
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json)
Hash identifier: 5gAkAS8SOyj2TbxOJjxCoMq+fK8rBzLEJ3zBCqT1rU4=
Subject key identifier: 21:7F:E4:1A:A6:F0:9A:D3:7B:01:C1:CB:E7:7F:12:AE:CA:09:12:9B
Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Certificate serial: 09A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
Manifest number: 0999
Signing time: Fri 04 Sep 2026 19:53:03 +0000
Manifest this update: Fri 04 Sep 2026 19:53:03 +0000
Manifest next update: Fri 11 Sep 2026 19:53:03 +0000
Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: Gqr5FuUvoDjWorNCbzNq3t9gUkHKuRQiJoBkL9KHoqg=)
2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: K8ifKpf1OxSentj2ShFOfGXT/u0aCJtaC2BhvsjDEzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2468 (0x9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Validity
Not Before: Sep 4 19:53:03 2026 GMT
Not After : Sep 11 19:53:03 2026 GMT
Subject: CN=6a9b219f-2fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:3d:16:76:66:df:56:4e:09:eb:10:6f:83:
74:9f:17:5b:cd:a7:38:ef:cd:75:c4:0f:0c:82:20:
f4:b2:29:9f:d1:22:ab:7c:e5:dd:d0:01:f1:27:a9:
b2:b1:d9:21:1e:81:04:56:e5:e4:f8:28:cc:c9:81:
a0:47:e9:32:ad:f3:03:e9:79:bf:ae:45:57:ba:00:
be:01:3d:43:b4:8f:2c:c4:ea:09:46:56:76:96:c9:
1e:f4:16:2c:ed:b3:83:6c:a7:8b:d5:a5:8f:a1:03:
01:da:b7:28:58:b7:66:f4:6f:f0:3b:6c:fa:de:53:
58:1e:cf:b3:78:55:b0:09:96:3b:e1:52:5d:27:28:
6f:03:51:2b:67:24:05:dc:46:10:a7:06:72:dc:07:
e1:87:04:e6:21:ce:f6:51:80:9b:5f:ec:57:e2:06:
61:1a:8c:03:3c:72:c1:b6:3d:a1:8f:47:07:ab:2b:
06:d7:d6:8a:5f:10:01:93:ab:7a:52:dc:84:c9:21:
2f:5d:8a:db:4d:62:df:e1:3d:32:1f:50:0c:17:45:
d2:90:d6:d8:ad:98:51:52:2d:ea:3b:7b:18:89:3e:
14:f8:5b:ca:94:69:80:dd:3c:cc:1c:5f:f9:90:53:
e3:6f:7a:95:03:f8:3a:ba:c2:cc:a4:b4:a8:7a:a5:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:E4:1A:A6:F0:9A:D3:7B:01:C1:CB:E7:7F:12:AE:CA:09:12:9B
X509v3 Authority Key Identifier:
keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:4e:ed:12:85:cd:b4:cf:fc:40:b8:49:d2:c2:f0:a5:77:fe:
68:61:18:14:a9:06:ac:4b:88:42:9f:e0:55:0d:bb:b3:a4:86:
39:8d:da:70:2c:ed:e1:c0:a6:23:19:d5:ec:f6:6a:aa:64:76:
af:fc:95:17:d4:6b:14:7b:66:65:a3:73:4c:a1:66:4d:18:aa:
f9:fb:40:7f:44:4c:4f:25:1c:56:87:36:37:b5:79:cd:ed:2f:
33:35:88:e4:f7:b2:60:ab:0d:7a:1b:25:0b:1f:92:51:b1:eb:
cb:a1:36:d0:c1:20:33:2b:c2:bb:92:f1:15:fd:d7:d5:57:42:
88:c0:41:df:cf:65:79:7a:72:0d:25:3d:34:23:1e:ed:7f:a6:
bf:9e:d8:c5:ba:08:38:26:b0:8a:c5:6f:e6:58:4f:64:71:45:
80:08:52:28:7f:7c:54:c3:15:f3:37:b4:0b:fa:24:cb:16:94:
e7:5c:70:25:ba:c4:c2:9e:93:40:24:5b:c9:ea:83:09:4f:2c:
c0:24:e2:e6:9b:14:fc:3a:33:b2:b7:d2:68:da:48:c5:fa:be:
39:3c:0f:22:a2:d5:01:46:f3:3d:fc:82:f6:df:75:a1:96:c2:
9d:4d:e4:8b:7d:53:e3:14:00:ab:da:16:d5:22:4a:15:cc:ec:
b7:e2:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:48:18 2026 by rpki-client