
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier: YQIXfn5Ie3iHYUxBSD7HMrNBcNkO7PLUf/HWJ5sShIE=
Subject key identifier: DD:E1:83:7F:3F:04:F6:62:67:28:A8:16:03:6F:D0:C0:63:1F:33:25
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial: 04BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number: 04B1
Signing time: Thu 10 Sep 2026 23:46:33 +0000
Manifest this update: Thu 10 Sep 2026 23:46:32 +0000
Manifest next update: Thu 17 Sep 2026 23:46:32 +0000
Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: Nqt79h0pMmr52OVGPb9PfLraRCkt/5CF74qbX5ZZwyk=)
2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=)
3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Validity
Not Before: Sep 10 23:46:32 2026 GMT
Not After : Sep 17 23:46:32 2026 GMT
Subject: CN=6aa34158-a3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:c1:d7:5a:7f:76:5a:b2:53:e7:8d:91:63:
e4:33:83:92:12:44:ea:60:cc:2c:0e:8e:23:59:92:
e5:28:fe:52:ce:e4:99:57:59:78:c6:bb:35:cc:2c:
e8:08:9e:3d:6a:ab:21:65:40:fc:3e:b5:42:5f:f0:
dd:b3:c9:54:17:7c:3b:db:49:02:ae:a3:1d:66:45:
df:45:8d:f0:d8:3b:79:10:71:38:fb:6a:20:2a:05:
54:8d:13:3d:fa:c7:0b:a7:7d:6d:1e:cf:58:b1:d1:
44:82:97:d9:23:44:1b:85:b4:b8:57:99:49:77:ad:
3d:fe:04:11:80:c0:e6:28:0e:1d:64:fc:fa:4c:f8:
44:02:55:85:dd:14:ac:b3:fa:5c:68:75:94:18:40:
a1:4c:82:b7:0f:e2:cd:9a:15:47:3a:84:11:0d:6d:
fe:6e:04:aa:c6:14:76:2d:7c:f5:e7:e1:9d:a2:ac:
00:c9:ad:32:27:7e:92:a9:fe:c3:e4:96:1c:04:66:
47:7e:89:77:71:9b:55:91:f6:24:55:8c:63:33:9e:
8a:19:0b:ad:88:9d:5f:8c:32:14:70:f3:97:13:f0:
d8:14:ce:e2:ec:fa:8e:88:c8:2b:59:8b:43:43:9b:
43:00:d8:43:71:9e:e9:04:ab:82:e5:0b:93:c0:70:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:83:7F:3F:04:F6:62:67:28:A8:16:03:6F:D0:C0:63:1F:33:25
X509v3 Authority Key Identifier:
keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7a:d2:8a:3a:94:a3:ec:df:1a:bc:bb:40:e3:ff:43:08:5e:
f5:d1:77:c6:e2:b4:15:1f:2b:10:7f:86:ea:52:94:76:25:70:
9a:79:d5:5e:a5:89:f4:d7:8f:1d:1e:92:5f:c0:15:d8:c7:5e:
bd:1c:2b:1c:10:7e:a3:5a:e2:de:33:38:9a:c2:1b:0a:8f:a8:
7a:bb:2b:a6:dc:53:30:97:39:6e:e4:fb:a3:45:01:7e:4c:c1:
7f:cc:c3:47:cd:58:46:f0:bb:da:0f:d0:7d:1f:5d:d7:d4:97:
59:e4:f2:14:33:e5:1e:ed:fd:2f:25:f8:3d:90:1c:37:07:ab:
6a:69:c8:c6:1a:1a:91:dd:7c:8f:4e:e6:2d:d8:82:98:d3:79:
c1:a7:71:16:2a:aa:14:10:82:87:a0:80:e9:88:4f:36:f3:9c:
c9:21:9c:8a:51:fb:0f:76:f9:95:59:47:90:ea:b7:65:22:3f:
03:a8:2f:e4:95:ed:00:59:7b:14:aa:e9:f6:e1:63:d0:17:6d:
0c:af:67:4e:da:b5:5f:cf:dc:e7:43:0f:c7:59:1d:02:a9:d1:
57:35:f0:30:e1:71:98:50:21:5d:5b:18:93:c2:e5:f7:84:de:
89:50:ad:ee:1a:d6:00:09:12:72:4d:21:b8:a3:e3:a8:2f:38:
9b:c8:51:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:14:04 2026 by rpki-client