
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
File: N-rtpCQtUJYrh7SiB6xMNEszBgw.mft (raw, json)
Hash identifier: YqRX7rXzlKmfJnliyfYSvPx/rTyeibXLbJfxRLGp0os=
Subject key identifier: 10:0D:1D:9F:4C:EF:CF:60:78:DE:5C:D5:B4:05:69:AA:C3:27:71:83
Authority key identifier: 37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
Certificate issuer: /CN=A91C0741/serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Certificate serial: 0F15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
Manifest number: 0ED1
Signing time: Fri 04 Sep 2026 17:39:58 +0000
Manifest this update: Fri 04 Sep 2026 17:39:58 +0000
Manifest next update: Fri 11 Sep 2026 17:39:58 +0000
Files and hashes: 1: N-rtpCQtUJYrh7SiB6xMNEszBgw.crl (hash: XAneG1xTpqVzGwwqNRT4y6Ub1OLSn1E7WgJoRaExc8c=)
2: 4B058994B18D11EC886B063CC4F9AE02.roa (hash: Fqueet+ndFYhrCwbTP27Ycb9WerbdnToSLajJOuPvMA=)
3: 571B65E63DB411EEAA68F342C4F9AE02.roa (hash: OesppDhUnoiJ2S/fvZH2VYA9rOlCiKhEiOUHt/iQgs4=)
4: C65A7B2E2DA511EDABDD0D5AC4F9AE02.roa (hash: aVXIUJfK9FK08WHFOHOccPnDr/uBpaJzWm5gZ9bFvys=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3861 (0xf15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0741, serialNumber=37EAEDA4242D50962B87B4A207AC4C344B33060C
Validity
Not Before: Sep 4 17:39:58 2026 GMT
Not After : Sep 11 17:39:58 2026 GMT
Subject: CN=6a9b026e-a67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:f0:70:c8:c3:37:73:39:1f:d4:64:cf:2e:
d5:9d:c3:2d:87:14:40:56:25:26:00:77:be:6f:15:
d8:75:3f:73:aa:2a:11:b8:67:99:54:ed:25:66:28:
0b:d2:b4:0b:3a:80:70:c0:a2:a8:45:31:3b:9b:0c:
61:9c:25:93:85:6f:b7:02:7e:7b:b2:fe:16:91:7f:
7d:79:75:9d:79:07:f5:af:b3:0b:9e:f8:53:0e:78:
7a:55:89:28:4c:fb:87:eb:71:1b:53:0b:bd:8b:76:
a5:eb:85:8f:b6:d4:8d:63:db:8e:41:b2:51:09:d2:
dc:8e:fa:3a:80:8d:f5:e8:94:e5:5c:37:55:d7:00:
6a:dc:42:d1:77:3a:88:af:5d:c3:33:18:ca:ab:7a:
91:8e:18:41:36:e9:0f:c9:68:de:cb:a5:78:dc:ff:
e8:17:5f:4b:f6:32:c1:a8:c0:6f:a1:9c:46:db:67:
e1:3e:c3:dc:a6:65:11:70:b1:86:d5:3a:99:c0:1b:
99:77:64:d7:36:a1:2f:48:4d:a8:b9:8c:77:36:28:
ae:74:d5:10:04:bb:ce:88:a6:90:1b:ef:4a:91:7f:
00:c5:3d:cb:b4:70:4b:a0:b9:5e:1b:52:ed:52:8e:
67:d3:ba:d2:76:69:f9:d3:50:df:3a:4f:f5:1a:13:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0D:1D:9F:4C:EF:CF:60:78:DE:5C:D5:B4:05:69:AA:C3:27:71:83
X509v3 Authority Key Identifier:
keyid:37:EA:ED:A4:24:2D:50:96:2B:87:B4:A2:07:AC:4C:34:4B:33:06:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-rtpCQtUJYrh7SiB6xMNEszBgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0741/77C9168EBD1211E990F4BF2CC4F9AE02/N-rtpCQtUJYrh7SiB6xMNEszBgw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:a1:d7:71:0b:82:21:ff:17:83:11:20:52:4f:cb:ce:7c:14:
0a:92:92:49:70:fd:62:a1:d9:c1:63:96:bd:e4:2c:92:ed:c1:
d6:de:10:34:3b:a4:5b:6e:90:72:86:ca:a2:15:31:7e:0d:e3:
61:6f:c2:75:65:4f:9b:2f:55:0a:bc:fa:ba:14:fd:db:05:01:
ab:1d:9c:0f:f4:ff:ff:a5:0f:2a:19:49:9e:6e:aa:fb:08:16:
d0:7f:23:60:90:dc:8f:f9:e4:50:cd:06:40:67:3c:fb:fd:24:
3a:b8:8f:1d:76:7f:6d:b9:7c:3c:6d:cc:f2:fb:a2:99:74:01:
b0:1e:49:43:db:16:ef:ed:b9:03:4c:43:82:76:9a:c7:89:0c:
bb:5d:86:73:bd:2a:81:56:e6:cf:a3:ce:38:f9:a4:ca:3a:4d:
d8:e1:a0:16:9e:c6:31:bb:aa:b2:06:f0:72:bb:28:ab:5e:20:
4e:89:05:d9:b9:a1:36:29:e9:9a:63:cc:66:dc:64:f6:ab:10:
76:fb:0c:10:0f:58:c4:e8:f4:50:1a:67:00:19:13:1d:0d:04:
87:fa:e2:78:3f:5b:29:05:46:f8:18:77:b1:11:22:ca:17:a6:
7b:e1:c8:1c:f4:ef:a0:fe:3c:da:58:c0:9d:8e:89:36:ae:47:
b5:7d:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:40:32 2026 by rpki-client