
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json)
Hash identifier: upWDI5wd0Fk9zNeH5zkvz+ttuiTw5WmDm+tLYX4yUCs=
Subject key identifier: A0:40:7F:6E:81:DA:05:ED:0B:19:4C:69:0C:9D:A7:0D:75:BE:27:3F
Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
Manifest number: EB
Signing time: Thu 03 Sep 2026 06:37:26 +0000
Manifest this update: Thu 03 Sep 2026 06:37:25 +0000
Manifest next update: Thu 10 Sep 2026 06:37:25 +0000
Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: 4mAiX4BGPljuVkSDbce9XV1pXuFMrm1Z/25uXUnIOpo=)
2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: azH5Q9viXquY/moxc/UZ4RwNqYyQHdR8aAwu/HmXV5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Validity
Not Before: Sep 3 06:37:25 2026 GMT
Not After : Sep 10 06:37:25 2026 GMT
Subject: CN=6a9915a5-118d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1c:03:a9:23:82:e5:d1:4a:8d:4a:cf:2c:d5:
ad:e8:b5:84:98:d6:de:d1:7b:c9:5b:44:83:83:9b:
de:22:22:72:f2:6a:86:20:c7:06:42:ac:20:dd:40:
3b:98:40:37:7b:59:c1:31:a1:4c:39:e7:b0:01:0a:
cb:22:ba:61:41:76:05:d0:b0:aa:36:35:32:47:c4:
49:aa:80:27:9d:70:26:3f:c6:0e:dc:73:6d:99:5c:
b9:6e:1d:f5:25:7e:31:b4:6c:b8:20:5d:d6:d5:17:
b7:14:dc:93:0b:f6:71:3d:01:59:6e:07:6f:ac:ed:
6e:2b:11:14:ce:f8:cf:3b:e3:83:92:bf:d7:b3:f2:
b9:5a:1f:ec:68:4d:33:db:12:e9:cd:7d:da:8b:2a:
eb:b5:d7:ce:c3:c2:15:e4:96:2a:14:57:ec:01:9a:
b2:32:c8:ce:99:b9:7e:4b:9a:77:90:d4:8f:97:11:
ad:96:c1:f7:aa:5d:81:f9:78:ea:c8:64:af:45:b1:
90:e7:d2:6a:0a:eb:20:2b:9f:2c:d0:6a:fa:4c:59:
73:39:a5:73:49:76:f0:e3:43:a4:24:10:e7:c8:40:
0d:52:ca:c4:f5:89:64:4e:d2:82:43:c9:6b:a3:3b:
d5:d6:06:10:db:d4:4c:b3:a5:05:fe:85:b7:82:81:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:7F:6E:81:DA:05:ED:0B:19:4C:69:0C:9D:A7:0D:75:BE:27:3F
X509v3 Authority Key Identifier:
keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f9:78:28:fd:de:91:28:aa:a4:4a:15:bb:93:e0:46:5b:2e:
92:7d:77:4d:f3:69:10:21:a2:af:bf:f2:c5:fb:ba:c1:b8:e2:
14:17:f9:36:49:c1:72:b4:a3:84:f7:87:79:b1:aa:c2:16:62:
43:13:2e:22:3f:a0:fe:fc:fd:83:7a:28:cf:0f:5d:c6:c5:a9:
2b:a0:6d:00:b9:a8:a1:d6:ae:27:14:38:a9:8e:28:90:9f:af:
9c:4c:99:58:27:9f:8f:25:f8:1e:15:e0:3c:3d:a7:1d:93:2d:
84:ba:bc:26:4b:f8:9d:91:ec:82:21:2a:cc:60:ee:b2:52:d6:
7b:95:24:69:b2:eb:d6:05:6e:3b:c0:68:c3:55:b0:9e:1b:6d:
25:09:50:d5:4a:10:32:fe:d5:95:1e:fa:16:17:fa:4a:ee:6d:
be:2f:f1:d4:00:82:d4:46:5d:9d:6f:e6:5e:51:91:6b:8c:7e:
84:7f:bd:bc:3a:7f:ef:61:d9:39:4b:67:69:44:ba:dc:49:93:
2f:56:35:76:c6:e3:4c:b0:48:24:3f:46:82:16:9d:f3:dc:98:
cd:5a:e6:b6:3d:a1:12:c0:33:3b:d7:4a:a6:ce:f6:4c:34:6f:
5b:9a:74:0d:4b:d8:ff:c4:84:d3:ab:15:66:2c:ca:9b:04:43:
5b:23:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:18 2026 by rpki-client