
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
File: _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json)
Hash identifier: tor44mIubI9NdTO+jCvd4Zq+tIJ9HYHDYwy9Blxr3Cs=
Subject key identifier: 1F:07:C8:AB:28:AC:E2:A9:25:6F:29:8B:93:D8:D6:89:4A:16:58:5D
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Certificate issuer: /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial: 0B00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
Manifest number: 0AF3
Signing time: Thu 10 Sep 2026 19:19:38 +0000
Manifest this update: Thu 10 Sep 2026 19:19:38 +0000
Manifest next update: Thu 17 Sep 2026 19:19:38 +0000
Files and hashes: 1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: I/BhjCYPz4nDfVrwgSFscMyWbaP/lUZOCvBzaDVyBQo=)
2: 503D2222018111EBB0502527C4F9AE02.roa (hash: MCzUyxnTRehmJMjRKUltJb5xp2lunuQcTMASQVMB0GE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2816 (0xb00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B66C5, serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Validity
Not Before: Sep 10 19:19:38 2026 GMT
Not After : Sep 17 19:19:38 2026 GMT
Subject: CN=6aa302ca-e96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:81:49:4f:2e:d3:a2:b4:87:4c:f7:68:37:
77:bd:6f:43:d8:48:6a:97:56:8e:75:7e:20:89:32:
95:c1:1a:bc:90:2d:9b:43:c2:59:04:33:72:70:9f:
53:b1:1b:ca:ac:0d:04:90:40:c6:a9:80:1f:b7:5c:
72:a6:67:22:d8:39:9c:a0:fc:91:e9:a9:83:9e:52:
30:d1:aa:39:c4:30:3a:6d:b2:23:17:8d:ee:1e:54:
bd:45:97:1b:8e:81:91:a3:be:0b:de:49:cd:40:85:
d8:22:6a:ee:88:82:96:18:50:64:98:43:c5:6f:85:
6e:9a:11:a9:a1:a4:6e:31:b2:4f:c7:41:83:53:79:
b7:8b:0f:50:8b:f3:ab:c4:eb:2e:c6:ab:bb:67:93:
be:bf:64:a9:d6:a4:b6:16:70:91:01:42:78:de:a6:
04:23:6a:d1:59:b8:1d:ad:dd:64:91:6a:a4:6b:66:
f3:ee:28:02:20:99:ba:d0:31:ef:cb:76:66:62:54:
70:66:7d:c5:15:73:8b:cd:38:50:c2:6f:5c:ad:69:
0e:57:26:76:49:ab:78:c4:ce:d3:d9:10:cc:f4:f8:
6d:c0:8a:84:7b:58:75:3b:6d:68:99:b6:2b:80:60:
b5:17:9e:c8:56:ce:7c:39:70:b5:71:a5:c3:94:e5:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:07:C8:AB:28:AC:E2:A9:25:6F:29:8B:93:D8:D6:89:4A:16:58:5D
X509v3 Authority Key Identifier:
keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0b:f6:ce:48:b7:ac:00:0b:5f:af:dc:00:d1:f2:9a:56:39:
35:83:33:78:10:a0:3c:c9:af:16:cb:7e:00:6b:3d:33:7f:84:
a8:ce:c1:fe:17:8b:ee:1f:d2:70:46:f9:7b:8b:98:b1:a9:6e:
04:3d:11:19:a5:e1:9e:9f:40:ac:2a:d3:08:a5:5b:4a:e1:e0:
2a:0c:1a:73:f2:8c:60:c6:78:1c:26:0a:32:79:64:53:8e:60:
d8:0c:dc:f0:56:82:cc:6c:b0:a1:4f:ac:97:14:d9:26:84:1d:
e0:ea:7e:3b:49:b3:f8:f4:ac:72:db:02:0d:5a:f0:d5:8c:ef:
db:21:85:b1:b5:3d:d9:6b:2b:08:dd:c4:c1:cd:4e:e0:17:7c:
87:17:a7:fb:6b:c6:38:df:85:6c:d6:f9:4d:bf:14:90:26:84:
8c:e2:e1:e2:89:e5:78:0f:1f:67:c7:45:ed:24:9c:d6:bd:e9:
4d:a8:f1:63:b0:d3:d7:15:43:b7:a3:22:53:29:61:ae:82:a8:
3b:2f:3e:71:9c:7a:c5:40:2e:a4:84:a0:37:e1:80:dd:ab:1f:
56:d8:d5:6e:55:5e:78:13:e4:cc:28:e1:1c:fd:a3:05:55:3d:
f9:0a:0a:e5:1d:99:dc:25:81:2f:c4:bf:b9:a2:19:dc:cd:25:
16:ff:9b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:17 2026 by rpki-client