
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier: GnwyDbVWKzetMBSgDe438FDSUE3jwVvvjpHxvdLPI2g=
Subject key identifier: E4:5E:31:C9:5E:66:9B:94:EB:13:6C:F9:15:24:C7:0D:9B:D8:6C:65
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial: 0C40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number: 0C32
Signing time: Fri 02 Oct 2026 19:01:18 +0000
Manifest this update: Fri 02 Oct 2026 19:01:17 +0000
Manifest next update: Fri 09 Oct 2026 19:01:17 +0000
Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: 5X9aELVjNPQ7WtjXcKtCjocGORaqx9207RuHLC+aWc0=)
2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: dxEGaAO8JBy9GnUoBfPgPXQ8oe1hURdfryAzDRhp00Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3136 (0xc40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Validity
Not Before: Oct 2 19:01:17 2026 GMT
Not After : Oct 9 19:01:17 2026 GMT
Subject: CN=6abfff7e-573a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:90:bd:4f:53:2a:ee:e8:a9:fb:ae:10:9d:
47:24:f9:7c:aa:c1:cd:9a:a8:9d:60:fb:28:71:8a:
bf:b8:b7:2f:12:7e:b5:3b:a7:9e:d9:17:40:2d:e9:
ad:fe:03:ff:d3:d1:fe:df:bf:39:70:de:81:4a:12:
50:d6:5d:a1:0f:51:ff:99:f2:73:14:93:ee:67:cb:
7b:5f:08:87:c0:d9:17:b4:90:f9:d0:fc:59:1d:ee:
c2:57:de:6b:9d:23:41:07:ab:b0:02:71:4f:c4:83:
d1:7f:b1:fb:de:c2:83:0a:6e:cd:44:cd:48:30:19:
ed:0e:2c:0b:4a:f0:87:58:5a:15:cc:8e:38:97:bd:
0a:80:6b:43:65:1e:cd:6f:47:a0:ec:42:90:37:eb:
56:ac:e0:6d:c9:03:9c:fb:45:12:4b:ef:bf:5d:c0:
db:0c:05:63:72:9e:c8:b1:ab:f8:d7:ae:12:f4:1d:
46:d9:07:bb:30:d6:2b:88:63:56:8c:38:a3:85:d9:
f0:ad:bc:37:68:de:b2:de:5b:b0:d4:31:af:9c:1d:
30:ed:fd:72:00:30:7d:49:a5:a7:6e:b9:50:8a:30:
c0:ce:0c:e8:e4:61:66:a3:90:e2:a6:82:22:79:93:
fe:d1:d0:a6:ba:a4:e0:3c:59:3c:72:d2:7b:f2:9a:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5E:31:C9:5E:66:9B:94:EB:13:6C:F9:15:24:C7:0D:9B:D8:6C:65
X509v3 Authority Key Identifier:
keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:54:ac:fd:45:1c:67:71:03:27:df:58:3d:57:6a:54:d9:50:
1a:1e:f2:2c:f5:69:37:b2:8b:a6:a7:62:2d:4f:78:a4:72:7d:
55:44:2f:e4:82:ef:11:fb:02:b9:e3:bf:2c:e8:c3:ca:14:48:
54:10:d9:1f:fb:55:70:bf:b9:64:95:8b:63:30:6a:e4:b7:11:
97:3f:ea:5f:66:c1:9b:b1:a1:b6:1d:54:68:9b:fa:81:e0:76:
7d:d2:46:f7:e5:14:6f:d6:0d:58:8d:ba:a1:46:b0:ac:79:18:
d3:df:40:b3:65:1f:ef:93:4c:7d:31:92:87:32:48:31:49:c9:
24:34:34:c1:0b:01:c4:ac:cd:2e:fa:fd:b0:14:43:12:72:27:
f4:48:b6:90:f4:44:64:7f:cf:a7:7c:a8:4d:ad:b8:81:b3:54:
2e:c0:9f:71:27:47:fc:c6:22:0f:93:f3:a2:a1:f2:bf:be:f0:
0c:46:64:9d:cc:f5:d9:11:c5:ec:30:98:ae:b3:20:11:c3:3a:
62:93:38:2b:b0:43:cb:6e:bf:14:97:a2:d4:1e:80:c1:f8:81:
3b:1e:11:1a:42:0a:fb:81:38:3c:bb:2d:9e:f7:00:14:20:e8:
c3:68:b7:2a:29:a6:a9:c4:f0:71:c2:87:7e:2a:55:6b:a1:8d:
24:a4:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:23:47 2026 by rpki-client