
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
File: 9IjcYHyL28iy8lnlOSk-EQeDPa0.mft (raw, json)
Hash identifier: 63qXfOZnJ+7E0go072rmrrgs6z06vq8TAxcOexguc6I=
Subject key identifier: DD:13:12:86:EA:E1:4A:09:E2:13:47:9A:76:48:CE:0A:42:5C:A9:33
Authority key identifier: F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
Certificate issuer: /CN=A91DDB11/serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
Manifest number: 50
Signing time: Wed 07 Oct 2026 08:56:57 +0000
Manifest this update: Wed 07 Oct 2026 08:56:56 +0000
Manifest next update: Wed 14 Oct 2026 08:56:56 +0000
Files and hashes: 1: 9IjcYHyL28iy8lnlOSk-EQeDPa0.crl (hash: j/y7XDHm+v0M3jZmqXxOCzS4tzDKPhz9MuNQZrSLEcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDB11, serialNumber=F488DC607C8BDBC8B2F259E539293E1107833DAD
Validity
Not Before: Oct 7 08:56:56 2026 GMT
Not After : Oct 14 08:56:56 2026 GMT
Subject: CN=6ac60958-a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:6f:3f:87:b6:9d:5c:1c:19:1b:3d:f7:47:
fc:a3:cb:15:c2:a0:8a:1f:18:90:d0:6a:b8:8d:eb:
34:65:c7:98:7c:db:af:18:55:fa:85:02:e7:8d:6b:
a0:11:2b:8b:41:9c:e4:2c:3f:0b:a2:4b:a8:d7:26:
7c:47:b5:40:6c:cc:3c:be:91:fc:68:36:a3:21:aa:
b6:0a:0d:73:72:ac:5c:32:f4:1e:56:f9:6f:2f:94:
e3:78:7f:9d:39:cc:74:e5:b3:3b:4c:89:a1:00:5f:
59:80:17:60:17:4a:90:d9:f0:02:08:0b:5a:dc:ed:
41:b0:f1:71:8a:4a:7d:6e:d2:df:a3:8d:3a:71:d8:
82:5e:68:ce:c3:0a:22:fe:75:9d:e6:9c:e0:2a:fd:
c1:61:a4:ad:58:5f:3a:eb:35:b9:6f:83:72:b7:a3:
43:e1:97:00:d5:f2:cf:88:65:b2:c3:a1:80:06:c0:
d6:d6:73:39:3c:a4:c8:57:aa:cf:8d:b4:c0:b0:9f:
71:4c:d1:02:0d:20:43:eb:5e:4b:fc:0c:b9:fc:b7:
10:46:99:fd:f6:a0:f2:81:40:29:ef:ec:81:14:19:
23:ca:06:24:e2:98:fc:aa:c8:bf:a3:04:3c:18:19:
47:0a:9b:d6:cd:b9:64:04:6e:5a:66:be:63:bb:fe:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:13:12:86:EA:E1:4A:09:E2:13:47:9A:76:48:CE:0A:42:5C:A9:33
X509v3 Authority Key Identifier:
keyid:F4:88:DC:60:7C:8B:DB:C8:B2:F2:59:E5:39:29:3E:11:07:83:3D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9IjcYHyL28iy8lnlOSk-EQeDPa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/BC558B204E0611F1A64B629AC9833773/9IjcYHyL28iy8lnlOSk-EQeDPa0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:f0:8b:93:64:dc:53:d0:73:92:5d:5d:a1:99:6c:94:31:31:
0a:0f:ce:b9:2e:af:bd:81:43:a4:24:3c:48:1c:0a:f8:68:ed:
67:bb:14:d3:39:9f:07:d9:d2:db:7f:83:81:f3:2f:06:5d:10:
72:25:29:c5:9f:ea:1e:f9:29:c2:80:a1:f3:40:39:8d:40:68:
96:86:e0:da:1c:44:38:44:61:6e:a4:55:ea:e2:7b:35:88:90:
1d:a1:b4:15:6b:b2:3f:e3:ba:05:4f:e0:a3:4e:47:c3:25:0a:
f7:69:61:be:24:97:b8:99:2d:cc:39:b1:cc:80:29:83:1d:2e:
42:70:f5:39:73:30:a9:96:bb:d2:dc:93:cd:aa:eb:c7:6e:f7:
a5:5b:c9:60:20:8c:61:56:82:8b:6b:9f:e2:04:2f:a1:81:a6:
67:cd:54:3b:a0:0b:37:0e:d3:cf:59:d6:35:b9:ba:41:ae:ab:
47:fc:b5:f0:5f:ee:a6:6a:5d:e7:33:0c:dc:8d:71:44:f2:0a:
02:0a:0c:01:10:07:67:a2:86:82:bd:26:d7:0b:ed:43:1b:b7:
75:a0:51:f4:36:f3:bb:c4:bc:bd:a0:1a:81:49:e8:64:83:6f:
f4:8c:9b:17:e1:01:00:5e:a8:93:8a:1c:a5:8c:f3:05:2c:60:
44:31:30:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:09:33 2026 by rpki-client