
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
File: 9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json)
Hash identifier: /K/R3DQC8WES7Jd34d+YLPKrww9UUxOAs9bY3NlpNhI=
Subject key identifier: 6F:8C:D4:F8:2B:14:88:1B:97:EE:5B:CD:FC:C9:BC:0E:CA:BA:3E:67
Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
Certificate issuer: /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
Manifest number: D1
Signing time: Tue 03 Nov 2026 07:43:07 +0000
Manifest this update: Tue 03 Nov 2026 07:43:07 +0000
Manifest next update: Tue 10 Nov 2026 07:43:07 +0000
Files and hashes: 1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: N763mAFuJuJTS5EwWa794bzODxIhGbGr1pp7CI4n+T4=)
2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: +oOWaz5+puMsV9knRaxvNPItkQ6Wk8WkynSxoQb5q8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 07:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Validity
Not Before: Nov 3 07:43:07 2026 GMT
Not After : Nov 10 07:43:07 2026 GMT
Subject: CN=6ae9908b-92b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:9c:32:9c:2f:54:30:1b:c0:ab:7b:8d:94:
a2:f8:c8:ec:0a:47:07:99:89:28:e5:49:9a:c9:6f:
60:e3:f9:24:4d:02:c2:c2:f1:cc:21:3c:16:5a:ac:
08:68:fb:ff:ee:1a:44:b9:b0:3a:0a:d1:c9:5e:8d:
b1:b5:2d:06:7a:d3:dc:6f:bc:82:61:29:ea:01:d4:
05:48:0e:d3:8c:8c:d7:6a:8e:b6:0b:67:64:73:cb:
76:b7:72:89:27:32:36:7e:f3:64:03:cd:fb:ee:c5:
a6:4a:24:9f:3c:2c:84:d2:e8:04:45:9a:ff:58:f4:
d7:f5:f2:97:40:fc:f3:92:a6:00:6d:32:28:9e:26:
e5:63:ae:9d:ad:db:98:9d:6f:80:aa:39:d9:80:a6:
2f:a1:0f:8a:fa:4c:93:0b:60:d6:93:72:14:e3:40:
40:e5:4d:0f:04:84:f3:49:90:db:c1:8e:df:9f:0f:
ea:59:3c:63:cb:7f:a2:7c:d0:2d:ea:b8:72:4d:14:
d8:a5:c6:c4:77:f8:16:8d:9d:c7:0b:ac:3a:39:a7:
80:1f:82:28:9a:48:60:7a:68:a3:54:6c:c7:9a:3c:
87:be:ab:ba:92:2f:2f:87:ad:89:1e:64:35:b4:6e:
41:8b:bc:50:72:df:8b:c3:0a:9b:3c:3c:dd:bb:0f:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8C:D4:F8:2B:14:88:1B:97:EE:5B:CD:FC:C9:BC:0E:CA:BA:3E:67
X509v3 Authority Key Identifier:
keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:42:ed:33:f0:35:30:88:21:2e:ad:6f:ee:cf:fb:4d:4a:02:
b8:03:16:6e:34:a4:59:c2:e2:43:d3:6d:c7:11:dc:94:6b:53:
66:0d:b9:b1:ee:07:97:54:2d:d5:e0:47:b6:08:3d:e1:2f:41:
c9:3b:e8:e3:7b:e1:7c:68:00:c9:24:2f:35:de:64:a1:68:5c:
d7:cd:a9:81:92:e9:ef:83:5c:20:8d:13:cc:b2:a4:96:c2:1b:
d5:b4:3a:0e:a3:19:85:83:1a:9a:3a:28:4b:9c:5d:9e:05:48:
e7:c8:7c:2c:58:e5:fa:48:c1:22:5c:25:00:ff:e4:db:d2:20:
e8:d3:04:d7:bc:43:6f:a6:06:c3:e5:72:0b:c4:4f:41:02:ca:
7c:0a:11:fb:44:17:76:a1:65:78:ea:ed:6a:00:33:9b:ca:5f:
e0:ab:52:4e:4b:67:14:8b:1f:1f:98:d2:d3:f0:e5:d5:8d:47:
cb:26:2a:15:b1:9f:03:6f:eb:e2:ab:11:f6:1c:d2:c6:e4:43:
ac:e5:c9:be:0d:a9:b6:77:21:b4:bb:fa:3c:f2:1c:83:0a:f9:
6e:30:7b:d6:30:4a:d7:83:7f:6a:bc:18:fd:ca:46:89:91:78:
a2:74:75:fc:47:82:f8:32:4e:49:de:ca:29:ac:c6:2f:a8:56:
d7:86:e3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:40:40 2026 by rpki-client