
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json)
Hash identifier: TxDO+yGfdpEu8BDgcPjmzYgNocUfAMzvxVjYlphCKS8=
Subject key identifier: DB:DB:3E:12:C3:E3:A9:39:7D:32:55:13:02:21:A0:15:F9:FE:80:DE
Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Certificate serial: 02D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
Manifest number: 02CF
Signing time: Wed 07 Oct 2026 01:37:10 +0000
Manifest this update: Wed 07 Oct 2026 01:37:09 +0000
Manifest next update: Wed 14 Oct 2026 01:37:09 +0000
Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: u4I/DsQjsNMQUFPpTsjKSbTrvZ/fbcQG+1+CwEun5ZY=)
2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: P5W/HtK4kYY99pZQGqCLFlxhulp8kHcGK4SUQtwdoQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 01:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Validity
Not Before: Oct 7 01:37:09 2026 GMT
Not After : Oct 14 01:37:09 2026 GMT
Subject: CN=6ac5a246-a30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:f7:c2:49:bf:c3:d1:f6:39:f0:55:9b:6c:
75:1b:03:16:3e:6f:4b:48:53:35:ea:b1:6b:6b:59:
23:2b:61:4c:3b:4d:da:e2:f7:b2:44:6c:84:a8:4d:
b9:34:1a:95:b5:79:32:18:f6:ac:90:32:37:77:67:
62:a5:52:7b:8b:ea:1c:49:b3:a4:54:5d:1c:09:44:
96:9d:c3:f2:b5:f5:92:32:7a:f2:da:9a:c7:4a:47:
1a:df:44:24:71:86:b0:7c:93:5e:e7:29:d7:d5:aa:
9a:31:ca:03:1d:e5:97:fa:90:86:10:e1:45:06:63:
74:95:8c:ca:42:0e:42:45:62:a0:9d:c2:5c:6a:e0:
a5:73:8e:20:68:bd:de:d1:77:d9:6b:e5:ba:94:7c:
8c:92:63:cc:c9:9d:f5:6b:15:04:58:fb:43:23:a6:
89:5f:d1:c5:02:ce:d6:e2:35:5e:64:6d:d0:6d:30:
29:32:72:d5:78:e2:bb:f0:7b:14:81:c3:2a:82:79:
95:0d:8f:85:5f:fe:5d:29:fe:d6:52:2e:8f:6a:5f:
9d:31:43:cf:79:ce:5a:ae:cf:6c:ac:f9:60:60:3e:
54:e8:74:d7:5e:44:cd:7d:5a:a6:b7:d1:d5:f0:65:
16:04:2d:ff:94:b7:2a:2b:08:62:f3:58:1f:09:4f:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DB:3E:12:C3:E3:A9:39:7D:32:55:13:02:21:A0:15:F9:FE:80:DE
X509v3 Authority Key Identifier:
keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:13:e3:86:60:94:3b:70:f1:60:1b:44:27:cb:3e:73:d2:01:
5e:a2:94:17:11:07:bf:40:1d:9a:89:a2:dd:3d:13:da:a2:cb:
97:e7:f7:6a:95:b1:ca:33:f1:da:e4:48:3f:4d:6b:cd:69:0b:
8b:69:79:6a:ef:06:c4:c2:8b:15:0c:e6:bc:56:af:61:64:9a:
4e:cf:68:b7:b6:05:19:5f:50:00:65:4c:b7:d4:00:87:b9:49:
7d:43:4b:4b:0f:36:d1:c0:57:0f:09:da:bb:cc:fe:23:82:e2:
22:72:34:06:09:67:b4:55:d0:c1:73:91:36:78:0d:4c:59:c1:
b2:f8:b2:54:96:16:f1:18:9a:84:d5:ce:3a:6a:d8:42:e4:59:
f1:72:f1:99:f1:f9:b6:7d:9d:ce:3e:63:16:d2:43:0b:6f:e5:
a7:f4:92:88:01:e7:f0:a8:a7:61:ee:b5:2f:46:97:ff:9f:d1:
ab:9d:e2:02:5b:09:b3:52:19:39:ea:fa:14:2a:f4:30:c1:fa:
08:d0:d2:11:e2:f9:48:58:00:14:64:0d:2f:99:c7:19:4a:58:
4c:1f:aa:ce:83:57:92:cb:76:5a:f8:b4:54:8f:d5:b6:50:d1:
e1:4f:ca:17:48:f5:87:5c:2b:81:b1:89:d4:f1:57:4f:55:70:
6d:8d:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:54:17 2026 by rpki-client