
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
File: m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json)
Hash identifier: njROiGUqh0ZbZJPSzMnNUV/bChplEnN/Kptqf6MP8so=
Subject key identifier: 8F:4D:AC:C2:D0:3A:32:A8:47:7A:FD:DE:7C:D8:00:EF:27:0E:79:DF
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
Manifest number: 0CB4
Signing time: Tue 06 Oct 2026 19:59:23 +0000
Manifest this update: Tue 06 Oct 2026 19:59:23 +0000
Manifest next update: Tue 13 Oct 2026 19:59:23 +0000
Files and hashes: 1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: KYQPiPeWxMSFEdjEWjtL6lZR6YtLF6a53zpDMdRIpEg=)
2: 3A703F22B81611F1BC709C823811F970.roa (hash: OmlOqd3zmhQvtJlIS9YKbkGy3BroYl5GUWxIbxDX+3c=)
3: 5EB1F538B81611F190F6B0883811F970.roa (hash: AH6RwM13T7twAonrOktDKiu6jrp6+Tk5H+lvF6NM5yw=)
4: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: LF2bKi2VQJjX8hqIZIkNiAJIYK/BhThU4HGuIaSHpaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Validity
Not Before: Oct 6 19:59:23 2026 GMT
Not After : Oct 13 19:59:23 2026 GMT
Subject: CN=6ac5531b-4b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:80:6c:34:30:6f:89:b1:64:5e:b1:0e:08:
5f:00:1a:4d:6f:d1:8b:b9:cb:c4:b4:f5:31:f5:75:
17:2a:fa:42:e2:7f:f4:a2:45:6e:1b:01:27:bc:4a:
c7:fc:cb:a7:74:ff:76:36:1c:9b:3a:ef:a3:c6:02:
53:96:4d:61:87:e3:13:56:29:a6:04:f8:1c:94:65:
e0:76:d6:47:fa:0d:ed:82:49:9e:e9:71:39:41:4e:
3b:c2:9e:25:12:16:a9:d0:72:c9:89:f7:64:b0:a7:
ce:da:1d:ef:c4:ae:1f:75:b8:04:60:ae:5d:60:c3:
00:e5:68:35:d7:b9:06:fa:86:e6:e6:19:46:57:2c:
27:4b:b3:45:d1:6d:ec:c7:90:fb:b2:32:e9:68:59:
b3:cc:c8:36:cc:60:8d:f3:30:09:b3:3c:18:0d:52:
0c:14:9b:69:90:25:fe:44:4c:83:09:9b:1b:25:28:
4b:ea:f9:26:1e:84:f6:57:85:33:97:8d:d8:de:33:
93:25:ef:5f:f4:85:6d:0e:ad:16:b7:7e:2b:c4:11:
61:b2:8e:19:6f:d8:f7:17:a4:df:bc:98:ae:50:2e:
55:ca:da:bf:63:74:3c:ea:42:e7:1e:31:ec:ad:17:
a3:a3:86:e7:4b:84:ab:e3:ed:d9:1b:9a:89:d6:dc:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4D:AC:C2:D0:3A:32:A8:47:7A:FD:DE:7C:D8:00:EF:27:0E:79:DF
X509v3 Authority Key Identifier:
keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a4:82:36:90:76:0b:e6:a6:9f:3a:32:72:2b:03:49:60:93:
fd:95:df:b9:76:25:2b:86:f7:2c:10:c2:b4:08:ca:dc:4a:4e:
04:4d:7b:12:75:75:95:53:e2:f2:bc:16:e7:2c:45:99:18:ed:
aa:5b:c8:2e:e0:65:b6:e5:de:84:99:cd:b7:db:f4:a2:50:05:
ee:a2:46:e6:2a:0b:1c:3c:59:96:87:65:09:5b:6f:20:c2:ae:
31:ad:46:97:4e:17:24:ff:51:ec:c4:26:4f:3f:3a:12:da:c0:
3c:13:dc:8c:6c:fd:c0:b5:a2:ac:63:e0:63:c5:42:91:0e:5a:
3e:c0:d4:65:89:b7:9c:b8:b4:f7:e2:a5:46:51:5f:bc:90:0c:
75:f0:13:15:66:80:4c:ad:82:df:37:b6:dd:9a:92:35:36:46:
55:ad:51:ac:30:cc:df:2f:7b:2b:81:3e:de:d7:f8:05:ce:af:
02:58:d9:92:72:c4:58:8a:3a:95:03:90:d6:26:dd:46:18:5d:
86:66:ca:97:2b:eb:24:4d:41:d9:75:d3:de:7c:e9:3d:1a:a4:
a2:f0:20:c8:15:14:97:01:7d:f1:d7:1f:0d:af:fa:a6:af:09:
34:07:8a:a8:5c:36:cf:db:92:52:90:66:e5:69:a0:78:ae:03:
df:dc:b8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:16:27 2026 by rpki-client