
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json)
Hash identifier: bdvY0FZlEYyNhEp3xISVGBARUxbD3XsgIYyMaoeHqFI=
Subject key identifier: 95:07:3F:FA:A7:E7:0C:07:20:D7:61:1B:C0:47:85:4F:CC:6D:64:82
Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
Manifest number: B6
Signing time: Wed 07 Oct 2026 07:28:08 +0000
Manifest this update: Wed 07 Oct 2026 07:28:08 +0000
Manifest next update: Wed 14 Oct 2026 07:28:08 +0000
Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: 4J7Abi6KE96UpgwBrMJylLs29Zavl9XKMVoEEwNXtiQ=)
2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: 4YrP0rl3gACg5qm8ArvUCizFJDOa1cfOGVN50zaYqQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0
Validity
Not Before: Oct 7 07:28:08 2026 GMT
Not After : Oct 14 07:28:08 2026 GMT
Subject: CN=6ac5f488-f2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:82:1a:1e:b0:8b:48:79:42:1e:c7:76:a7:
ad:79:9d:62:77:8e:4f:75:2f:bd:41:44:05:0d:cd:
c5:0c:44:95:45:1c:e7:37:27:24:6d:b7:96:d2:46:
61:b9:1f:2b:94:f3:82:f1:3d:3b:5a:67:0d:41:33:
f4:b0:27:69:ea:e5:1c:ae:2f:d7:a0:e0:5c:af:c2:
22:17:bf:3e:38:33:37:d5:64:32:f2:ea:1b:2b:34:
7b:95:e3:4a:96:c3:c6:98:04:b9:8f:86:7b:cd:cc:
14:9b:6f:32:5c:c9:f5:a4:85:74:1a:a1:9f:42:d3:
48:47:49:8e:b6:3a:9e:91:fc:e4:50:fe:6e:b5:77:
3c:9e:8c:8b:32:14:06:2d:74:1b:80:ea:fa:ef:75:
10:29:d4:b9:94:15:a4:cd:45:09:dd:dc:f9:a9:d2:
f2:d9:75:66:32:89:48:67:50:ac:a9:74:7f:3b:dc:
33:51:fe:09:18:51:2d:c5:b0:f2:88:a2:b7:1d:f3:
71:6e:a2:df:df:54:6d:cf:5f:ff:3a:46:ff:05:ca:
8e:13:b8:83:32:9e:76:dc:ef:f1:0f:0b:b0:bf:7b:
dd:10:2d:22:fe:67:cd:e2:e2:db:bd:00:cd:01:34:
c2:f4:9d:14:a9:18:58:f4:37:bf:6c:c8:fb:aa:b4:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:07:3F:FA:A7:E7:0C:07:20:D7:61:1B:C0:47:85:4F:CC:6D:64:82
X509v3 Authority Key Identifier:
keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bf:9d:80:6b:25:8a:1c:4d:6b:14:66:03:5a:40:8b:e7:f2:
2a:3e:49:86:79:b0:08:4e:59:22:db:f2:ae:70:14:83:b7:e7:
8f:f9:b1:70:b1:91:a5:14:c6:3b:65:e4:15:64:36:f9:6a:f3:
3b:82:98:e5:41:eb:a2:20:fb:9d:87:45:6f:5f:29:39:7c:54:
64:bb:2d:64:81:58:cf:a2:1a:e0:4e:8b:22:5d:f3:2c:a0:1c:
9c:b1:e2:de:92:4a:29:04:8e:aa:03:8e:ab:54:31:fc:0f:eb:
3c:6b:e7:30:f3:8e:d8:04:1d:7a:78:6f:0d:30:d9:1a:be:22:
11:a8:80:bf:28:fe:01:ae:8e:bf:a9:4b:2d:8f:1a:c6:96:07:
b4:41:0b:5b:30:0f:89:b6:04:7e:32:45:d0:43:62:b5:35:52:
62:97:12:59:93:01:11:8c:fa:ba:3d:54:81:9e:2e:49:7b:e6:
95:5f:fc:86:28:d5:c4:08:f7:48:fc:0d:4a:63:43:ca:c3:4c:
a5:2c:fc:d3:3e:80:71:27:f1:c1:a5:2f:29:2c:33:ac:86:0f:
d2:97:95:0c:b4:a7:50:91:da:12:e5:68:a5:a3:33:bd:9a:84:
73:09:68:32:2f:0c:a4:df:9c:61:cc:05:3b:66:85:ec:43:f5:
2f:45:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:48 2026 by rpki-client