
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json)
Hash identifier: 9ATmflqSS7sV8IPM3kNkmXMEa7EjS/hYcAyPwJ2fVgw=
Subject key identifier: F8:39:D9:6E:28:FA:6C:6A:DD:27:B9:26:6C:1B:5E:F7:A9:09:7D:C6
Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
Manifest number: 0185
Signing time: Mon 19 Oct 2026 00:52:29 +0000
Manifest this update: Mon 19 Oct 2026 00:52:28 +0000
Manifest next update: Mon 26 Oct 2026 00:52:28 +0000
Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: YVLr1uevWnawIaE4yXHiUW4GZmng4UvmjNFgp9C7ZOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl
rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
Validity
Not Before: Oct 19 00:52:28 2026 GMT
Not After : Oct 26 00:52:28 2026 GMT
Subject: CN=6ad569cd-71f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:c2:4a:b7:da:5a:2f:2f:cb:c4:78:aa:d7:
b3:55:47:08:91:a4:1f:99:50:56:0e:c8:d1:3b:23:
6f:17:a3:f0:17:4d:95:97:d1:a1:af:32:25:b7:4b:
26:8e:75:0f:69:2d:52:9a:a2:54:d7:ab:da:cc:5e:
83:d9:ef:f6:8e:f1:b4:31:b2:7c:f4:b3:2f:09:f9:
e9:85:e1:0f:5b:cf:a8:f8:f4:51:cb:03:77:f7:67:
aa:15:d4:2c:0b:72:16:88:b6:70:38:fd:83:2d:3e:
e4:28:7b:d3:72:6b:71:f9:5c:7c:1a:ca:93:e4:c9:
89:19:ef:95:f8:69:fd:b3:91:54:28:14:42:1f:07:
df:10:02:bb:f2:55:c9:a8:2b:55:88:ed:fa:9b:f7:
48:75:0a:d1:47:60:c4:84:57:a9:59:43:a3:80:5d:
cc:e7:dd:25:7e:bc:a1:0c:80:f8:1b:f1:61:35:94:
82:3e:20:95:13:62:8c:88:d6:17:5e:65:97:d5:29:
2f:05:84:c0:9e:54:5d:98:87:6e:0f:10:a4:72:83:
63:27:c0:07:a7:c2:b8:f4:8c:f7:c0:d0:9c:8e:3d:
06:f7:ee:ed:84:c1:6b:83:52:3a:13:53:82:0d:87:
57:92:7f:b9:8f:68:27:7e:66:61:16:e0:6f:ea:f8:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:39:D9:6E:28:FA:6C:6A:DD:27:B9:26:6C:1B:5E:F7:A9:09:7D:C6
X509v3 Authority Key Identifier:
keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9f:5c:50:4f:c1:2b:a4:21:e0:ec:33:f0:65:94:37:af:28:
5b:9e:2e:60:e4:43:33:6d:f1:ba:9a:9b:86:9d:9a:a4:c7:92:
06:f8:10:8d:da:d0:bc:b7:91:b1:3c:85:4d:2d:5e:cb:c8:d2:
14:dc:b4:be:b6:0d:34:ba:ec:14:05:08:bd:b9:77:fe:d2:a4:
6d:d0:b9:ce:e3:aa:4e:5a:23:ea:61:0e:bd:7f:71:3e:42:47:
79:84:97:6a:d6:ee:bd:42:6f:d7:1a:2e:51:22:a5:9c:1e:c0:
cf:68:33:59:ff:70:2d:c7:ab:30:b1:97:f0:a2:80:f6:a7:9c:
c8:1a:94:00:80:5d:bc:15:b2:b3:2d:8f:03:2c:da:d8:6c:e2:
41:ef:e2:e6:8b:69:99:5c:bb:39:2d:6d:45:89:1e:cc:59:aa:
44:96:04:a6:6d:35:89:c1:6e:8e:ce:c6:a6:b7:34:cb:8a:ac:
ed:b6:0e:0a:6f:4d:75:1b:bc:17:b9:66:14:ad:29:3a:65:3a:
35:89:3c:d5:62:60:0c:1a:90:d5:9c:8c:82:0b:f7:17:0f:d8:
4c:01:0f:aa:ff:b1:44:65:c7:04:df:18:77:fd:42:50:b9:d9:
19:26:c7:d5:31:2f:0f:fb:86:5b:4d:32:6c:36:20:39:e4:aa:
1e:a9:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:12:31 2026 by rpki-client