
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft
File: F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft (raw, json)
Hash identifier: teMsFJWU1h1Z9YDlLR4vymG9laHa1IR4SmxmWlxTGX8=
Subject key identifier: D5:EC:EB:DB:56:CD:A6:36:34:10:EA:03:5C:1E:BE:60:E4:CA:73:AC
Authority key identifier: 17:50:6B:92:B8:63:37:73:20:BD:B2:E3:06:F4:8C:85:00:91:8F:B3
Certificate issuer: /CN=A91C3809/serialNumber=17506B92B863377320BDB2E306F48C8500918FB3
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft
Manifest number: 0D
Signing time: Tue 25 Aug 2026 09:00:54 +0000
Manifest this update: Tue 25 Aug 2026 09:00:53 +0000
Manifest next update: Tue 01 Sep 2026 09:00:53 +0000
Files and hashes: 1: F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl (hash: PrChpRoXOOQuDClWPG6rfnGvt9pTNOrHXAgp7DysqB8=)
2: 39CD26E88EEA11F18D5914636411F970.roa (hash: +/GsjYmLP1MJ0UBnltZuLmnLB7EDcP7VF/Red6/k4FU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl
rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3809, serialNumber=17506B92B863377320BDB2E306F48C8500918FB3
Validity
Not Before: Aug 25 09:00:53 2026 GMT
Not After : Sep 1 09:00:53 2026 GMT
Subject: CN=6a8d59c5-11ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:90:59:7d:25:51:95:41:7d:62:27:ff:44:
f5:b9:e4:3a:ce:85:ba:f7:7c:b1:f1:ba:cc:ca:7e:
bc:e3:d3:2d:f6:f0:92:7b:41:af:ff:81:24:9d:bf:
b0:66:06:a4:b8:d5:9a:9f:31:b5:c0:83:69:12:6c:
6b:27:e6:30:3f:1c:16:02:65:cc:ce:8b:43:ba:43:
a1:8b:11:7d:17:aa:9b:1a:b1:f0:b4:48:2d:26:ce:
05:1a:11:3c:17:a2:e7:60:e2:00:b4:96:34:9b:55:
de:11:ab:91:ed:0c:35:98:76:17:4c:75:23:55:91:
51:67:d5:cc:9a:c0:7a:d6:3d:8f:58:0e:f9:2c:69:
ee:f4:77:b6:12:1a:be:b9:e6:8c:e7:21:97:60:cd:
1e:01:5a:56:ea:44:94:41:2b:c1:60:30:f6:7f:36:
d2:74:35:b8:68:c9:61:f3:d5:8c:a6:ed:09:aa:a2:
5c:63:46:5b:4f:1d:5e:b2:cd:80:62:23:87:08:f0:
6c:dd:ca:d5:23:ce:60:52:56:94:83:eb:0e:d4:11:
d5:85:bf:89:79:d1:79:56:e2:60:a4:af:a7:17:2b:
9c:61:40:e3:4d:97:48:f4:b2:f7:8f:9d:eb:23:68:
7a:34:dd:7c:11:3f:1b:3d:20:8c:62:8c:58:02:07:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EC:EB:DB:56:CD:A6:36:34:10:EA:03:5C:1E:BE:60:E4:CA:73:AC
X509v3 Authority Key Identifier:
keyid:17:50:6B:92:B8:63:37:73:20:BD:B2:E3:06:F4:8C:85:00:91:8F:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1BrkrhjN3MgvbLjBvSMhQCRj7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3809/B7C3DA2A8EE911F1811037946311F970/F1BrkrhjN3MgvbLjBvSMhQCRj7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f1:e2:d1:c4:0c:85:7a:65:0f:ba:c5:47:d0:d6:1c:7a:4a:
24:84:08:ed:1c:fc:f5:f1:ae:47:a7:02:de:e5:79:48:bf:39:
bf:b9:49:fd:d6:89:84:b6:09:f8:60:65:ae:59:d1:c3:e1:7c:
ff:2b:06:70:62:88:6f:3d:d2:dc:91:79:56:21:02:19:dc:2d:
aa:2f:94:f8:a5:04:87:bc:ff:4f:f2:72:40:d7:f5:4c:fc:e0:
4c:3f:60:76:f1:d3:cb:37:b5:1e:45:51:11:c3:ed:4f:73:7c:
48:6f:d1:7c:d7:4c:be:bf:14:e1:57:dc:b0:6f:2a:6f:5f:bc:
65:78:33:23:b6:97:0a:53:93:01:a6:fd:66:68:4a:5c:42:63:
af:e1:28:9c:18:b7:6c:42:21:71:41:e8:9c:0c:e6:bc:67:10:
35:cd:c9:23:c3:93:b5:da:14:e4:4d:44:aa:e4:a8:dc:36:85:
10:37:7d:ea:4e:2c:9e:1b:d9:9d:d7:ec:7b:86:f7:41:65:12:
55:d9:32:15:0e:a0:53:6a:f1:24:70:25:9b:9d:8b:0b:cf:56:
f7:63:4f:59:cf:9f:ab:7c:ea:09:75:32:d0:87:6b:b9:ab:5d:
f0:b7:68:fe:44:11:42:96:8f:46:d2:39:03:a7:be:85:3d:04:
82:7b:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:54 2026 by rpki-client