
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
File: Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft (raw, json)
Hash identifier: BxB8rqnW5+BosCisZ3AWyZW9jmLNgqLc3bkpcOEvLxk=
Subject key identifier: D3:D4:3A:29:34:E3:4B:98:45:89:71:03:C3:2C:16:F1:28:8B:5A:A2
Authority key identifier: 46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73
Certificate issuer: /CN=A91CCE09/serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
Manifest number: 81
Signing time: Tue 27 Oct 2026 08:01:27 +0000
Manifest this update: Tue 27 Oct 2026 08:01:27 +0000
Manifest next update: Tue 03 Nov 2026 08:01:27 +0000
Files and hashes: 1: Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl (hash: nL8GdG/oYlcFw8ZHMKdyRPDURzUQB2SUg3ojCGjz+Xw=)
2: 5396275C112A11F1ADC700F81B3D8C67.roa (hash: wxsoV6n9bNMMjGcsLAWPPKxBCyMgY8xWZ0QUFwcjolY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl
rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCE09, serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
Validity
Not Before: Oct 27 08:01:27 2026 GMT
Not After : Nov 3 08:01:27 2026 GMT
Subject: CN=6ae05a57-8357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:85:64:e9:b5:16:c6:58:b4:3c:40:32:ae:
ae:66:4f:2f:1e:bb:c3:23:e4:6a:d9:ab:cd:0a:2e:
2e:e8:fb:89:38:11:f3:5f:c7:1f:8a:d1:9a:dc:e7:
96:34:3f:65:4c:91:6a:35:b1:b4:ee:4c:32:d9:91:
b5:b5:e6:cf:6f:2b:2e:61:36:9a:82:cc:81:f9:ac:
eb:47:da:f1:7f:11:16:e0:98:cf:77:c0:43:11:c1:
ab:4e:55:e9:cc:9d:17:04:2b:91:91:9f:11:6e:94:
de:b8:a5:db:4c:77:52:b1:e0:fb:34:8f:a7:e2:90:
bd:d3:2c:01:51:8b:64:a0:73:c2:2a:c2:26:2a:ca:
f5:cd:94:bf:10:05:3d:03:f9:70:e5:60:b0:af:96:
20:34:30:04:0a:a6:cf:b9:06:0e:57:af:ef:f2:ab:
2e:ab:d4:9b:84:38:78:a1:08:97:c7:7f:af:cb:89:
d7:61:00:3c:42:8b:26:96:7f:79:24:06:bf:ab:d3:
5e:be:d1:6f:4f:c4:ae:7a:9a:28:d5:f3:e3:2f:28:
31:86:5e:5f:ba:08:80:f1:b7:30:c5:67:51:dd:2f:
10:15:11:60:1b:86:77:33:95:5f:5d:2d:03:39:68:
aa:45:e9:89:d4:ca:53:99:89:db:27:7a:a5:e5:f6:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D4:3A:29:34:E3:4B:98:45:89:71:03:C3:2C:16:F1:28:8B:5A:A2
X509v3 Authority Key Identifier:
keyid:46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ac:e5:8e:e4:f9:fa:2d:95:6a:58:ea:c4:d6:64:fb:b3:c5:
85:69:3e:90:33:ad:9e:ae:ec:22:09:95:da:ec:4c:45:ab:1c:
f2:9b:06:bc:e0:26:4b:f1:29:5a:c6:75:85:bb:8d:02:7a:a6:
31:63:20:68:13:03:7d:76:08:0f:8c:b3:2a:d6:32:38:2f:2b:
fe:f0:2e:3d:5a:85:c0:c1:42:d5:a2:9c:d3:8f:26:a7:03:d1:
53:08:73:82:ae:6f:10:f5:20:62:32:ea:87:33:54:00:a1:0f:
92:a4:fc:80:5e:7c:74:46:4e:02:cf:ae:ac:1f:ed:48:59:ad:
60:bf:89:ba:0e:49:c2:41:b3:65:aa:2c:1d:cb:3b:b4:4f:b8:
7d:da:cc:e9:78:9e:4c:04:e1:4f:f3:df:f7:82:95:b2:53:8d:
95:54:2d:11:ab:f7:bb:e1:a5:89:6d:ab:45:e3:6f:7f:91:2a:
57:fd:1b:fa:db:7e:dd:f8:d7:89:fd:b4:83:bc:a6:45:66:09:
11:d0:25:dd:cd:d0:67:23:35:58:9c:d2:43:4c:c1:f5:61:52:
f6:3a:7a:fa:19:68:8e:f5:91:4c:2a:74:cc:1f:54:f4:f6:bb:
75:ab:81:9a:38:b3:58:74:9e:da:07:99:0d:5c:56:28:34:c7:
3b:e0:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:30:04 2026 by rpki-client