
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
File: up0rragmh4TwCuhYcC744p5ytLw.mft (raw, json)
Hash identifier: lagPga1gOso9czBbO+hZUnaOG2C8M67gj68N8JN1bJQ=
Subject key identifier: 7B:6E:32:85:5B:E0:37:D9:7D:EC:10:4A:82:3B:B1:01:0B:58:FE:91
Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Certificate serial: 35B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
Manifest number: 359F
Signing time: Tue 06 Oct 2026 14:30:21 +0000
Manifest this update: Tue 06 Oct 2026 14:30:21 +0000
Manifest next update: Tue 13 Oct 2026 14:30:21 +0000
Files and hashes: 1: up0rragmh4TwCuhYcC744p5ytLw.crl (hash: ocW674uF8OJPkonBhQByFPYos1I/bleF9FL4mt95yM4=)
2: D4A8FF0273ED11F08E63C02DC4F9AE02.roa (hash: tHMeyTgXVjqu1F3xAY8dG3i7T9LkiFUkLAwr5V1RAGo=)
3: 58D5764A683311ECB9C17757C4F9AE02.roa (hash: y6Cb0qWIx1yRlu9RsKzzdkQCpXsOgAgmZ5vTiuWgcQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13753 (0x35b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Validity
Not Before: Oct 6 14:30:21 2026 GMT
Not After : Oct 13 14:30:21 2026 GMT
Subject: CN=6ac505fd-6c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:1d:1f:5d:de:4e:4a:4b:77:e1:ea:5b:c4:
de:ca:01:84:ff:70:70:f9:3a:9c:33:42:98:f7:59:
52:48:18:f3:ae:9f:0c:16:0e:37:aa:2f:9c:3f:ff:
f4:01:67:05:7e:bf:b5:40:93:c8:0a:19:af:da:28:
50:f7:29:bf:e5:09:67:ca:5c:fe:ff:03:2b:f2:46:
7a:29:30:45:51:e0:41:81:8b:6c:6a:e1:f0:66:b4:
c1:0f:45:8e:0b:a8:1c:28:1f:e9:8c:71:22:79:81:
d7:b2:38:74:2e:0e:42:50:37:11:84:fd:e8:20:bd:
f2:6c:70:47:5f:1a:89:76:e9:32:fe:0b:7f:36:84:
cb:46:10:1b:26:4a:ae:30:b1:f7:71:30:98:55:08:
78:60:f4:19:e6:33:66:3c:dc:8d:60:57:f1:5e:22:
97:6f:44:b4:cd:2b:98:c7:4d:a8:3c:72:df:03:69:
06:c7:28:a8:2b:ef:65:bf:49:61:09:6a:cf:08:1d:
7d:a8:db:30:c4:8e:f5:8b:6f:1d:6c:d4:cb:83:26:
83:28:57:9c:77:39:2c:91:5b:59:cf:c4:b5:58:35:
d6:c8:b1:96:3b:75:14:2b:e4:01:dc:e2:d6:99:6d:
24:7f:e4:df:06:5a:b5:ea:5c:38:2e:05:ae:4f:f2:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6E:32:85:5B:E0:37:D9:7D:EC:10:4A:82:3B:B1:01:0B:58:FE:91
X509v3 Authority Key Identifier:
keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:82:0b:1c:c6:e2:2c:b7:27:64:67:b2:c8:05:f5:0d:cc:73:
37:15:c9:3d:54:f4:d1:eb:e8:15:f1:bd:02:83:0e:d7:39:4c:
f7:5a:1f:b7:48:96:64:85:e2:40:a0:9e:f7:a9:7c:7c:87:a5:
20:93:85:13:cd:6d:a4:13:10:30:3a:1c:8c:9c:20:1c:55:05:
fb:fb:86:45:42:11:14:b1:2a:ee:91:21:8c:81:26:e4:31:e0:
fb:b8:66:25:a0:51:eb:9b:54:78:b5:01:b4:1c:a0:bf:03:ab:
46:13:18:8c:f2:b2:43:14:8d:41:37:ed:c0:95:bd:be:22:dd:
82:f1:22:e6:1a:2f:81:da:ef:46:ee:f1:1b:8c:5b:78:20:72:
cc:86:91:9e:8e:8e:d9:50:41:9c:02:58:6b:2a:4c:cc:8c:de:
e4:9e:e0:74:88:b4:2e:eb:a5:83:2d:09:30:91:ca:90:3f:ce:
f2:fe:34:2a:a3:d0:96:9c:6b:28:1e:17:69:45:63:0f:6a:cb:
47:57:85:8c:23:11:1b:5c:44:b8:ff:3b:ac:b5:12:93:4b:23:
79:8b:02:e7:21:fc:6d:7c:70:4c:ef:3d:68:14:20:e9:09:bd:
90:c4:b3:b8:1b:7c:71:17:60:4b:c1:d6:93:47:b4:ae:e7:a8:
ad:79:b6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:34:53 2026 by rpki-client