
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
File: crVJ4D_3UKU5edANyx2mRLtSrKw.mft (raw, json)
Hash identifier: P7vP9W+5lOpKP9RW77G4JHuKhbpbEsho5T72s7oFRJA=
Subject key identifier: 87:32:48:CA:9F:9F:14:B5:A5:BC:BB:D8:67:C6:22:4B:EA:13:6E:F6
Authority key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
Certificate issuer: /CN=A91BFDE1/serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Certificate serial: 65
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
Manifest number: 61
Signing time: Thu 03 Sep 2026 08:20:50 +0000
Manifest this update: Thu 03 Sep 2026 08:20:50 +0000
Manifest next update: Thu 10 Sep 2026 08:20:50 +0000
Files and hashes: 1: crVJ4D_3UKU5edANyx2mRLtSrKw.crl (hash: mq6sgqtufau7yqG4oN3sAHjsfXJxytZ1vxntZT4fJzk=)
2: 00B077D6187D11F19A5CAFE7383D8C67.roa (hash: mW9wCzHROG2faL3zV7IIUqQz5qp+XENd/4NuYNOgCwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Validity
Not Before: Sep 3 08:20:50 2026 GMT
Not After : Sep 10 08:20:50 2026 GMT
Subject: CN=6a992de2-dad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:f2:67:e3:b2:d2:63:72:89:4d:b2:6c:b3:
5d:88:28:e5:08:5d:33:65:77:ff:51:13:89:2f:db:
86:94:dd:92:b7:72:92:e3:b6:9c:d0:d0:bb:e2:3e:
c9:bb:b2:fc:15:07:22:af:1e:06:14:dd:63:17:a5:
b4:5b:70:b6:e9:b2:15:87:0b:0c:df:ee:f7:33:87:
4d:31:e5:a3:69:54:66:54:8a:2c:a3:3a:6e:e2:c9:
e4:2e:94:3a:78:ce:08:03:c4:11:84:02:24:59:59:
bf:73:2d:39:c2:10:9a:3f:07:d7:ef:e0:2e:5c:19:
ae:ea:b2:45:d5:ac:eb:37:00:22:fb:66:d8:8b:6c:
aa:28:46:ce:8d:80:e4:b3:c4:ec:d5:0a:54:f5:25:
e9:85:08:87:2e:66:9d:72:22:16:27:82:6b:2d:54:
39:50:04:d0:64:7b:32:a9:8e:a3:74:32:99:39:cb:
96:f5:98:60:7b:1f:9f:db:5c:a3:28:33:51:eb:bf:
f4:6c:ad:da:32:d2:c2:2c:7b:84:90:b4:7f:f5:a5:
7f:1c:ba:50:24:b7:56:fc:65:45:9e:46:d7:fb:a4:
98:0a:f3:ca:92:89:77:67:75:58:b9:ae:e9:4e:d8:
aa:92:0b:e4:a8:21:01:8c:97:0d:18:f6:2e:3d:15:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:32:48:CA:9F:9F:14:B5:A5:BC:BB:D8:67:C6:22:4B:EA:13:6E:F6
X509v3 Authority Key Identifier:
keyid:72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:71:65:a9:2f:6f:40:24:5b:59:00:64:c6:73:c0:1b:44:0b:
6c:ba:cd:79:a4:52:ae:8e:f5:85:ec:d8:a1:ac:5c:db:c4:d0:
9f:7b:72:55:a8:d1:60:56:49:03:67:a0:fe:52:a4:7e:f6:49:
ad:33:ea:08:62:0e:4f:bb:7e:aa:35:29:24:34:fb:9e:c4:0f:
f5:8d:b0:2c:8f:e8:e7:e5:c3:6f:c1:64:e3:92:22:55:2b:d9:
01:39:1d:82:c4:de:8b:7e:f1:83:98:22:af:ff:ea:a2:db:30:
b0:ae:f6:31:c7:59:dc:03:3b:65:86:43:37:af:5b:e9:c6:55:
8e:50:d5:33:a5:a8:d9:16:8b:d7:ff:53:c8:d8:2f:fc:b5:e8:
ab:13:d3:18:33:e3:b9:82:c3:a0:9b:a4:5e:cb:89:31:83:da:
e0:14:80:c3:40:8e:e7:95:fc:ea:d3:85:f0:3e:e5:98:4a:59:
b2:d1:33:a2:f7:98:22:ce:f9:2f:c7:e8:18:b8:3b:5b:1a:90:
d6:50:e6:e8:f1:22:1c:a0:43:6c:96:a5:66:86:cc:de:d4:35:
e1:c5:37:f0:21:8f:e6:25:aa:af:21:01:8f:19:1b:1c:da:d3:
ad:09:a7:14:9c:92:ce:3f:77:c8:5d:99:5e:42:23:57:44:33:
66:ff:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:42:22 2026 by rpki-client