
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
File: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft (raw, json)
Hash identifier: 8tpoQWC4CG+/gnsPk8CYxkkwYG54EEJ8D1kM+JHGCes=
Subject key identifier: 91:D5:69:24:D6:A5:93:8E:9C:98:EB:5B:01:0F:85:BC:38:76:7C:39
Authority key identifier: 3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
Certificate issuer: /CN=A91C4A80/serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
Manifest number: 013A
Signing time: Wed 07 Oct 2026 06:01:13 +0000
Manifest this update: Wed 07 Oct 2026 06:01:12 +0000
Manifest next update: Wed 14 Oct 2026 06:01:12 +0000
Files and hashes: 1: P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl (hash: 9g09pV3ep0uLmjYaN10uubiMdhp/rAIBXQuOlL05+Yk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl
rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4A80, serialNumber=3FD7F555FC7D6FC23539A3A621EF2D048D4C7CC7
Validity
Not Before: Oct 7 06:01:12 2026 GMT
Not After : Oct 14 06:01:12 2026 GMT
Subject: CN=6ac5e029-a8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:38:6a:5d:d1:05:7e:20:eb:3d:5b:cd:63:12:
7f:47:75:b2:2b:01:76:8d:d2:8e:89:2c:32:8a:75:
32:45:7a:bf:62:46:d4:a4:e4:c2:1f:02:fd:27:be:
cf:03:de:e8:03:43:67:54:74:10:c1:b4:76:a1:dc:
06:7f:b0:b8:60:c5:a6:2c:39:55:bc:78:21:5a:26:
52:27:f4:e3:99:72:af:d2:18:fa:aa:1c:70:95:72:
c6:c5:91:4d:61:8c:20:30:60:6a:90:ba:0f:a7:ab:
fe:0c:03:ba:f6:cb:ee:06:7d:59:e1:6b:09:9c:5a:
11:15:7a:74:37:a0:b5:00:6b:7b:ce:bc:c9:a1:32:
df:be:ff:d3:71:00:cc:ee:d7:7c:26:16:70:2e:a0:
de:10:19:89:18:5e:e6:db:3b:9c:72:d3:47:50:d8:
61:b3:41:30:d8:8e:b3:57:f2:76:ae:af:78:a3:70:
f0:c3:6e:ff:c4:79:87:43:b9:7d:5a:5e:a6:b8:68:
4b:2e:47:6b:24:9c:d7:6d:66:42:96:f6:f3:56:e9:
ed:fd:e6:d1:b7:f4:1b:af:03:a2:4e:08:1c:d2:15:
2a:3b:a4:89:65:41:cb:a1:65:3e:2a:04:c1:6b:00:
1b:d7:ed:1f:c2:cc:58:ab:09:d2:f6:17:86:71:22:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:69:24:D6:A5:93:8E:9C:98:EB:5B:01:0F:85:BC:38:76:7C:39
X509v3 Authority Key Identifier:
keyid:3F:D7:F5:55:FC:7D:6F:C2:35:39:A3:A6:21:EF:2D:04:8D:4C:7C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4A80/29EC73BAE4EF11EFB714E56CC4F9AE02/P9f1Vfx9b8I1OaOmIe8tBI1MfMc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:21:48:57:4d:c8:17:91:2b:5e:3c:2b:26:a3:40:e6:50:a6:
66:5e:9a:f9:7a:ed:02:07:22:af:88:5d:5e:4b:a9:ac:f2:56:
f4:49:16:00:27:37:9c:e0:0a:6b:f2:12:42:39:8c:b3:a4:9c:
4e:16:26:13:60:7a:0c:23:03:1e:44:28:79:f7:c3:42:70:3a:
ea:be:22:14:e7:7f:dd:1e:5a:38:7a:4e:d2:d8:f2:0c:53:9a:
c7:89:82:e1:82:e8:b3:05:39:73:53:0d:72:3e:05:33:c7:77:
26:cd:9a:aa:93:fa:95:fe:75:17:1a:9c:3c:9e:4b:90:74:89:
a2:65:49:bf:49:d2:a5:24:3e:6b:52:e4:78:6b:48:f7:07:7f:
8c:89:72:79:ed:0a:c8:b7:7a:3e:7b:9a:55:a5:de:c3:46:f8:
ec:cd:93:a3:e9:27:76:16:43:1c:b2:ad:b4:21:d8:6b:4a:28:
f6:28:1a:f2:ad:3f:18:d0:56:74:02:8e:35:0e:a8:30:b4:c1:
12:29:cc:a8:08:c7:ae:03:4d:01:1e:64:82:52:fc:cd:47:d2:
43:2b:82:7a:25:fa:5e:db:f6:a4:27:8b:9d:39:eb:c1:b0:f4:
37:ca:30:34:b5:7d:d2:bc:f6:23:8e:e4:4f:3e:6b:ec:db:6a:
7e:d6:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:45 2026 by rpki-client