
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json)
Hash identifier: wq5CxRMSriP6H8OaoYXa3CilhtiK+0L7in8mJUSCJx8=
Subject key identifier: 12:E8:2D:7E:2B:98:37:11:F9:40:1A:32:49:C0:DB:D8:E8:57:42:0D
Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Certificate serial: 071C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
Manifest number: 0713
Signing time: Fri 04 Sep 2026 21:53:43 +0000
Manifest this update: Fri 04 Sep 2026 21:53:42 +0000
Manifest next update: Fri 11 Sep 2026 21:53:42 +0000
Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: g46Z1EpMGgL0HW2Q2PGdoUygT/rQduOGR7uvv9MRrmQ=)
2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: nL3vp/CU21MSnng2C+poLgofAZHvrlCtCeZrfBZOSyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820 (0x71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Validity
Not Before: Sep 4 21:53:42 2026 GMT
Not After : Sep 11 21:53:42 2026 GMT
Subject: CN=6a9b3de7-5689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:48:9d:7c:77:c6:df:17:60:a0:cb:76:3c:
2f:32:30:0c:37:72:52:81:7f:3d:64:2e:1c:fd:0b:
c5:ad:ec:b0:46:d6:49:18:46:b5:53:86:8f:88:62:
40:b1:0c:33:9a:2c:77:78:f1:b9:de:e4:a3:4b:1e:
83:be:29:4b:5c:83:c2:b9:a1:92:38:6d:cd:bd:c6:
3b:21:30:0b:bf:3b:2d:3e:f6:85:32:27:93:5e:61:
7f:11:4f:8c:51:bd:80:fd:57:ba:92:9f:46:fb:e1:
2a:48:f8:c1:fa:72:0b:f8:3e:65:4e:53:c0:a3:fd:
6a:3e:f4:30:e9:33:09:07:e1:e1:2e:31:d2:0e:cb:
87:d0:d0:3a:62:8b:3d:d8:17:ee:0e:d3:cd:73:5d:
d7:34:7f:00:dc:51:68:05:64:ba:2e:b2:e7:6c:95:
8e:e0:68:90:e7:7c:85:a1:68:e7:bf:c1:be:85:a8:
79:9d:6d:21:76:93:2b:e0:46:53:22:d3:04:a0:75:
4c:f5:06:33:82:56:81:a1:b0:2a:18:8f:77:90:dc:
20:58:d6:19:78:3a:ca:d3:3a:92:f4:5d:8f:33:3c:
92:38:3b:04:f0:76:79:73:a9:df:4b:2f:55:12:d7:
e4:bb:71:e3:f7:17:19:25:03:2f:1b:67:36:7d:54:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:2D:7E:2B:98:37:11:F9:40:1A:32:49:C0:DB:D8:E8:57:42:0D
X509v3 Authority Key Identifier:
keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:0e:93:dd:80:bf:75:76:6e:ec:17:24:45:95:23:85:88:9b:
05:0a:5f:1c:8b:08:25:a3:0b:59:15:4f:77:7e:6d:ce:30:20:
48:9f:51:a9:c8:61:1d:c0:71:20:14:7d:7a:04:23:ec:ce:9a:
3d:c6:0a:ee:42:02:89:da:9a:66:c5:8c:6e:64:e8:02:e5:0f:
a9:ee:05:8b:bb:30:47:f0:0e:2c:8e:b4:4c:2c:b7:7f:b4:a9:
b5:dd:3a:77:1b:03:8b:c0:e0:ce:40:7f:a6:91:6e:c8:48:ed:
e3:af:98:e8:a4:db:f4:8c:fd:dc:aa:de:8a:2c:45:72:9d:67:
06:95:b8:33:59:ad:5d:0b:12:a6:9a:c5:53:c9:51:8b:07:5c:
fd:30:78:4c:5d:e7:af:f8:c5:e6:d2:47:76:64:e9:b2:56:d3:
bf:8e:77:54:05:c4:b1:2d:05:a5:67:c3:4c:eb:30:d0:26:fd:
84:f6:98:54:2f:58:9d:3d:7d:89:bc:69:76:77:30:77:5f:eb:
36:3f:32:ee:92:4e:6b:58:eb:1f:e2:7f:48:76:9e:54:d7:75:
0e:d2:79:4a:ba:7f:de:7c:1f:62:7c:ad:f4:12:3c:5c:46:fd:
48:95:09:14:05:38:67:88:2f:1b:9e:27:e0:f6:1e:f5:9b:f9:
74:d3:f3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:56:47 2026 by rpki-client