
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json)
Hash identifier: 0Gp1g6Ssi2lcqj1+s+NV/n9KPXfGlidXBZZr5dEHrqI=
Subject key identifier: 9D:42:A9:28:A6:E9:87:D8:01:5E:46:B2:12:B4:DD:25:A9:52:09:57
Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA
Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
Manifest number: 024E
Signing time: Fri 11 Sep 2026 02:30:44 +0000
Manifest this update: Fri 11 Sep 2026 02:30:44 +0000
Manifest next update: Fri 18 Sep 2026 02:30:44 +0000
Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: MJxJ8ifWcOxGNjkLU6zyTUfL++QCgm0Gr6S0h9NWFUM=)
2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: I+nMBsoAOQUiZCzFaQB/KvumSoVrGOcDZwsmBZeS6yw=)
3: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: zTVOLFIEBPDpPfLXlenxlDqoCu7oEt/TG+aQAHRnkO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl
rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA
Validity
Not Before: Sep 11 02:30:44 2026 GMT
Not After : Sep 18 02:30:44 2026 GMT
Subject: CN=6aa367d4-798f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:ba:ab:88:3b:a7:a9:e9:e5:2e:aa:d3:af:
80:05:8a:85:6a:ae:35:6c:d3:82:44:b1:69:35:86:
39:8c:7f:85:9a:0d:01:e9:bd:d7:d2:33:ee:eb:62:
f7:5e:61:f4:c6:c6:fc:66:cb:17:35:1f:7e:4d:9e:
45:22:30:55:0a:19:ad:08:a5:88:cc:72:69:7f:16:
af:15:ae:14:59:d6:ce:72:b6:21:32:ee:d7:f7:b5:
a8:55:36:dc:c4:53:a3:51:0e:de:0c:dd:34:c0:db:
f4:98:b8:7b:d9:8c:55:a2:5b:29:a3:18:b3:bf:14:
5f:72:59:27:2d:5a:bc:01:39:04:f4:59:99:e9:4a:
53:43:f0:b5:ae:de:61:91:be:70:27:37:02:14:a3:
d3:22:6e:c9:1b:9b:18:0f:1d:79:89:e7:51:60:df:
07:97:16:8f:44:45:26:24:e5:16:0b:3a:dc:77:69:
78:5e:bf:76:34:4e:a7:c9:9e:b9:df:9c:b2:a8:07:
da:eb:22:87:9f:08:06:4a:9a:2a:a7:8e:b0:2a:ef:
72:8e:cb:45:ae:27:a8:8e:d2:de:0f:b7:4c:17:6c:
ef:8f:a5:22:f3:da:11:ec:0d:63:e8:1e:16:00:c2:
40:d2:80:b4:20:a1:2d:10:17:3f:37:35:09:22:5a:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:42:A9:28:A6:E9:87:D8:01:5E:46:B2:12:B4:DD:25:A9:52:09:57
X509v3 Authority Key Identifier:
keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:52:27:d1:30:fb:c6:e0:a2:bc:78:7e:a0:dc:77:59:fd:
74:0a:7a:b7:c4:00:8e:46:85:fc:20:6d:16:48:f6:28:85:f6:
40:9d:c2:fd:82:6b:b9:68:1e:e4:7c:a9:ff:02:ec:c9:c6:c8:
a0:ed:61:bc:09:cb:87:d1:a4:0d:8b:74:03:47:84:12:fc:14:
28:a6:56:df:91:2b:07:33:62:b1:67:3c:27:df:42:e6:22:ce:
5d:17:39:28:7c:1d:76:91:e1:1d:54:86:f1:0a:54:60:a6:b3:
d8:f3:2c:28:52:0f:49:ab:c9:bf:dd:00:37:53:2e:ed:58:7d:
b4:53:55:0a:c9:91:07:5b:23:88:26:d6:b6:32:da:c9:ba:55:
30:a4:38:05:69:02:a3:6b:4d:f6:4e:0f:f0:3e:19:9f:61:35:
ee:8a:b0:a0:ea:37:2d:fa:62:bb:04:84:98:85:9f:e9:65:04:
70:73:2c:42:dd:bf:97:0f:58:cf:7b:2b:37:f4:79:21:d5:1c:
d5:10:e2:91:04:f7:db:51:64:7d:c6:57:81:4d:58:5f:06:2a:
e7:ab:ce:f6:d0:19:27:c8:35:ca:70:bb:db:b0:88:53:56:2d:
b4:12:1c:b9:bd:41:54:d2:3c:6f:39:1b:71:3a:e7:4a:69:a5:
d1:25:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:08:30 2026 by rpki-client