
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json)
Hash identifier: qfXdTAVozfQsVTUzG39ws9yTjyfQCQHZgk8Ft+h3v9I=
Subject key identifier: 8A:1D:63:7C:85:EF:85:D5:26:8A:0E:5A:DA:E7:35:20:95:83:FB:39
Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Certificate serial: 0D50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
Manifest number: 0D44
Signing time: Tue 06 Oct 2026 18:17:23 +0000
Manifest this update: Tue 06 Oct 2026 18:17:23 +0000
Manifest next update: Tue 13 Oct 2026 18:17:23 +0000
Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: saRFwfNJYHj+DhY+7uFmK+wpuURAfm1qxhZkbhwb1iw=)
2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: 0Bzx3cTQetOlK87DOybR5kJ5yU0elH44slx+HVrYHM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl
rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3408 (0xd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67
Validity
Not Before: Oct 6 18:17:23 2026 GMT
Not After : Oct 13 18:17:23 2026 GMT
Subject: CN=6ac53b33-c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:61:14:cf:9a:de:69:af:49:9c:82:b4:ac:
ef:d3:05:b7:9f:a2:51:4d:fd:58:34:f9:e6:38:8d:
06:db:fc:c0:e8:4c:c5:56:a7:af:cb:10:6f:18:ed:
98:ec:dc:d0:51:dc:bb:a8:0b:19:73:77:df:4c:64:
6a:a8:ad:14:ec:41:f9:48:a6:04:c0:0d:7c:12:b8:
4b:cd:30:0c:d8:17:fc:7e:e7:2f:36:a5:1e:5c:7f:
63:a3:cc:a5:9e:ea:c5:3d:f0:ae:5d:d5:aa:78:f1:
72:36:aa:21:cc:4e:bf:5a:67:83:cd:8e:3e:aa:ab:
55:00:c3:48:c1:83:dd:b4:0a:5d:0e:5d:eb:49:15:
51:c8:f3:9f:59:4d:58:c6:7e:14:4f:e8:b7:52:6c:
77:64:db:e2:f8:dc:56:8a:0e:7d:b6:fa:d2:a5:b3:
9d:f6:6f:2e:a4:c6:ee:1d:b2:54:98:3e:10:e7:bd:
55:38:6d:f4:33:7c:ad:04:05:38:2b:e0:72:f0:c9:
84:21:21:34:3c:14:6b:de:f7:6c:c0:e5:f2:1b:b0:
4a:c5:a1:ac:fa:32:df:7e:75:0d:b6:e7:58:5b:8c:
26:3e:e0:5a:b7:ec:52:af:c4:65:96:00:2c:74:fd:
a6:dc:4f:4e:7a:b8:89:14:dc:e0:aa:12:31:92:b3:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1D:63:7C:85:EF:85:D5:26:8A:0E:5A:DA:E7:35:20:95:83:FB:39
X509v3 Authority Key Identifier:
keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cf:6d:bf:39:1d:c4:cb:b8:f3:99:37:4a:d5:bc:4c:93:10:
81:54:8d:c5:44:d1:aa:22:09:1a:8a:e9:dc:27:21:9c:39:c7:
d0:aa:72:54:2e:05:db:e5:ef:7f:ff:73:95:70:1a:5c:dd:37:
47:b4:1c:ee:18:fd:93:54:54:8c:f9:41:e2:e4:8a:30:4c:17:
23:91:a0:59:f9:c4:ec:bf:92:b9:c7:c8:f0:24:91:1b:ce:50:
4e:7b:1f:c3:f6:6a:36:22:18:10:ab:1b:f6:f6:62:d2:df:ac:
d0:09:c7:3c:c4:14:61:4e:d3:f3:0b:e4:56:f8:03:dd:b9:7e:
97:7e:c7:ce:66:7d:26:85:c0:3c:ec:a0:f2:a3:30:98:5c:2d:
f1:b0:1a:22:f0:23:f9:15:c2:6b:90:bd:e6:f3:b1:e7:c1:a9:
bc:fc:76:53:79:83:80:00:94:2c:90:35:6c:0f:32:fb:62:58:
27:57:a8:1c:9b:ae:79:1f:fd:52:c8:fb:5d:88:d8:72:68:61:
06:f9:d3:de:6a:1f:ef:88:66:0e:74:f3:5f:da:6f:52:21:56:
8c:08:e1:51:11:b0:88:b9:e1:2b:1b:8d:c0:42:b5:40:d1:c8:
86:21:37:98:71:bb:2b:85:5b:b3:d5:2e:f3:0f:18:90:10:b9:
b8:7e:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:30:05 2026 by rpki-client