
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json)
Hash identifier: duIgkWN14ZATlu9AfAkUqkBnJYwsHZq5NslbeYN9iLM=
Subject key identifier: C5:BB:C3:AF:46:34:A9:D1:16:50:4A:07:4C:EE:1B:BB:E0:92:16:1F
Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Certificate serial: 35A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
Manifest number: 3597
Signing time: Sun 04 Oct 2026 14:58:48 +0000
Manifest this update: Sun 04 Oct 2026 14:58:47 +0000
Manifest next update: Sun 11 Oct 2026 14:58:47 +0000
Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: ymkstI8HfEavBGU0+D82WeNwPr2hnaACPtCuHBX3rr8=)
2: rAkH9NztVWOAjgr7fOh5wRfAIAo.asa (hash: EDATT7ZWSBHFpg3As45BGrAoL581ApENXO/q9sdKlLI=)
3: 97CD303CB0B711F19DEAFA5A6511F970.roa (hash: 1+Rv0xwcT8FH4Wpx62qgzDGLt6pRohITLkn3FYQIkHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13737 (0x35a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Validity
Not Before: Oct 4 14:58:47 2026 GMT
Not After : Oct 11 14:58:47 2026 GMT
Subject: CN=6ac269a8-7386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:07:6e:67:3d:92:85:81:07:69:ac:58:07:
0f:e8:a4:9f:8a:9c:69:fe:5d:b7:b6:2e:7d:1c:4f:
43:07:8c:40:af:ac:3f:88:58:6d:e2:b1:57:8d:4c:
7b:1c:3c:2e:0c:c4:45:30:69:87:67:c7:ce:08:8d:
b5:5e:a0:39:86:ce:88:49:8d:90:da:33:78:5c:2b:
39:04:50:b3:70:fa:10:d6:79:a0:9b:11:9c:b1:03:
37:f6:6f:e0:06:4b:e7:36:04:62:81:eb:46:16:d5:
cd:24:ff:9a:1b:e6:e0:12:03:78:7f:11:4e:b1:2c:
37:4f:00:25:18:90:b5:f8:38:6a:26:2c:da:f8:81:
0f:11:e0:1d:98:8c:a8:62:51:14:ac:70:9b:bb:a2:
8a:fe:c5:f0:9a:95:c2:34:99:6a:0b:7c:f4:52:67:
d8:96:19:0b:2e:65:73:eb:02:b9:3e:2f:de:36:25:
65:b5:18:2f:36:78:1e:ef:1a:8b:45:87:2f:2d:29:
19:6a:94:4c:26:d3:64:11:80:5d:31:87:b1:25:89:
d2:5f:ff:8d:6f:c7:8a:ea:f9:bd:a5:b3:29:53:2b:
2c:69:71:b2:df:29:ef:c1:62:bb:f8:e8:fc:f5:58:
f7:6a:3a:e5:56:27:a9:da:80:60:f5:e9:cb:f1:11:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BB:C3:AF:46:34:A9:D1:16:50:4A:07:4C:EE:1B:BB:E0:92:16:1F
X509v3 Authority Key Identifier:
keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:0f:b0:e5:67:18:68:f7:fe:96:17:29:ef:02:47:1b:a4:10:
6c:ff:64:bc:24:37:89:02:05:5f:21:cc:4e:08:88:f7:f1:f2:
78:59:5c:42:da:c5:43:d9:91:cc:16:f8:fc:f1:67:d3:b6:a9:
9e:39:59:22:c1:4f:82:64:e6:c0:54:7b:65:83:94:49:5e:78:
37:fe:b3:09:d9:9d:32:36:fa:55:15:0f:cc:85:e2:51:4a:94:
df:da:52:3f:e6:df:f9:d9:e8:07:cf:0a:ac:21:29:44:f9:de:
2e:10:a0:9f:de:67:50:a7:58:b2:9a:b3:ed:24:07:74:73:b7:
ed:7a:9a:47:dc:8c:c9:09:2a:27:6c:e4:56:18:53:c1:53:a7:
5f:34:2d:e1:0e:fc:22:e3:bc:ed:92:f1:4c:2d:82:9f:d6:88:
38:ee:54:60:7f:16:86:81:55:d6:81:a5:a5:ef:64:93:0c:09:
2b:6c:de:19:4a:a7:f3:45:63:bb:d2:44:64:ba:83:4f:25:53:
ea:ad:f8:36:bc:38:7d:a8:c5:9e:bf:72:ec:bb:5a:a4:2d:af:
44:cf:01:74:a6:46:13:cc:f5:24:96:21:dc:ab:fc:ee:c9:a7:
2c:c3:07:06:b1:3b:dc:b3:39:ff:d2:00:65:c2:bd:e3:40:98:
a8:ab:3b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:26:56 2026 by rpki-client