
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json)
Hash identifier: PLtTg3fUySv0PMJz6sGLEvsdH3TfNTdsagyUGNzsZjg=
Subject key identifier: 05:14:16:74:29:7F:DE:87:78:4F:F7:2B:C7:D0:A4:AC:28:18:9A:78
Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Certificate serial: 024B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
Manifest number: 0241
Signing time: Thu 17 Sep 2026 02:40:34 +0000
Manifest this update: Thu 17 Sep 2026 02:40:34 +0000
Manifest next update: Thu 24 Sep 2026 02:40:34 +0000
Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: ZdHqnpo6Jt3CVFimygT4r15cdvoUynxbElIF6VYgTbU=)
2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: 6PnVAS1g7LHhPhFEbNomaCcQC2sh7domCqwSzK4ikhg=)
3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: NAyqjXxHew3fTgSiTUVKkUKTCbweGmMoTZZqsBbKNGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 02:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 587 (0x24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Validity
Not Before: Sep 17 02:40:34 2026 GMT
Not After : Sep 24 02:40:34 2026 GMT
Subject: CN=6aab5322-a7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:03:b2:02:b6:cf:7d:bb:e7:05:ae:5a:a1:
0a:90:fa:7d:7e:60:a7:4a:c1:34:d7:23:0f:a0:1b:
4a:29:0c:f8:58:fc:4e:24:b2:04:93:a8:29:07:89:
60:3d:c7:bc:e1:30:ad:15:b7:90:0e:53:b9:22:9f:
01:7c:18:2f:c6:7f:26:bd:e4:e1:b4:ae:5f:05:43:
93:5e:76:94:59:a2:64:56:3a:ea:d8:39:da:4e:ec:
aa:6a:60:0b:75:f7:8d:58:40:61:06:c8:fe:f2:e8:
65:61:c7:8f:23:ea:f4:35:26:3c:11:b7:fd:17:9c:
79:e2:38:fc:90:c1:ba:bd:ff:07:b1:11:e1:d5:a3:
07:df:e7:b2:6a:03:07:1d:bd:80:c4:43:8a:68:e4:
5f:dd:d0:e4:fa:d2:79:20:a5:b4:be:11:78:86:bc:
51:27:c2:4f:6b:82:54:d1:8e:5d:5c:54:92:d2:b8:
1d:a5:c5:10:b0:f5:93:78:40:44:e1:fd:47:5f:6f:
63:af:8f:68:c7:5a:da:9e:ee:f6:f5:e3:38:ef:8b:
cf:ac:9b:81:4a:dc:1c:11:9a:58:a1:a5:1c:db:9d:
51:79:64:71:03:93:b1:c1:ec:90:9f:bc:9e:bc:3a:
aa:39:96:b4:f8:6d:47:13:10:48:14:a3:cb:06:c3:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:14:16:74:29:7F:DE:87:78:4F:F7:2B:C7:D0:A4:AC:28:18:9A:78
X509v3 Authority Key Identifier:
keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:e2:f2:21:d3:f1:1e:fa:2c:d1:d1:f1:a5:a1:bb:87:4a:e5:
48:5f:3b:81:5f:89:ba:2f:8e:90:dc:e1:de:ff:de:35:33:0a:
c9:af:b8:95:c5:30:80:db:05:91:2f:74:b4:8d:33:ae:1c:b8:
14:77:92:ea:b7:60:2c:ca:a3:74:0a:3e:93:48:3d:7e:3d:e0:
27:5f:75:7b:9a:cc:a7:41:ed:72:88:26:5d:7f:dd:0d:d6:4a:
c9:00:54:9b:67:86:1b:77:2f:20:63:2a:33:ea:93:ce:4c:c1:
8f:8b:8f:53:13:6a:db:59:8c:a5:26:0d:b1:47:c9:e3:1b:0f:
76:f7:a8:17:f3:b4:9b:4b:3b:2d:f5:fb:5b:bd:b4:0d:b1:6b:
6f:45:f4:30:be:ed:b7:5c:5d:f2:80:0b:f2:aa:8a:90:0f:5c:
59:c9:b5:40:3b:9d:c4:d8:4c:65:97:76:f4:bb:09:07:06:b8:
4b:6d:27:51:48:40:39:74:87:62:9e:97:b4:85:33:88:0f:10:
90:a2:a3:e5:b9:58:8d:cb:59:a8:cf:16:7a:ab:21:e1:90:f1:
9b:82:2a:9a:e2:29:7d:b0:9c:c1:08:61:73:f6:1c:5a:a5:b6:
53:62:f1:8e:ce:c3:d4:03:64:d8:00:0c:3c:9a:0d:20:e9:8d:
aa:c5:ae:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:12:11 2026 by rpki-client