
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json)
Hash identifier: WkuAVCMZhojQ3VnpVevHWW7lOeieUVtSYcj95F+Xcv8=
Subject key identifier: 98:04:E9:FD:F7:D4:6B:07:DD:94:3C:CF:65:74:1E:89:4A:D0:19:B6
Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Certificate serial: 35CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
Manifest number: 3593
Signing time: Fri 04 Sep 2026 14:53:10 +0000
Manifest this update: Fri 04 Sep 2026 14:53:09 +0000
Manifest next update: Fri 11 Sep 2026 14:53:09 +0000
Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: dBjrY9TQvmIfAtxqreFK9oLyJm1HNrTYdQ/9xSB300I=)
2: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: oZ6+TXbsKzCb1H31cqRGHknA2NY+Q5lG0k3cYCJhmRg=)
3: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: 3RMRBjMY5rIEnAXqqJa1OtU6bMq0UxFTQ4CaQEQ/7hk=)
4: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: vf7yinj1S9cWrGMf1fGP8uJmMGRAcRT+S6wc+GqOAfM=)
5: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: EjjdhavOBifQ/TWD+ksl2xyIA2vVpvp6HiibsqNwUc4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13773 (0x35cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Validity
Not Before: Sep 4 14:53:09 2026 GMT
Not After : Sep 11 14:53:09 2026 GMT
Subject: CN=6a9adb56-9e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:c9:8c:f5:21:a0:c3:4d:cb:bd:50:17:59:
04:1e:45:ed:7d:46:5f:2b:79:93:cd:6c:9a:3b:0f:
93:6e:da:1e:02:a2:8e:6a:8d:72:95:51:0d:0c:6d:
f2:c6:3a:c9:c5:62:bb:ed:c1:91:dd:29:ed:d3:04:
1e:e7:86:3b:fe:57:67:0f:6d:73:e4:e4:45:48:d2:
13:43:6a:8e:38:e6:68:19:47:03:68:4f:a8:b5:01:
f3:b3:fe:8e:69:a4:45:8d:48:3e:73:4b:2b:14:67:
21:36:3e:b6:7a:33:c4:9d:e1:31:b3:5f:38:32:62:
4d:f2:00:3c:df:e2:f9:98:5f:f7:0a:4e:b9:69:0d:
63:81:77:b2:01:77:6a:07:50:b0:cf:67:7d:41:91:
1a:51:d7:f9:7e:2c:13:f8:56:a5:4b:72:e8:1e:a8:
e1:46:e6:58:81:07:75:75:c1:a2:61:7e:9e:c1:0d:
00:5f:ba:cf:41:93:ba:5c:c1:d8:6c:23:82:71:1f:
ac:65:04:55:5f:b7:20:7c:bf:e3:a2:6d:d2:e5:6b:
c8:a1:f1:26:9e:4d:b0:b2:9c:98:7b:7c:85:52:c7:
a3:d4:9a:9a:73:dc:72:76:89:73:44:1a:03:28:1c:
0c:0f:a8:a3:80:d5:a8:de:2f:57:01:ce:74:36:38:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:E9:FD:F7:D4:6B:07:DD:94:3C:CF:65:74:1E:89:4A:D0:19:B6
X509v3 Authority Key Identifier:
keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:49:31:9d:b0:11:eb:ad:e2:bc:a9:3e:8e:22:28:ae:ec:02:
d7:28:cd:e9:ed:6a:34:37:0d:3d:c6:3e:96:4f:80:b7:eb:31:
70:76:de:94:82:f9:89:a5:f1:1f:c8:39:d2:5e:ca:18:49:ee:
8f:75:51:8f:83:e4:d1:9a:cf:40:a5:7f:e6:1b:f8:91:3f:7b:
8a:55:0c:ba:07:13:76:89:cb:ca:44:ea:10:1b:05:84:f6:05:
3c:7f:42:0c:d8:0b:a6:df:b4:9e:e7:9c:84:55:e4:2b:97:20:
e8:9a:e9:81:dc:1e:7f:11:b6:d6:62:c2:d3:b0:97:ba:03:71:
96:d2:3f:8a:fb:ea:89:d2:29:b3:96:f2:cf:8c:91:3c:d4:9c:
35:9f:63:66:3b:48:b9:6b:ce:49:5d:b2:a4:cc:34:d2:c1:41:
bc:85:48:7b:b9:50:d7:a1:ec:9a:b7:e1:9a:33:c8:d1:33:3e:
61:26:13:09:a2:63:5b:ae:a0:d5:4a:2b:99:78:49:64:15:f3:
af:ca:92:01:c2:cc:5d:da:5c:03:4b:75:18:bc:af:cd:a0:9f:
e9:96:ec:42:49:11:a4:bc:c5:6e:6a:af:e0:96:c8:85:78:c8:
f0:7b:3c:d3:ed:ee:e2:17:6e:43:3e:27:1b:8e:86:e4:0e:c4:
72:ce:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:53:49 2026 by rpki-client