
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
File: 9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json)
Hash identifier: YdGeX/ZQ26IKeeHEOZltKayUBAumTD1wzw6J1c91PX4=
Subject key identifier: 73:5A:D9:9B:C3:11:E4:C1:D5:5C:DE:48:30:A0:FC:63:E3:47:30:05
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Certificate issuer: /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial: 029B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
Manifest number: 0283
Signing time: Wed 21 Oct 2026 02:30:51 +0000
Manifest this update: Wed 21 Oct 2026 02:30:51 +0000
Manifest next update: Wed 28 Oct 2026 02:30:51 +0000
Files and hashes: 1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: hALUKoAMgm92Glc8yNdOZ9TfvaVOAjilV0dOMuFOR8M=)
2: 57CB703EBCED11F0A3B2C039C4F9AE02.roa (hash: 45hyCfM+o4HKQEPHEPnA/AUjri6G28j6JkHXuLahCZI=)
3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: zX2wxhpVdTYgnBLbUW2HFAPDNMT7jIK2t1BaorSnmuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Validity
Not Before: Oct 21 02:30:51 2026 GMT
Not After : Oct 28 02:30:51 2026 GMT
Subject: CN=6ad823db-54fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:f3:3a:c2:f6:af:a3:6d:a1:8a:75:e7:d0:
e3:c7:62:6a:d2:34:8a:55:a8:f4:22:9e:97:49:a2:
bf:88:6f:b6:40:2d:22:34:e7:6d:e4:ca:50:28:f7:
76:1d:02:e3:b2:65:77:2b:82:8b:c5:a8:8f:f0:3a:
13:25:75:0a:26:7c:92:7e:d7:0f:46:43:e2:50:02:
fa:e6:dc:90:4f:9f:86:40:d2:35:1c:b0:4c:a8:0b:
dc:58:cf:4a:09:1b:b1:1f:45:b4:61:e2:a3:70:d4:
21:1d:11:2c:85:38:e7:68:74:06:65:29:75:68:5a:
32:86:50:31:9f:bd:56:84:2c:70:8d:19:c5:d7:cf:
5f:b6:c5:2b:af:12:36:93:4f:52:b3:22:24:7d:a1:
f3:e2:0f:35:b6:f0:99:1d:1a:36:69:5d:38:03:c0:
6f:0d:06:51:8d:6e:dc:48:8e:56:a8:24:b7:f5:45:
97:0f:38:5d:9c:c5:5a:59:af:de:6b:fe:11:36:1e:
f4:10:4b:09:6b:d3:88:68:b7:9c:07:ec:1d:70:34:
d4:ee:98:42:38:88:9b:97:3d:75:39:73:66:e0:32:
8b:d9:2d:96:cd:50:ca:ea:11:a2:3d:9e:a6:95:d1:
a6:e3:ab:21:40:d4:1b:b0:7e:3f:f1:de:ff:fe:a9:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5A:D9:9B:C3:11:E4:C1:D5:5C:DE:48:30:A0:FC:63:E3:47:30:05
X509v3 Authority Key Identifier:
keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:69:6a:9f:dd:82:53:8a:da:0a:35:69:05:df:9c:51:e2:91:
c1:11:15:c9:3a:f8:e7:24:e8:38:d9:02:20:e8:63:26:c5:98:
e9:e5:94:50:ab:bd:42:41:c0:5e:23:4e:c5:09:19:3a:f1:c4:
05:38:71:9b:ef:4d:7a:c2:57:cb:72:a7:e5:87:e1:b3:b2:ba:
8d:ed:44:8a:62:01:38:11:67:66:be:0c:59:ee:f2:04:db:c2:
40:12:d2:1a:b1:a0:06:78:c6:bb:55:79:1d:85:2f:f2:9b:41:
88:16:ef:9b:3a:c4:66:e0:bc:16:9c:68:28:47:e0:26:f5:68:
09:2c:0b:1d:01:8e:ee:86:a1:53:65:af:d0:9e:2d:4c:db:8e:
3c:4d:2e:5d:53:ce:e3:1d:27:ce:80:fb:9b:10:e5:01:eb:61:
1c:0f:8b:5f:eb:e0:f9:2e:ae:0c:46:3c:7f:5e:92:71:e2:57:
2d:4d:aa:73:ed:09:db:69:67:09:65:e1:2e:25:f9:f5:54:ca:
0f:20:55:33:51:bf:99:6b:e3:af:85:08:cc:08:33:0d:ee:44:
f0:6f:2e:d9:6a:65:06:4c:b6:81:e1:51:eb:2a:2f:89:a8:c0:
30:75:5c:d7:d0:d6:72:8c:a4:52:ac:8d:dc:97:66:b1:c6:f2:
12:54:0d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:04:14 2026 by rpki-client