
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
File: V02z1iXehCAuOsnBw9Wwd01reOM.mft (raw, json)
Hash identifier: DOzX2McCKoAMkcdXjgfGbKlpwsw39qZROxMrKqktTR0=
Subject key identifier: 7F:80:77:FB:6F:C2:B9:F6:8F:18:61:01:85:DB:DE:E3:77:50:51:05
Authority key identifier: 57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3
Certificate issuer: /CN=A91E33AA/serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
Manifest number: E1
Signing time: Thu 03 Sep 2026 06:57:09 +0000
Manifest this update: Thu 03 Sep 2026 06:57:08 +0000
Manifest next update: Thu 10 Sep 2026 06:57:08 +0000
Files and hashes: 1: V02z1iXehCAuOsnBw9Wwd01reOM.crl (hash: AgKqsEk9m7MvyJRtNZa1m0E9hS7HlHecmZ1ociYXtow=)
2: A5E6E422A8E511F0A46A7729C4F9AE02.roa (hash: VOEGBBPwOHH7RWSeFdVb+qSkT0fmCuL9yLhrNNsYEBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl
rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33AA, serialNumber=574DB3D625DE84202E3AC9C1C3D5B0774D6B78E3
Validity
Not Before: Sep 3 06:57:08 2026 GMT
Not After : Sep 10 06:57:08 2026 GMT
Subject: CN=6a991a45-bfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:76:46:45:c4:4c:d6:01:94:72:4a:4f:78:22:
ae:f3:d5:ef:ad:4e:36:5f:70:c1:57:93:ad:e5:aa:
0b:51:a7:3f:31:30:54:e3:94:cf:4c:dd:c0:a6:8d:
87:79:55:aa:76:1e:5b:d6:08:27:b9:94:4f:a8:82:
2c:2f:bf:4b:ac:5b:cc:9e:61:40:93:87:6c:d9:28:
a8:9d:e3:e8:cd:53:80:fd:cd:bc:ca:90:c9:07:ed:
3a:92:df:d8:6f:eb:b0:9d:84:5d:f9:07:e0:99:eb:
af:99:10:7d:e5:48:8e:e5:2d:4f:8d:d9:04:2b:b2:
2a:78:aa:97:37:6b:49:0b:c1:11:3e:e7:f2:ad:b5:
0f:10:3d:11:9a:92:78:e3:d7:3d:46:7e:5d:cb:48:
55:f5:6a:cb:48:e6:fe:c9:25:97:0b:e3:87:37:62:
28:eb:a8:71:c6:16:3b:a4:f2:ae:e4:f5:38:e2:d0:
5d:b5:08:12:2f:dc:89:d1:0d:10:f8:59:60:05:ec:
06:f5:89:aa:ed:7d:16:fc:3a:bd:81:f6:8d:cd:a4:
9a:10:c8:7a:8b:e2:b2:b0:7b:25:ed:68:49:1d:55:
97:3b:01:e9:38:94:ec:96:48:ec:fb:31:5b:03:88:
4a:1f:aa:fb:9a:c9:cc:29:3d:3d:e9:c7:ce:80:a8:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:77:FB:6F:C2:B9:F6:8F:18:61:01:85:DB:DE:E3:77:50:51:05
X509v3 Authority Key Identifier:
keyid:57:4D:B3:D6:25:DE:84:20:2E:3A:C9:C1:C3:D5:B0:77:4D:6B:78:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V02z1iXehCAuOsnBw9Wwd01reOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/49A1A878596711F08C40792CC4F9AE02/V02z1iXehCAuOsnBw9Wwd01reOM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f4:39:12:72:98:b1:46:f0:77:88:ef:18:78:7b:b4:a9:45:
f5:ab:24:0e:52:9e:e9:8e:cc:e4:0c:db:b0:02:1c:c1:e1:3d:
be:03:2c:3f:0d:07:fd:6b:ed:96:28:6f:ca:2f:79:89:e9:f7:
30:1f:6b:25:18:a3:c3:0f:99:50:4f:b2:37:26:a6:e0:a0:3f:
f0:b3:9e:b6:cb:0c:64:7f:c9:32:1e:24:fc:e5:24:61:87:ec:
08:01:fd:23:a5:71:e5:41:bc:63:b8:bc:cc:53:cc:39:4f:27:
d0:e4:a6:94:21:fa:ed:e9:af:00:6e:7c:69:29:97:4a:c4:ce:
d9:86:be:1e:18:e0:8f:5d:c1:47:00:ea:05:e9:4b:52:b6:9f:
f8:94:be:50:f7:71:17:ad:09:37:90:67:12:d9:b0:fc:66:a2:
78:e2:cd:7c:bd:e7:43:38:e4:6a:59:f0:f3:81:f6:9e:a4:79:
78:90:ea:45:24:de:b7:f7:8e:dc:16:89:ca:a9:7d:d9:3e:cc:
04:b3:05:66:96:28:69:bc:6a:a3:78:2b:b9:8b:a9:67:03:c9:
41:35:40:b1:77:f4:c1:d1:30:95:c4:aa:f4:88:ec:0b:fc:9f:
33:92:b9:60:66:52:a4:6b:a1:7a:1d:16:48:63:64:c3:a8:f0:
56:c3:31:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:40:20 2026 by rpki-client