
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
File: n23iTD7GWLEeatCvFdv-DKPb9mg.mft (raw, json)
Hash identifier: 6doaQRIncvdHcO3Vgi+qk8WmdG0acuvXgpH32/UM7tY=
Subject key identifier: 49:2E:E7:CE:A8:E9:33:87:45:18:84:95:59:7E:F5:40:E4:35:FF:1E
Authority key identifier: 9F:6D:E2:4C:3E:C6:58:B1:1E:6A:D0:AF:15:DB:FE:0C:A3:DB:F6:68
Certificate issuer: /CN=A91D2DDF/serialNumber=9F6DE24C3EC658B11E6AD0AF15DBFE0CA3DBF668
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n23iTD7GWLEeatCvFdv-DKPb9mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
Manifest number: 0B
Signing time: Mon 05 Oct 2026 09:41:10 +0000
Manifest this update: Mon 05 Oct 2026 09:41:09 +0000
Manifest next update: Mon 12 Oct 2026 09:41:09 +0000
Files and hashes: 1: n23iTD7GWLEeatCvFdv-DKPb9mg.crl (hash: MTe7cTrIzVPCL4IPOhDlyS6N1/tGkTplxCay9zaLIh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.crl
rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n23iTD7GWLEeatCvFdv-DKPb9mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2DDF, serialNumber=9F6DE24C3EC658B11E6AD0AF15DBFE0CA3DBF668
Validity
Not Before: Oct 5 09:41:09 2026 GMT
Not After : Oct 12 09:41:09 2026 GMT
Subject: CN=6ac370b6-1d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:b7:e3:5e:67:70:4b:80:e8:de:0d:ec:0e:
d6:03:73:e5:8a:39:2f:62:94:f0:57:87:12:36:b4:
c1:32:8e:09:ff:a3:8c:69:22:05:0e:c0:c0:35:b9:
5b:f7:e6:d9:39:3f:38:a7:9a:1f:21:cd:52:fb:b2:
3b:94:86:d1:d4:25:c3:3f:d1:eb:2f:2a:d2:17:5a:
ef:81:2c:d9:8f:08:9d:e4:0b:39:4c:e3:b9:c2:7c:
34:7b:4b:53:30:b8:c8:59:25:09:6d:02:47:5f:56:
8c:d2:f0:b2:0f:e4:7b:73:e3:cd:78:0d:8b:b6:1d:
ea:67:1c:68:db:d9:fa:ee:17:93:ea:55:f4:1c:87:
0b:21:ed:f8:bc:56:4b:8c:ba:96:33:d4:bc:48:cc:
8b:60:38:5e:3f:06:9f:04:69:41:c3:25:a9:b4:cf:
3c:1b:37:90:2c:fc:31:bd:61:29:25:fc:14:ba:3f:
63:ea:4c:d5:4e:0b:96:3b:bb:a1:61:f2:d5:b3:a5:
82:0d:e0:bb:5d:2c:01:17:72:67:62:05:82:fe:fa:
52:f9:95:40:34:44:c5:3d:63:b0:da:46:fc:a3:2c:
de:48:55:b7:8b:7e:0c:1b:b1:fe:c4:d7:3a:92:6b:
c3:f9:e2:06:a6:1f:5e:4a:85:b4:24:91:34:b3:db:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:E7:CE:A8:E9:33:87:45:18:84:95:59:7E:F5:40:E4:35:FF:1E
X509v3 Authority Key Identifier:
keyid:9F:6D:E2:4C:3E:C6:58:B1:1E:6A:D0:AF:15:DB:FE:0C:A3:DB:F6:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n23iTD7GWLEeatCvFdv-DKPb9mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b8:22:f8:7c:ff:22:69:0a:14:08:35:bc:09:a0:f8:38:f6:
13:3c:17:22:60:97:19:86:7d:85:8c:e5:60:45:60:43:4c:8a:
e6:8d:c3:af:b7:d9:d3:96:41:c6:3a:db:2c:33:91:c4:26:e1:
bc:44:fb:83:b2:14:d9:c0:c3:04:86:05:45:d9:c8:af:8d:5e:
6d:1a:8d:cf:58:17:94:53:47:63:90:f2:53:b0:d7:d2:23:e3:
48:d8:66:b5:49:c0:99:f0:16:8f:37:17:af:a7:fc:0c:c3:0f:
b3:7e:7d:cb:51:e4:59:09:c9:7a:26:ad:a7:4d:d1:f1:5e:ab:
c5:e7:a4:8a:97:5d:1f:c4:81:48:77:8a:fd:b5:73:e5:c8:0b:
ba:0b:a8:e6:52:cf:b2:f0:e9:9d:c8:d7:e2:ac:4d:87:2e:7a:
d2:5f:4b:a0:f9:35:09:9f:ab:d6:39:41:37:56:72:18:32:83:
44:62:47:14:76:e0:75:b1:fe:0a:e8:74:b4:91:ab:ff:4a:fa:
af:5c:ce:0d:41:73:91:e1:fd:7e:cd:17:75:56:11:c4:19:03:
49:8e:08:94:8e:7a:18:3c:6b:93:2f:e4:3f:a0:85:ff:70:f5:
fe:da:31:f4:7c:f6:d6:d5:d0:e7:ba:b9:21:31:9b:11:1a:7b:
87:00:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:11 2026 by rpki-client