
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File: AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier: jPuYYcN7NJJLDv7Yyg7gyLxU/EbMs1vTvAif4+79OCg=
Subject key identifier: E4:9B:6F:02:41:EB:59:11:E4:66:28:EF:98:E8:BF:D9:3A:8B:07:D1
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer: /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial: 0395
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number: 0385
Signing time: Wed 21 Oct 2026 00:56:09 +0000
Manifest this update: Wed 21 Oct 2026 00:56:08 +0000
Manifest next update: Wed 28 Oct 2026 00:56:08 +0000
Files and hashes: 1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: MIHvQJYhIlNxw8Iao9aqjGYprfFmAqLEtgvC4x+khp8=)
2: 09C6BFEEB01011F1A6F6C7676C11F970.roa (hash: hufxRF71ZRGQm/acHGRYYjENu87o9m9uiwMosR8VESc=)
3: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: jOWeJjRUQeO9Y5OSUo0r5cvkNyYl/SeiJy5tV7P1Si4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917 (0x395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Validity
Not Before: Oct 21 00:56:08 2026 GMT
Not After : Oct 28 00:56:08 2026 GMT
Subject: CN=6ad80da8-9c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:ab:9a:c8:e3:f2:18:c3:e8:42:cb:8a:10:
f0:d0:79:0c:05:0c:e1:a9:5d:19:e6:54:df:88:32:
82:24:44:7f:63:78:9f:52:00:7e:5e:ea:c8:45:00:
f4:f0:b4:24:25:27:03:15:aa:45:04:1a:4a:e6:29:
54:ac:75:23:7d:e1:12:cc:13:f5:52:6f:85:10:43:
b7:73:f7:74:33:0a:fc:fb:96:c3:e4:d2:c0:51:13:
75:b4:7e:a6:b8:50:f6:58:15:f6:47:ba:0e:cc:4d:
e4:b9:f5:9d:14:0f:dc:3c:f5:a9:65:aa:b0:dd:c6:
ff:7e:25:30:f7:8a:f9:38:17:77:13:c7:46:33:b8:
84:b2:91:7c:57:2a:75:e6:0d:66:c4:7c:e5:c6:74:
8e:a5:cd:48:c9:78:41:d5:67:dd:71:1b:dc:7b:69:
92:66:fa:22:b0:0c:39:0b:36:e3:b7:90:ad:31:b0:
d6:15:23:8d:29:ed:88:4d:3e:fd:ec:30:56:be:9b:
0a:06:9c:07:2c:26:da:9f:b6:3c:41:b6:e2:b8:41:
26:46:f0:5a:c4:6a:03:0a:7e:77:b1:4c:5c:31:51:
f3:8d:b6:a8:a6:72:00:c1:1e:4d:58:f5:7b:a1:6b:
9b:29:ff:4f:35:2d:f4:49:75:26:6f:17:2d:e5:d8:
ed:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:6F:02:41:EB:59:11:E4:66:28:EF:98:E8:BF:D9:3A:8B:07:D1
X509v3 Authority Key Identifier:
keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5e:cb:f9:57:54:29:af:0f:58:3f:96:88:3c:c5:23:a4:b8:
2f:71:92:20:60:80:fc:3f:e8:3c:a4:5a:0e:2a:20:99:11:73:
84:33:4c:fe:99:7d:ec:b4:96:dd:43:a3:6c:28:3d:1c:81:fc:
2f:d6:15:b5:31:6e:64:20:ef:67:e0:41:57:db:4a:6d:20:47:
d9:b5:3e:95:f8:2b:7f:0f:af:bc:a7:88:12:30:f0:00:34:76:
dc:72:53:d1:d3:ce:e1:76:65:7c:d4:5a:b7:b8:4c:d0:a8:c3:
24:bc:8a:56:9d:d1:a0:31:00:80:d9:53:da:e1:39:7e:6e:b1:
68:e2:61:2c:fd:f7:a4:29:d1:a3:55:30:92:c0:0d:3b:06:f5:
6c:9c:8f:a0:81:4b:48:a8:2d:88:69:90:3b:6d:de:3d:3b:e4:
68:b1:2f:be:39:eb:89:3a:89:e1:89:07:39:a8:5d:a0:db:bf:
4d:39:c6:f0:67:70:f0:6e:07:00:e7:76:20:b5:dc:42:8b:bf:
3e:47:49:a1:07:dd:c8:99:1e:3e:7e:23:34:5e:cd:74:f1:18:
d9:8d:ea:38:89:8a:c6:57:64:18:86:58:c9:14:5b:ed:d4:56:
37:14:23:3f:4b:09:e6:d9:e3:38:34:b7:6e:45:63:b9:1e:60:
b5:3f:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 18:08:48 2026 by rpki-client