
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json)
Hash identifier: V2wKPOx3zvDS8+XHSpBpucZymCUuKRim8h0k10n0jis=
Subject key identifier: 4A:62:B8:D5:A4:01:F5:38:5C:5B:A3:35:D7:0B:EB:02:D5:01:AD:03
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial: 0E5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
Manifest number: 0E4B
Signing time: Thu 08 Oct 2026 17:51:45 +0000
Manifest this update: Thu 08 Oct 2026 17:51:45 +0000
Manifest next update: Thu 15 Oct 2026 17:51:45 +0000
Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: KxOt/ptFJrq0sJlwpqQBk4tm68gY7AOua3XB84PxL1Y=)
2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: 3dUCIeGW9ZSEXPUxbipGG/ek5tGQ+5C3cytMAnP5RWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3676 (0xe5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Validity
Not Before: Oct 8 17:51:45 2026 GMT
Not After : Oct 15 17:51:45 2026 GMT
Subject: CN=6ac7d831-1f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:5f:f1:4b:7c:25:51:e0:42:ff:0f:62:e1:
31:36:b4:48:6d:0e:49:69:1f:df:a3:63:bc:6f:3d:
ff:3f:68:0e:bc:35:ac:7b:c9:da:9d:c8:cb:7b:22:
ad:c7:ff:53:d6:54:8d:ba:9f:d9:b1:0f:cb:1c:d8:
67:85:7b:af:45:10:b5:d6:ec:50:8b:12:e2:cf:1e:
db:ed:af:6f:9d:ea:68:97:b5:e5:70:ee:ac:f5:11:
42:b8:8a:ff:82:99:a5:a5:36:4f:91:75:84:86:58:
d1:0a:38:b7:e8:81:14:ea:64:a5:6d:45:ce:4b:47:
c6:9e:44:87:68:91:20:c7:24:f9:dc:3f:56:d7:42:
70:5c:62:55:83:8a:f7:bb:b2:da:93:0f:bd:3c:8d:
36:70:19:e7:b8:54:24:63:be:c3:49:7d:e1:15:fc:
3a:a1:73:ee:8c:ea:05:cd:15:83:40:ff:19:a6:9e:
4a:1d:94:90:9a:df:0d:41:1f:32:a9:b2:15:d8:5f:
ef:66:57:19:f3:ba:1f:31:c5:5b:79:68:fe:8e:f6:
dd:02:1d:a4:74:c9:2a:04:0b:80:1b:3e:65:79:cc:
fd:3e:82:6f:01:6e:0a:de:84:c3:51:6a:3c:de:03:
1e:22:5f:be:80:bc:af:ec:95:59:f1:8d:af:e2:94:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:62:B8:D5:A4:01:F5:38:5C:5B:A3:35:D7:0B:EB:02:D5:01:AD:03
X509v3 Authority Key Identifier:
keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6d:e8:16:13:7f:c5:9a:d3:6e:14:e1:8e:3c:6b:a1:2d:32:
f4:f2:51:4c:e7:3e:e5:0d:3e:a1:c6:92:09:da:4d:5f:1d:3c:
63:7b:48:80:24:24:14:d6:ed:d3:d3:cf:8e:bd:70:f8:d8:fa:
4e:9f:11:88:37:8d:dd:65:b4:9d:76:44:08:40:82:5c:3c:e8:
56:a3:25:73:54:32:1a:74:a9:90:d8:0a:06:f3:0f:9d:bc:4f:
51:03:dd:da:2e:90:f5:41:6e:67:52:33:3a:ec:c9:45:c5:7c:
51:c8:7e:22:84:1f:61:a6:83:b7:ce:c7:15:59:38:c6:26:18:
05:6a:9f:2b:e6:16:2a:db:68:b7:a3:d7:ad:a1:e6:8d:43:36:
1a:83:70:a0:ae:10:32:39:26:f2:85:a4:2b:f7:51:55:b5:93:
7b:b5:6e:f4:fc:af:9b:21:f0:a8:f1:67:6b:7e:79:b1:d8:f3:
58:49:a6:63:4d:8f:db:1d:b0:5c:ae:8b:13:c8:c4:49:3a:5c:
ce:b6:6c:8d:af:b1:70:64:52:34:29:db:74:6b:b3:d6:8e:70:
d4:84:ac:f7:73:8f:00:da:d9:96:68:d5:25:8f:7c:87:50:6f:
23:4b:d0:fb:cd:2e:81:0a:0e:2c:db:7d:c4:d4:90:15:42:4b:
e4:03:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:27 2026 by rpki-client