
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
File: 9fW2D5FdvXIk_85g8fnQXoNwLvM.mft (raw, json)
Hash identifier: 7GjdV6nyxMq1fvGoRZ76mrE/pnT8VtVCtaf3cNZZ6Xc=
Subject key identifier: 25:79:9D:7D:E9:C3:3D:6C:C2:60:EC:B5:D6:2F:D2:2E:F4:11:BE:9A
Authority key identifier: F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
Certificate issuer: /CN=A91E585B/serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
Manifest number: 80
Signing time: Thu 17 Sep 2026 08:02:23 +0000
Manifest this update: Thu 17 Sep 2026 08:02:23 +0000
Manifest next update: Thu 24 Sep 2026 08:02:23 +0000
Files and hashes: 1: 9fW2D5FdvXIk_85g8fnQXoNwLvM.crl (hash: olTVsfSCk03ju89ztTkDflq1sh43gZu8wIn/dfbbRfw=)
2: F59E9504F20611F0B4D6054A4A6F56BC.roa (hash: fJ10i1I3CVn/cq/HNYJ87da7lOqBMrG/ft9ahjiVUac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl
rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E585B, serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3
Validity
Not Before: Sep 17 08:02:23 2026 GMT
Not After : Sep 24 08:02:23 2026 GMT
Subject: CN=6aab9e8f-ff26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:45:d2:20:95:88:ad:e1:9d:d5:6a:4a:6e:
ab:d2:0a:fe:56:91:8d:9b:a0:6d:a5:15:9a:1d:43:
7e:33:8e:48:7f:01:d4:bf:ec:11:6f:ea:7e:56:92:
2b:96:1e:ad:5d:30:70:2d:35:90:d0:12:34:64:b6:
22:f0:b6:a4:d4:2c:2f:ed:e9:d2:33:00:ed:82:fe:
42:20:77:93:79:81:2d:78:e2:f8:23:70:9f:54:6e:
59:14:d2:72:ed:c3:aa:fa:39:d4:a0:2c:b4:52:d9:
49:60:47:22:6c:af:32:26:c0:17:d6:8b:96:c7:2a:
5f:26:c6:85:15:d6:78:2c:90:08:02:e5:ca:18:e0:
bb:33:b6:04:c0:e3:8d:7e:28:fa:d0:65:67:ff:db:
24:67:d3:0f:29:f3:e5:ae:29:42:07:e6:70:27:4c:
2b:b0:47:1d:ca:59:9d:c7:fe:f5:86:fa:f6:47:1f:
ca:48:35:82:18:eb:8f:21:e0:77:aa:b5:7e:d9:99:
9d:82:22:6d:c8:83:3f:d0:d6:ca:8a:d5:97:f7:ea:
01:8e:9f:a0:29:ef:d6:fb:1b:ed:d3:43:b8:b6:e0:
de:19:56:e9:02:fa:0a:0a:e9:d0:93:ba:2f:34:41:
4f:cb:06:93:db:3c:f0:ec:a0:bd:b1:ff:e9:1f:fb:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:9D:7D:E9:C3:3D:6C:C2:60:EC:B5:D6:2F:D2:2E:F4:11:BE:9A
X509v3 Authority Key Identifier:
keyid:F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:44:f5:f8:96:b2:38:05:1b:2a:dc:c4:78:9f:48:67:df:33:
35:5c:4a:03:6b:d1:20:bc:12:10:1c:18:69:c8:ba:52:7c:c7:
e5:f4:7f:d2:28:d1:56:d8:41:04:0e:eb:a6:dd:49:07:e8:ab:
7d:50:cc:f2:26:01:db:59:82:91:96:e2:6a:a9:2a:61:cb:bc:
b0:f6:09:6e:8d:25:05:0d:60:be:02:20:21:d7:8b:b3:d4:b5:
4a:76:19:aa:9c:76:35:73:ed:9d:5b:8f:74:6e:7c:6b:aa:0f:
10:47:6d:39:66:fc:35:ae:61:8a:6e:42:ce:4c:6c:7f:97:f5:
ab:6f:01:f8:e2:94:a3:36:e8:b9:e8:e5:37:c5:17:f0:04:b1:
80:6b:12:28:35:86:9f:af:60:97:ba:eb:85:58:20:e0:ee:80:
93:cf:cc:93:bc:da:d2:a3:33:46:9e:36:eb:ed:18:04:65:64:
5f:dd:f7:aa:ec:90:68:d9:6b:bd:6d:23:ce:40:c5:aa:c3:7e:
6e:a2:f8:f9:ec:13:7e:37:17:68:c6:ce:a0:22:1e:be:6a:36:
b4:48:12:ea:fd:49:91:6a:36:82:a3:91:76:25:70:b5:08:f4:
1c:20:73:f5:de:b9:a3:4b:5b:d4:df:3a:dd:69:9f:a9:56:d4:
db:c1:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:44:25 2026 by rpki-client