
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
File: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft (raw, json)
Hash identifier: au0rLgNWGSwkGHRHNDci+qj9O6+VJ6ZxjAc2N5lkbCA=
Subject key identifier: CC:68:3A:8F:81:71:A9:B8:06:AB:D3:BA:4D:0C:90:CF:C1:12:2E:5B
Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
Certificate issuer: /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
Manifest number: 017E
Signing time: Wed 19 Aug 2026 05:17:18 +0000
Manifest this update: Wed 19 Aug 2026 05:17:18 +0000
Manifest next update: Wed 26 Aug 2026 05:17:18 +0000
Files and hashes: 1: 9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl (hash: U/Tb3m3vZu1x8gQcvWNK1ixiyz839C/1jg6zeOmBgV4=)
2: 50D93D94459A11F095E57A12C4F9AE02.roa (hash: jFQyp9A0jxh8bH4gGrf9ly/lEjVIKy3LPj4bj2YPMKc=)
3: 3B5B829EABF511F08C00BC38C4F9AE02.roa (hash: hmChBrVE0EuRQzKDJ7uKwkJY+XVRktN6YzaNk+odT7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF3E2, serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA
Validity
Not Before: Aug 19 05:17:18 2026 GMT
Not After : Aug 26 05:17:18 2026 GMT
Subject: CN=6a853c5e-b202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:df:ff:b8:4d:a5:06:9c:53:82:b7:f9:0e:a6:
eb:87:c6:25:33:70:eb:60:c8:1a:3b:2f:22:62:76:
4a:35:fc:d3:36:ec:eb:af:d1:01:9e:7c:72:1f:63:
9f:a4:e3:77:75:63:18:4d:d8:a9:e5:cd:a7:46:d4:
74:13:3b:94:f9:92:dc:99:70:44:aa:8f:54:b8:e5:
7c:df:e6:dc:53:ca:3e:1a:9e:bf:72:6b:c3:84:ee:
2e:59:9b:9c:cf:28:1b:9c:d8:ee:a0:a4:08:ed:1b:
a6:bb:4b:8b:53:95:09:a0:95:10:23:7b:93:55:80:
4e:26:2e:76:b5:8e:48:69:db:38:e5:de:11:3d:55:
64:10:89:66:ba:26:53:48:fc:c5:7f:0d:d5:3f:77:
d8:e1:a2:04:68:95:25:72:fc:2e:f7:81:2e:c7:d8:
9d:6f:72:71:21:2b:ce:62:b0:52:a5:db:f8:8f:48:
a8:8b:40:c1:29:5b:83:42:d8:7a:a0:cb:19:95:34:
cf:29:ab:3f:87:cc:89:67:07:6d:52:cd:ee:70:60:
c4:a9:35:b1:f8:ff:66:71:c3:55:8d:66:c2:6d:20:
98:3a:59:77:09:ad:84:62:dc:90:3e:bd:6e:b1:12:
04:79:e7:c7:ef:99:1e:d5:b4:eb:db:01:32:72:d1:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:68:3A:8F:81:71:A9:B8:06:AB:D3:BA:4D:0C:90:CF:C1:12:2E:5B
X509v3 Authority Key Identifier:
keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:a7:95:29:b6:6e:93:08:84:f0:84:27:83:2b:85:fd:dd:
e7:d8:64:de:9e:dd:52:1e:8e:8d:e4:83:4d:a1:34:c0:2f:5e:
cf:8c:7d:af:74:6c:7e:2a:35:c8:73:81:7c:14:d2:db:f1:7e:
f4:bf:9e:21:97:8e:29:6a:6c:4a:d8:fa:97:21:b2:20:1c:81:
ce:3b:46:fb:b7:8e:b5:1e:18:4c:7d:e1:a7:7a:5e:b7:da:61:
67:50:58:aa:06:fa:12:70:b7:a5:59:85:97:a2:9a:e7:18:02:
e8:50:33:4d:cb:ad:3a:f1:d8:09:f8:22:87:91:f7:a4:fe:0b:
0a:9e:17:9b:e1:3b:cc:45:9b:53:60:46:d5:f8:57:87:25:57:
95:0a:dc:43:d8:bc:0d:1d:fe:45:69:27:5a:a2:47:4f:16:7d:
24:b4:b3:41:13:5e:2d:61:d6:0f:dc:d6:aa:7d:ae:58:1c:10:
65:48:2f:70:1e:56:4d:aa:97:21:7a:98:2d:95:db:bf:e7:36:
5b:32:6d:01:c8:1a:49:f8:f7:7d:e4:9a:48:47:48:5b:d0:0b:
8c:e4:ab:a5:46:8e:8f:e0:7f:e5:f5:53:0c:03:ad:77:68:ab:
3a:b7:73:b0:9e:0f:6b:e4:f7:58:7b:dc:90:a9:b2:36:2c:71:
43:62:65:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:33 2026 by rpki-client