7:2f:c5:05:62:8d:93:03:7b:c9:cb:
b0:48:f8:08:7c:fd:dd:cd:c4:c3:e0:36:91:e4:13:4d:3c:0e:
86:f7:3f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:51:27 2026 by rpki-client