
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
File: T0h-_rfHeWiBVy2X1iVPot21qHw.mft (raw, json)
Hash identifier: 7k3OCvyfHe6JfjkObInM+cV2FO+L7NPM1v9jG6OLRn4=
Subject key identifier: D8:E0:F4:0C:F6:2B:21:B3:98:04:82:75:97:03:D2:87:80:E5:DD:A7
Authority key identifier: 4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C
Certificate issuer: /CN=A91C32D9/serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
Manifest number: 80
Signing time: Mon 05 Oct 2026 08:08:41 +0000
Manifest this update: Mon 05 Oct 2026 08:08:40 +0000
Manifest next update: Mon 12 Oct 2026 08:08:40 +0000
Files and hashes: 1: T0h-_rfHeWiBVy2X1iVPot21qHw.crl (hash: xsHBqkLbgbS16cTT883NRJ9gMWMECQra3PkbYFglHMo=)
2: 9DD3FFC6001111F18C67D2A9406F56BC.roa (hash: l4S9gMbXi+gUDu4apCdlLMULJuB61B4wV3lZ30Od2K0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl
rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C32D9, serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C
Validity
Not Before: Oct 5 08:08:40 2026 GMT
Not After : Oct 12 08:08:40 2026 GMT
Subject: CN=6ac35b08-ac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:28:f8:dd:18:e9:bd:fa:59:a4:b3:af:bd:
cb:38:81:f3:b7:98:52:0b:b5:a2:ae:5a:0b:f2:e6:
f6:2f:bd:e2:71:f7:76:fa:65:d4:02:c0:6e:b1:f7:
8b:8a:b3:9e:aa:24:be:33:e4:14:cc:b4:dc:92:f0:
61:77:ba:1b:94:a9:fd:41:10:a1:7d:27:fd:57:2c:
8b:91:11:8c:c7:5d:27:04:b5:9d:43:62:b8:8e:5b:
de:de:7f:e1:02:0c:28:34:f7:0d:89:95:c7:47:47:
f5:b8:9f:d1:52:56:e3:98:a3:39:b2:08:2f:07:fd:
99:b6:0d:84:19:72:b3:b7:55:06:75:6f:5a:b1:06:
e1:f8:26:a9:d6:9b:e1:87:ae:69:b4:a3:0f:94:ac:
08:aa:01:a6:54:8e:d2:f6:de:95:a4:cc:1e:ad:39:
6a:db:ff:d4:df:d4:85:17:ee:55:b7:ba:7e:d9:99:
3c:20:80:aa:b1:ba:47:22:70:ce:81:a5:15:12:39:
25:93:57:f2:76:0d:95:cd:5b:82:f8:60:d9:4a:2d:
9a:30:f7:ad:d6:ed:1a:c9:9e:ca:c0:1d:ac:a1:6a:
aa:d2:cf:71:ea:32:92:a5:29:0c:5d:56:f4:33:7b:
d8:ba:97:72:dd:1c:43:1e:10:f1:77:7c:d3:44:3d:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E0:F4:0C:F6:2B:21:B3:98:04:82:75:97:03:D2:87:80:E5:DD:A7
X509v3 Authority Key Identifier:
keyid:4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:c7:5b:77:f5:d1:ea:7f:3d:43:e6:be:a6:06:f9:58:13:ca:
97:cf:7b:1d:7a:df:6e:25:36:56:17:59:41:70:8d:5c:ab:a1:
71:45:79:c9:a3:79:3d:fb:3b:e1:a3:7f:ad:88:80:f9:2c:05:
f2:3b:58:60:54:33:9f:7f:54:a5:41:b6:e4:3b:9c:8d:27:71:
17:26:a1:10:57:e9:73:30:4c:94:8d:58:1e:ff:db:b6:6d:0b:
93:88:01:36:4a:c7:c2:af:96:5e:c9:24:a4:4b:48:cb:ec:19:
84:23:09:4f:85:a5:90:e8:61:a7:93:a3:b2:92:55:99:e0:7c:
e7:21:25:3d:d2:c2:ae:0a:f9:a0:e9:51:12:4e:9d:69:c8:8d:
59:7c:67:75:d8:c4:18:f1:df:bc:db:28:91:5e:f1:a1:05:b4:
5a:64:40:27:ba:77:a0:5c:6a:5f:08:e3:3e:cf:14:59:bb:57:
4d:3e:95:00:e7:f8:7e:fc:60:6f:d9:24:f7:59:15:d1:59:27:
d1:c0:26:2d:cc:77:cc:ec:be:0d:e0:9c:f3:0c:a5:6b:68:ce:
27:55:f0:22:76:bf:8c:78:7d:69:5e:7c:ed:bc:b2:7a:26:4e:
45:6c:a5:6d:32:29:61:a6:cd:87:06:78:dc:d0:6d:fe:69:62:
12:26:f2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:59:54 2026 by rpki-client