
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json)
Hash identifier: N+zdHbOqm6XP4WzWoraIsSaGSu7PI+Osh1ImX1C/Ztw=
Subject key identifier: 24:D6:5B:60:F2:BD:20:AB:7A:57:56:5E:2A:F1:85:23:72:6C:71:5E
Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Certificate serial: 0D47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
Manifest number: 0D3B
Signing time: Fri 02 Oct 2026 18:25:55 +0000
Manifest this update: Fri 02 Oct 2026 18:25:54 +0000
Manifest next update: Fri 09 Oct 2026 18:25:54 +0000
Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: HhZtbQrTXi3LAb9F4zA23mvNXD3YXIIQ0i62pliY6zM=)
2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: b1VtTeZ3i3+p56WxtkqO9+Z/XK8otu366dEwvuMxQIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3399 (0xd47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Validity
Not Before: Oct 2 18:25:54 2026 GMT
Not After : Oct 9 18:25:54 2026 GMT
Subject: CN=6abff732-f492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:26:e8:f7:91:43:0c:b3:39:04:1b:87:4f:
6d:6d:25:d6:94:64:71:b3:86:4c:d6:d2:a2:15:e0:
74:59:7a:a0:53:3b:6b:da:b5:cc:6a:71:1d:32:c1:
e8:f8:d4:26:4d:e5:74:3e:63:25:f7:4a:b6:f4:d6:
83:1c:85:4a:d3:ea:d4:9d:89:fb:0b:f7:a4:6a:0b:
c4:4b:43:fe:47:f8:f0:93:f6:fb:08:f6:f2:33:80:
4b:2e:9e:89:98:d2:32:7a:c6:59:b3:0b:af:f8:9a:
dc:d4:bf:12:93:03:e0:9c:7c:0f:51:1f:5e:02:2f:
90:b4:d9:1b:7f:dd:a8:97:fb:0e:34:ec:d1:48:98:
ae:c0:04:3b:15:68:58:62:97:55:37:46:42:f6:35:
4b:17:5c:8b:3b:5c:6b:4f:ef:0c:00:e2:c8:8b:23:
0a:ab:12:5e:5d:76:3e:38:14:ea:50:f7:e9:e9:96:
a8:6e:67:77:05:43:08:a7:19:28:6a:11:89:bd:1c:
2e:29:fb:98:7f:37:c7:18:56:a0:9c:15:5b:4b:68:
5f:7c:0e:0a:f4:2f:b2:12:33:06:5c:27:3f:cb:73:
f5:2e:4b:b5:04:4d:75:95:02:98:88:60:aa:2f:6d:
be:42:40:fd:60:e3:c3:87:e0:8e:82:bb:46:87:65:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D6:5B:60:F2:BD:20:AB:7A:57:56:5E:2A:F1:85:23:72:6C:71:5E
X509v3 Authority Key Identifier:
keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:59:51:18:d6:9a:70:3b:d0:52:16:fa:c1:9e:db:47:3d:fa:
2b:5c:00:cb:1f:a2:93:9e:67:ac:52:34:cb:56:27:9c:cb:5c:
9c:04:a4:61:7e:6e:43:87:40:c0:b4:ae:75:d9:28:49:3f:d4:
00:4b:53:4e:14:9e:b3:1d:ef:40:11:52:50:61:58:2c:b8:c7:
89:fd:43:5f:d2:02:48:71:64:ba:f8:0d:5e:ed:06:3c:4d:3a:
00:68:61:22:13:5d:60:91:87:27:a6:a0:87:75:fd:87:8e:ff:
2d:39:24:00:e5:85:90:76:f2:dd:25:66:6a:6a:54:27:40:3a:
ae:33:1c:2d:b3:1e:df:d1:31:0f:8a:92:c8:93:d6:d9:81:4d:
4c:45:b5:63:17:fb:9d:2f:d7:5e:ab:3f:b7:5b:69:67:9c:46:
5f:c4:67:67:99:c4:f5:20:2a:31:d6:fd:3c:3e:45:19:3b:60:
c3:64:66:65:0c:d0:7f:c5:e5:0e:87:2e:9f:d9:89:aa:43:17:
c6:50:7b:c2:b1:19:79:0e:61:19:fe:fe:27:60:d2:4a:4c:1e:
36:a2:ec:c7:b5:92:d9:40:47:7e:9c:d1:fb:0e:24:3b:c5:7c:
78:52:68:16:fe:1b:46:a5:4d:d4:77:3e:ce:31:f8:ad:30:aa:
fa:fc:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:42:06 2026 by rpki-client