
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json)
Hash identifier: XBgn03p42PwPxQWgGRH0AQxl+dDxjkDJxR7lGFJNVtg=
Subject key identifier: BA:F8:D5:AF:3E:C8:7E:65:4A:B2:46:60:DC:33:84:84:24:3B:D4:D3
Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18
Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118
Certificate serial: 3584
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
Manifest number: 3584
Signing time: Tue 06 Oct 2026 14:54:25 +0000
Manifest this update: Tue 06 Oct 2026 14:54:24 +0000
Manifest next update: Tue 13 Oct 2026 14:54:24 +0000
Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: e2kRRbLX5a6mIpLWC4GY21hrylnf7qS5VVPMnFpR6vI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl
rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13700 (0x3584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118
Validity
Not Before: Oct 6 14:54:24 2026 GMT
Not After : Oct 13 14:54:24 2026 GMT
Subject: CN=6ac50ba1-0c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:d3:36:7d:60:db:7c:6b:24:01:fe:d1:51:
1f:a9:20:d7:9e:cd:01:da:16:c2:af:ba:b1:2e:78:
1e:a1:e6:0a:39:60:07:9f:9e:c4:bb:c6:be:50:a0:
ca:b3:4b:10:57:3b:fa:13:cb:35:a6:b9:64:8f:53:
b5:1f:57:a8:47:64:f6:30:4b:2e:ab:e0:82:1e:a0:
bd:82:cf:c3:ce:d0:ef:65:56:7d:d8:4c:33:b1:1b:
24:70:70:22:6b:27:8e:2f:a7:0a:18:b9:90:92:d3:
36:31:de:26:73:c2:bc:59:d3:3a:af:b1:bf:eb:e3:
73:17:a5:ab:b0:4b:a8:30:2e:c0:2c:00:24:68:73:
7e:52:19:3f:d4:36:16:1c:73:bd:fe:09:3f:5e:fc:
98:8f:60:ba:05:1e:e8:ee:3d:ba:d3:fa:d2:43:54:
8d:75:e2:09:34:66:61:ab:56:aa:9f:0c:52:2e:18:
78:a9:3c:5e:ca:da:84:01:95:c8:3e:55:9d:2f:7e:
bf:92:66:b0:27:78:2a:40:4f:e8:44:a9:6e:4a:ff:
98:37:90:45:a5:11:c1:68:a4:21:0c:d8:c3:03:46:
3f:2d:49:c4:e2:05:3e:b4:d1:d3:31:c0:d4:f6:40:
44:f4:4f:fb:18:56:b6:cc:cc:4b:09:73:cd:04:1d:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:D5:AF:3E:C8:7E:65:4A:B2:46:60:DC:33:84:84:24:3B:D4:D3
X509v3 Authority Key Identifier:
keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:6e:a1:62:29:a4:12:69:17:24:f3:3c:5b:23:de:53:bd:f0:
2b:e3:b7:50:84:70:a9:82:5b:f1:db:6d:4c:bf:da:ac:4d:bb:
4e:45:90:0d:14:67:02:ef:a8:b5:1e:91:a4:70:b6:44:2c:0b:
93:64:26:8a:e0:ef:38:f1:38:10:d6:ef:e9:31:7f:d6:98:f2:
e7:c3:02:74:c0:3c:14:21:08:11:02:87:be:d5:81:a6:7f:de:
16:78:45:91:43:ac:2e:db:09:07:ff:ab:00:14:fc:cc:e4:0f:
cb:e7:98:5e:71:e3:df:00:78:3d:15:81:20:5c:02:5f:ca:ee:
a9:3c:17:17:8d:14:18:9f:e2:05:23:56:12:48:a4:6d:ee:ba:
c1:d9:b7:f8:fd:03:bd:23:c5:1c:a2:76:aa:3b:56:fe:a7:a2:
9f:62:67:40:e4:c1:b2:c5:9d:fd:27:f1:fa:ef:54:8c:6c:d7:
b0:53:76:cc:d0:10:55:db:70:e1:17:26:20:c5:3b:c6:e5:ca:
ed:57:56:ea:33:52:0a:17:06:59:5e:da:f1:fd:d2:db:91:e7:
d7:9e:7d:30:37:98:db:cd:9b:a5:7a:12:a5:69:51:9f:66:57:
c8:f2:e6:e8:99:df:64:76:5f:8b:0c:c6:d5:78:0d:94:51:16:
62:1d:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:09:31 2026 by rpki-client