
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
File: Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft (raw, json)
Hash identifier: ZUaxnKz8ZiHoQ15kT+Goas0bnNNMMIu2raC5KNL2hxU=
Subject key identifier: 4C:31:8D:85:F1:35:9B:E6:29:FB:DA:3D:5D:D3:60:C4:A8:C7:FA:63
Authority key identifier: 16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
Certificate issuer: /CN=A91C8BAB/serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
Manifest number: 62
Signing time: Mon 05 Oct 2026 08:33:05 +0000
Manifest this update: Mon 05 Oct 2026 08:33:04 +0000
Manifest next update: Mon 12 Oct 2026 08:33:04 +0000
Files and hashes: 1: Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl (hash: w5p4BaNe66jEXruoNr8im/0NVFjWI+XW0QE3gkYcyGk=)
2: B8FC2F342E4311F1A2579C1594833773.roa (hash: pjauDszwaF/mopQYyjDIvAGHDO32bERoI1rKGNgCq5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl
rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BAB, serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Validity
Not Before: Oct 5 08:33:04 2026 GMT
Not After : Oct 12 08:33:04 2026 GMT
Subject: CN=6ac360c0-072f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:4b:f8:d0:9c:25:fb:1a:7c:5c:04:90:24:
ed:73:16:ba:0c:69:4b:e5:87:bc:4a:0b:ee:11:54:
e5:0e:6b:39:32:70:e1:aa:c8:4a:5d:eb:64:4d:66:
89:8e:bb:34:2c:9b:78:3b:f1:b3:d2:cc:8f:03:1f:
a8:45:d1:86:5c:69:e0:70:ee:cc:ad:dc:ea:a1:b9:
a4:5d:d6:f9:2c:9e:94:33:89:fd:57:44:ca:39:91:
26:e8:ee:d9:e4:93:71:69:0e:99:ac:c2:f9:82:b6:
cf:c9:4f:e0:71:0e:c4:10:8d:85:88:77:db:cd:6d:
2d:5a:36:1e:08:50:52:d6:c1:3c:ae:e2:39:2e:88:
98:f4:2d:14:f0:4a:db:c7:65:04:b7:c0:9f:b7:15:
ae:e3:70:ca:22:48:eb:e9:f0:7e:80:2b:ea:14:8a:
37:61:65:91:b7:7c:25:e7:f7:96:c8:b3:9c:af:46:
4b:66:f6:c3:00:68:df:22:ec:6e:95:2d:d2:53:07:
4f:69:5e:8e:0c:bd:01:17:55:e5:b3:21:f9:1a:54:
57:4c:49:a1:6f:0a:28:3f:a6:e7:08:a1:c4:29:72:
19:bc:9d:4c:c6:97:00:1f:c8:d5:90:77:95:ce:c8:
ae:a6:0a:f7:7a:1d:35:65:94:ac:b6:6a:f9:be:87:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:31:8D:85:F1:35:9B:E6:29:FB:DA:3D:5D:D3:60:C4:A8:C7:FA:63
X509v3 Authority Key Identifier:
keyid:16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:ed:8a:44:41:ec:35:21:88:59:44:ff:b5:01:9e:ba:32:b0:
8b:9a:a7:3f:ba:7e:e8:61:b7:25:d5:43:6c:02:2c:6f:f2:31:
e7:ad:e0:79:35:52:45:67:28:44:23:92:52:9c:75:fe:dd:a3:
bd:fe:df:b2:0c:55:a4:e4:1f:ee:b4:38:61:f5:fb:37:b1:c6:
bb:7a:22:4f:cb:8d:b3:11:3e:82:e7:b9:92:8f:65:b0:41:5f:
32:00:14:74:88:ba:a7:a4:1f:9f:1c:a7:c1:62:e5:b0:ad:19:
2e:d5:19:db:dc:65:f1:51:a2:58:c0:ed:6f:36:a5:5f:3b:0d:
c8:e9:c7:f8:a5:a4:d3:d3:a8:b9:47:f1:26:65:84:3b:c3:cb:
04:e3:40:fe:f1:37:9b:9a:1c:89:ff:84:3e:c5:41:1c:1f:8f:
72:7e:94:19:0c:8f:f0:f3:0f:82:64:a1:a0:f0:ea:b0:32:44:
7b:75:6d:76:d0:05:91:c3:d9:3f:a8:d2:7e:d8:c8:bc:b8:64:
86:31:4a:59:9e:55:91:55:28:fb:ba:02:94:c3:50:56:ca:c2:
3c:a5:76:19:2d:72:dc:a9:f0:db:17:ac:c0:9a:84:18:d6:69:
98:4c:9c:f7:33:b1:ff:fb:27:b5:a3:ae:56:e6:b5:da:e9:96:
d6:38:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:48:27 2026 by rpki-client