
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json)
Hash identifier: luPDll2tlDTAgHMApvOj+l//7HmI3FTlRy95loIUTpU=
Subject key identifier: F8:72:2F:DE:E3:32:7E:80:3F:20:F7:54:28:6A:B3:6F:19:99:5C:71
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial: 0597
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
Manifest number: 058C
Signing time: Fri 04 Sep 2026 15:48:03 +0000
Manifest this update: Fri 04 Sep 2026 15:48:03 +0000
Manifest next update: Fri 11 Sep 2026 15:48:03 +0000
Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: Db2/1SRkRSfDoK8YT7yWur9taC4Ny145LLpx8Pp0qnw=)
2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: M7OYmQFL8/41ldtug+5JoOUb7vy7UyfuPrmsX/809jo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1431 (0x597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Validity
Not Before: Sep 4 15:48:03 2026 GMT
Not After : Sep 11 15:48:03 2026 GMT
Subject: CN=6a9ae833-a23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:c1:5f:fb:26:1c:38:fb:7e:84:3d:3b:9b:
63:37:2d:de:c9:fa:b7:6f:b8:dc:24:fb:45:14:5b:
d1:71:e2:9a:dc:41:d6:36:ca:cf:fe:91:c7:ef:e4:
7b:cb:5f:01:ca:b9:f3:d2:83:0d:4d:1d:92:aa:b2:
58:aa:a5:98:bf:e7:ac:ab:60:2e:1c:d8:74:c7:8e:
11:aa:91:72:48:03:ca:df:0f:a2:c4:e9:cd:e9:51:
93:ae:d1:42:a9:f0:03:2c:8a:e1:e0:1d:28:30:d1:
d3:4a:28:d2:50:75:f4:34:42:46:f0:91:02:c5:f4:
9b:1d:6a:11:f3:dd:70:08:06:77:5c:d8:53:81:bd:
e3:01:41:56:9a:84:96:0f:9b:6d:d5:64:c5:a7:1a:
ed:d1:97:d0:9d:ce:93:ba:d1:88:5f:d8:be:95:04:
3e:c1:64:3a:f8:14:cf:81:e8:9a:10:9c:43:90:a6:
40:ce:fa:70:de:29:21:44:41:96:63:c4:9f:96:5b:
46:45:9e:b8:b7:a5:dd:9c:20:cd:31:0e:a4:5d:fa:
ec:3c:ed:b6:3a:be:13:5c:69:5d:09:e2:e2:c4:b4:
47:c6:4c:7a:ff:36:e4:ff:4b:6f:7b:0f:ca:8b:0d:
15:8e:88:db:17:66:2b:71:56:61:b1:48:d3:a8:9d:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:2F:DE:E3:32:7E:80:3F:20:F7:54:28:6A:B3:6F:19:99:5C:71
X509v3 Authority Key Identifier:
keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:3b:91:cd:1c:4e:50:0f:03:75:18:e8:32:e6:24:2f:7f:
51:e6:b1:3e:44:d6:d3:ab:d4:96:6e:08:99:94:52:b1:55:92:
8d:97:c4:e6:5a:a0:fa:09:4b:6c:99:79:56:2d:ce:bc:6c:d3:
a4:6f:42:cf:e1:00:91:8e:4c:f1:8a:65:66:ab:88:58:11:70:
14:a4:2a:45:c1:ff:86:0e:19:e0:dd:ee:1b:e3:12:a2:4b:27:
2b:fc:7f:07:b0:32:30:a9:0e:1c:36:f0:5b:e8:ca:a3:1c:b1:
56:d6:ca:7e:2f:6d:7c:07:0f:b3:45:31:9d:f6:4e:7f:fd:99:
7e:8f:93:af:ad:e5:29:f6:c6:2b:a9:96:11:f7:c9:e8:87:85:
ce:38:c8:81:c6:a1:28:59:c7:67:b0:e8:c8:c0:41:10:23:21:
8e:24:51:be:7c:c6:25:78:a2:5e:ba:61:90:0e:6d:b6:19:00:
25:7b:59:af:79:d9:bf:58:e9:02:8e:01:74:bc:71:72:65:54:
c9:ee:44:34:c8:66:4c:83:d9:c5:86:aa:8d:1d:1d:60:06:08:
8c:e9:f3:ad:30:be:d9:0e:1d:99:9e:b5:cc:be:b9:17:d7:51:
50:9c:39:c2:d0:a8:7f:fe:b3:27:aa:bb:65:a5:73:c2:3f:e3:
34:6c:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:25:17 2026 by rpki-client