
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json)
Hash identifier: JwFz/PtMnYdb8h3SGttvLBNUgjObNu3cek6nAO2huzs=
Subject key identifier: B7:C9:31:BF:C9:1C:F5:AD:F8:E5:EF:52:D0:3D:EC:63:96:7C:35:D0
Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
Manifest number: 9C
Signing time: Thu 03 Sep 2026 02:56:59 +0000
Manifest this update: Thu 03 Sep 2026 02:56:58 +0000
Manifest next update: Thu 10 Sep 2026 02:56:58 +0000
Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: AKVqhZjMj9leuKVaYqrV6PQxc36sfCGxa86Kv2vV+lY=)
2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: j8RPUxU1i8jQNbwP8gL4o72qQiyb5SB1xrhWEeZuKzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960
Validity
Not Before: Sep 3 02:56:58 2026 GMT
Not After : Sep 10 02:56:58 2026 GMT
Subject: CN=6a98e1fb-b0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:aa:a6:21:61:2d:44:92:4e:7f:e8:ee:1c:
9d:7a:a0:9b:46:3c:94:10:32:1d:c6:bd:b9:a0:dc:
32:d9:d5:82:41:c6:08:a4:cc:fe:45:2c:ed:38:36:
b3:ca:19:e7:59:c2:79:44:5e:f5:8a:2f:92:a8:05:
55:e9:e1:21:17:02:14:b5:70:34:32:d0:66:bd:aa:
0d:29:33:ad:12:88:ea:31:eb:94:d1:09:c8:ec:55:
6a:13:0d:a7:b7:38:58:7c:8d:50:dc:d5:56:59:b8:
69:f6:28:31:05:ec:bb:7a:f3:89:91:6d:9b:9b:fc:
c5:22:dc:11:19:03:bd:e1:1c:f8:36:3e:9c:0a:6f:
a3:be:46:40:6c:d1:d9:70:d4:83:91:45:ab:d1:5c:
07:a8:73:be:ac:4f:6f:d3:65:4e:f9:2e:4e:6b:57:
68:e6:b5:35:ea:07:d9:e0:22:70:ed:8c:b3:f0:17:
8c:67:39:7d:f9:88:0a:6a:60:96:26:62:80:42:e7:
4a:79:4b:38:de:a3:6e:0c:48:6a:6f:f0:62:96:50:
23:cc:9d:56:d2:38:4a:a2:80:cc:0d:43:e5:c6:f2:
9b:78:7b:ee:5f:aa:91:3d:38:5b:11:13:33:5b:78:
e5:15:7f:d4:48:8a:e9:9b:81:5a:00:4a:b4:68:f2:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C9:31:BF:C9:1C:F5:AD:F8:E5:EF:52:D0:3D:EC:63:96:7C:35:D0
X509v3 Authority Key Identifier:
keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6e:15:b5:44:df:d0:73:9b:f3:c5:4a:b3:a5:1f:61:f3:61:
ce:22:64:7f:48:e6:d0:fe:7b:9d:6b:99:93:64:10:d2:2b:51:
ec:d0:34:11:b0:fe:cc:ac:16:b7:7b:1a:5c:01:41:a1:ed:32:
4a:aa:74:63:77:3b:70:4f:45:c9:ae:f5:86:b3:91:86:e6:ba:
1b:3f:73:c7:82:d2:3c:75:c8:c1:14:63:d7:57:26:96:35:ee:
28:93:18:5b:de:74:3e:11:a4:e2:13:8f:a6:e3:fb:9d:22:c2:
20:79:98:75:8c:0a:03:14:d1:5c:a3:86:82:cf:0c:cd:03:e7:
34:24:6e:82:30:a5:af:e0:93:d8:0f:1e:7c:c9:bc:ce:f8:16:
34:d2:0b:5a:d2:97:91:63:d8:70:f8:d6:1c:a5:98:50:4c:28:
06:cf:d5:bf:3a:b0:a5:27:ef:eb:0e:c5:40:31:20:a3:3b:55:
a5:07:29:dd:81:35:76:a0:a8:b3:57:17:d0:e5:9f:c3:98:c5:
1a:65:40:b0:eb:4a:6f:63:6e:c9:b1:4c:77:70:17:4d:9a:b7:
b9:c3:69:25:1f:ca:2b:d6:f6:cc:82:e2:d2:cf:73:ad:3b:d1:
32:e8:5f:5f:c6:7b:82:de:dd:08:bc:19:5b:3b:57:13:c2:2c:
3a:ac:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:43:04 2026 by rpki-client