
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
File: A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json)
Hash identifier: Xr2pdayPsDKF1kqeqd3T83zBR73TgwnIxeG2w43UtwE=
Subject key identifier: CA:6F:E2:FC:0F:99:35:BF:D6:40:6D:4A:64:9B:D5:5C:D5:4E:32:5A
Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81
Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
Manifest number: 01E9
Signing time: Wed 19 Aug 2026 04:00:05 +0000
Manifest this update: Wed 19 Aug 2026 04:00:04 +0000
Manifest next update: Wed 26 Aug 2026 04:00:04 +0000
Files and hashes: 1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: JoOOpZDcLBN4FMrKSjo0KDwwO3SdRUe48EpLtG2oFWk=)
2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: jGiJWEhk3dhO1eibIxZXdqF5/Lngdo1Rs0UIzjEFR1E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl
rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781
Validity
Not Before: Aug 19 04:00:04 2026 GMT
Not After : Aug 26 04:00:04 2026 GMT
Subject: CN=6a852a45-e93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:f9:ec:cf:13:29:e1:e5:67:9d:f1:e4:43:
ec:9b:21:5b:51:32:ee:b7:b0:47:79:86:ac:b2:ae:
1a:e4:34:1e:ae:36:c0:93:8d:fa:e9:63:83:7f:49:
a9:ba:b0:ff:8f:28:90:d9:e3:dc:9a:9b:f7:99:5f:
cc:1e:ab:37:76:5a:cd:06:d6:9b:72:9c:11:7c:e1:
8d:d1:bd:15:10:32:b8:ff:ef:b9:e5:a7:bf:fe:3c:
06:86:85:2f:aa:c7:18:49:99:f7:6c:3d:89:83:1c:
af:39:aa:ec:82:bf:ae:c2:d7:8e:69:7b:81:9e:32:
09:f5:ba:e2:e7:e2:5c:c5:3d:54:96:7e:e7:40:e9:
59:44:bc:3c:53:d5:41:f8:36:fe:f6:84:28:29:a1:
85:53:f1:bd:4f:20:7d:44:6b:2c:0a:39:73:c8:be:
55:bd:4a:e8:e6:f1:ba:28:f0:7e:7b:77:ef:b2:97:
ff:45:18:0b:66:b6:70:96:87:e9:08:1e:79:97:dd:
3a:91:32:70:08:56:67:35:9b:71:ab:f0:4c:e5:e4:
f9:a5:04:98:e0:ff:47:71:bb:d1:1c:f6:d9:88:4a:
21:89:9f:92:9c:9f:38:7d:e2:9b:1c:77:d3:e5:fd:
9b:96:9b:6e:45:52:00:03:33:29:d3:26:92:b4:91:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6F:E2:FC:0F:99:35:BF:D6:40:6D:4A:64:9B:D5:5C:D5:4E:32:5A
X509v3 Authority Key Identifier:
keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:80:f3:3e:2e:69:91:b4:e4:f3:f9:cb:eb:54:68:5c:9e:fb:
c8:b0:25:42:1f:36:13:c5:82:df:f6:ac:00:33:f9:ef:2d:6a:
98:b4:ae:d0:86:51:ae:56:bf:fe:81:77:81:f3:d3:b8:22:4d:
75:3b:fd:9c:58:f4:33:f1:9b:3f:3f:91:73:21:2b:43:41:f2:
f1:67:8f:c9:81:9c:5c:39:01:40:fc:ca:e0:88:be:57:94:d6:
1b:3f:9b:66:46:47:b8:4c:5e:0c:e6:91:05:17:32:97:ad:aa:
2e:4c:35:bb:64:03:ba:25:86:d1:5a:26:5f:df:df:95:e2:23:
c7:43:42:f7:9b:af:e0:67:c8:2e:27:15:16:8a:d2:c1:d0:90:
b3:be:6d:43:d0:7a:74:4b:d7:0a:07:bc:d9:5b:7f:1b:b3:3b:
f7:e4:b7:58:58:4e:16:1f:4f:b4:b5:b2:99:99:cc:c7:d0:b6:
9c:70:2a:4b:11:77:cb:a4:d2:6a:7c:de:ca:95:4a:56:04:86:
6d:d0:f0:ce:c8:55:02:f8:ec:26:3e:65:24:5f:df:ed:22:15:
3e:c3:72:87:6a:e6:4d:57:71:3d:05:b4:91:6c:39:2b:de:81:
bc:c4:4f:31:be:30:8d:71:f1:4a:9e:4b:c1:8e:a9:5e:98:66:
54:8e:9a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:49:13 2026 by rpki-client