
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
File: T8X9jSdo5Al3QhkY-xOcM12_g4A.mft (raw, json)
Hash identifier: 4VV7Kl2xABK54qDFzknXJBORFjxs1/r/g5k2m82QaXs=
Subject key identifier: D0:39:9E:97:DD:DC:06:8E:7B:F6:57:C8:92:03:A2:6C:F0:A7:CA:89
Authority key identifier: 4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80
Certificate issuer: /CN=A91B539C/serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
Manifest number: 44
Signing time: Sun 25 Oct 2026 08:49:20 +0000
Manifest this update: Sun 25 Oct 2026 08:49:19 +0000
Manifest next update: Sun 01 Nov 2026 08:49:19 +0000
Files and hashes: 1: T8X9jSdo5Al3QhkY-xOcM12_g4A.crl (hash: RFM+sy3ttuzo5/lQS0FjuY2KQRRit1mb+nWmWQ8of5w=)
2: DB14F0D8688611F19B84FAD56C47A888.roa (hash: 74bk58//l9arlYq1z7u+T+hfveHOzEv+5Ygge/tEw9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl
rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B539C, serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
Validity
Not Before: Oct 25 08:49:19 2026 GMT
Not After : Nov 1 08:49:19 2026 GMT
Subject: CN=6addc28f-e049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:33:5b:2c:9d:df:29:64:ef:58:2a:02:86:
da:18:25:70:58:09:29:d2:2a:0b:28:7a:f0:20:b6:
64:8b:76:3c:9b:62:09:a4:3c:ce:60:18:b0:42:a7:
4a:83:33:42:d5:be:d4:c4:77:c2:b6:17:56:76:b4:
20:d3:bf:c4:60:8d:fc:e4:d7:47:5b:de:8e:c5:ba:
b0:b5:db:b2:9d:ce:68:66:30:23:6b:65:50:44:a1:
25:0a:a2:a8:b1:b8:70:35:c1:4f:f8:60:ed:51:c8:
a2:ee:78:cd:6a:f0:a9:2c:4e:0d:ec:7c:c4:a0:00:
4e:fd:f1:8b:8f:5b:2c:17:01:18:65:9c:52:a8:dd:
f0:9e:fb:dc:7f:22:11:57:18:4f:a2:c4:0f:59:74:
f6:44:02:bf:a8:cd:3b:b7:7c:af:f7:5d:d4:90:85:
d9:52:ff:1a:a5:83:c0:01:c4:2f:1e:b4:bd:b9:8c:
2e:b4:38:c9:3e:90:a9:ae:43:69:bc:3a:ca:f6:57:
2f:9f:fa:c9:a6:28:46:f7:2a:70:77:ca:4f:55:5b:
6b:d5:c3:23:e8:0b:d9:75:93:0c:58:fc:6b:63:69:
80:57:5c:0f:66:c6:16:79:36:66:4e:ce:ae:17:18:
03:2e:d2:ce:e2:d4:91:a2:ea:35:4b:d1:62:f7:22:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:9E:97:DD:DC:06:8E:7B:F6:57:C8:92:03:A2:6C:F0:A7:CA:89
X509v3 Authority Key Identifier:
keyid:4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:a0:31:17:1e:d5:62:0f:b5:0e:45:16:72:49:94:ce:89:81:
94:4e:93:a7:34:e0:df:0f:b1:30:f7:42:d5:ab:a9:18:6a:04:
31:28:70:c5:e0:06:fd:38:19:c4:93:e4:88:24:68:6a:3d:01:
75:a5:c1:bb:68:5a:82:93:eb:64:1f:b9:8a:6e:fc:0d:7e:f4:
34:84:d5:cd:17:e0:67:b0:11:4e:90:9e:10:13:18:9f:6f:85:
1f:a0:1d:12:85:af:4f:14:62:85:db:74:99:61:64:67:76:7f:
18:b6:67:ec:ea:56:6d:2e:a2:be:da:9a:c0:fa:90:9f:db:1c:
eb:d3:fa:d1:6d:e0:a0:38:8a:f3:88:b8:64:08:08:54:95:a3:
41:ef:1c:8d:ba:0e:0a:fb:04:3a:b7:d8:61:28:91:dd:26:ab:
96:44:bc:76:d0:db:88:c5:f4:7f:66:cc:f7:6d:ae:a6:03:3f:
24:7e:de:7b:bd:0c:a0:97:d7:34:83:1d:82:09:6c:b5:84:06:
38:ea:87:ee:67:85:f6:44:2a:da:9e:41:df:42:b3:d9:76:5e:
08:ef:90:0c:de:7b:24:c1:7f:ba:d6:f8:46:fd:4e:94:56:fe:
bf:fd:0e:26:1b:48:c5:a9:0d:cf:e2:0f:c1:a9:c2:ab:7c:ed:
05:b9:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:12:53 2026 by rpki-client