
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json)
Hash identifier: o5mJ9Q67vAMOnL1xGDtcp2hGrIVk46xkqYSJ08uiKw4=
Subject key identifier: 4A:8D:CA:0E:C7:14:36:86:76:DC:25:8C:82:B3:A0:79:5D:A1:72:5E
Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Certificate serial: 0628
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
Manifest number: 0612
Signing time: Tue 06 Oct 2026 22:59:43 +0000
Manifest this update: Tue 06 Oct 2026 22:59:42 +0000
Manifest next update: Tue 13 Oct 2026 22:59:42 +0000
Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: F615SGs61KHpnmI6yqUblQUJZr7Q7zL2BvHJBqlwWEk=)
2: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 9p+9k7Facd+Aj9FTPOqeaWhpizHbwTwIdBQJJ41NhYo=)
3: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: 2ung5ks0wrUO/hDRvjIHZLVeK77dP8EGbpcgDXcJSM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Validity
Not Before: Oct 6 22:59:42 2026 GMT
Not After : Oct 13 22:59:42 2026 GMT
Subject: CN=6ac57d5f-10ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:0d:64:2d:05:9d:5c:fa:dd:17:c1:82:57:
a7:60:d2:4e:a1:ca:1b:7e:5e:48:64:da:71:e3:cf:
31:53:d7:fc:af:bc:fb:28:2a:91:4f:55:bd:ce:2c:
34:32:74:c8:fd:e8:c7:ec:ae:9e:89:77:c7:67:f2:
37:36:58:8c:c7:38:d5:47:e6:0e:b0:2d:56:98:dd:
d0:2e:81:5e:5d:37:8a:d9:06:cb:77:6b:d0:09:21:
a5:68:28:77:33:4e:54:91:55:b3:c1:15:ea:80:16:
f2:78:ab:98:50:61:83:bd:42:ec:d8:68:3a:6b:52:
56:7b:6a:02:0b:a9:82:7d:aa:ab:4c:0c:0d:2a:e2:
0a:fe:a1:0c:29:9d:c7:35:14:9c:4e:17:f8:fe:28:
20:8d:c9:ca:5e:1e:9b:72:6c:2e:7d:7e:1f:f6:fb:
88:16:70:d2:ce:6a:57:f7:a0:54:fb:0a:d2:a4:87:
3d:08:06:8e:bb:30:db:16:31:0c:f8:f0:f9:a0:96:
a8:49:2b:e7:88:c6:36:dc:32:a1:bd:0a:b6:e8:10:
ad:be:6c:42:f3:99:55:d4:e0:86:a4:8a:04:40:cb:
44:ab:54:03:d2:7d:d1:92:09:f4:af:7f:d1:42:e3:
d3:b0:30:83:35:25:f8:80:24:10:de:11:48:31:9b:
c0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8D:CA:0E:C7:14:36:86:76:DC:25:8C:82:B3:A0:79:5D:A1:72:5E
X509v3 Authority Key Identifier:
keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:48:b3:fa:bb:70:37:51:47:7b:1c:3e:78:f8:19:94:8d:
91:66:84:a6:31:b1:67:16:31:d6:e7:06:8f:d0:82:57:58:66:
26:5a:c5:83:c4:73:11:ba:ae:99:41:cc:1c:36:e4:f1:59:2c:
3e:a6:84:9d:5c:d6:a6:b3:0d:7f:f0:d0:a0:ea:95:97:69:8e:
04:d8:1a:9e:11:dc:cc:4a:46:e3:32:10:e7:77:94:7e:bf:30:
03:21:5b:a1:43:b1:10:79:ed:8e:ec:ac:9e:28:31:79:63:e2:
bf:f4:36:8f:92:b1:3f:58:2d:ce:0a:66:45:47:f1:94:29:65:
4f:be:e3:70:89:bd:9e:c7:2f:35:10:17:35:3e:e8:36:a8:08:
ce:0d:4c:4d:86:c7:c2:68:84:30:ed:7e:4f:0c:86:03:8d:a5:
11:a1:f1:06:71:97:9f:02:01:34:1b:ee:33:5f:bf:23:64:aa:
b9:46:64:4b:db:2b:ea:25:78:6a:56:ff:ba:11:ca:c5:7d:ec:
e7:22:f7:08:39:f6:fd:30:9e:40:9c:61:f5:21:de:d9:5e:c4:
e3:d3:ee:2a:b6:e4:7b:a3:ba:06:8b:25:b4:6b:9e:a2:43:fc:
c6:18:82:c2:34:c6:62:56:19:18:17:41:37:69:2c:6b:18:ff:
14:65:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:21:42 2026 by rpki-client