
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json)
Hash identifier: DNB4dq6L98TgPz7Ea7yWFT5BaYSJdlBlANNJRqWJ3xE=
Subject key identifier: 71:A0:8A:BE:BE:1D:50:EC:53:B3:C6:57:BD:91:62:BB:99:00:89:0E
Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00
Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00
Certificate serial: 2C07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
Manifest number: A344
Signing time: Thu 08 Oct 2026 14:31:15 +0000
Manifest this update: Thu 08 Oct 2026 14:31:15 +0000
Manifest next update: Thu 15 Oct 2026 14:31:15 +0000
Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: dgH7LH/N6umFBLohakX13onOHdgjnvtA7313Bm81pd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl
rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11271 (0x2c07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00
Validity
Not Before: Oct 8 14:31:15 2026 GMT
Not After : Oct 15 14:31:15 2026 GMT
Subject: CN=6ac7a933-7ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:4b:ae:0e:cf:8b:27:df:a7:d4:4c:51:6b:
3b:8f:ca:50:c3:90:16:bf:9e:c5:96:97:b1:23:d6:
81:31:db:54:31:6d:82:2e:9c:37:97:5b:94:ba:7a:
a6:f1:50:54:ee:55:8d:f1:f3:81:40:97:96:bf:26:
9e:ef:8a:3a:c6:c1:df:fb:8e:16:ae:52:08:97:ce:
52:a2:bf:94:70:44:ef:b1:62:06:c6:d3:80:ca:7e:
04:85:c8:6c:67:21:b3:0b:ed:40:c2:a7:2c:99:ec:
23:a2:38:ee:78:a4:1a:99:82:8c:32:ac:2e:e9:4c:
a2:3f:2c:2c:2e:b4:8f:fe:bc:ac:fc:ef:49:3b:71:
b4:5e:ce:8d:05:c6:aa:09:5a:8e:0d:a1:e6:7b:31:
49:21:91:3a:59:6a:11:a2:5a:8e:24:7f:0a:88:6c:
9c:25:f5:81:da:d1:c2:34:63:a2:65:46:ba:f8:00:
77:a8:47:26:1b:2a:2d:0c:ed:86:f6:54:56:95:cc:
f5:3f:81:85:74:d4:f5:72:e9:48:3e:74:8b:c7:fc:
28:64:6e:a9:78:7f:69:29:d9:3c:cd:08:c1:dd:01:
b5:42:60:97:f7:1f:ad:50:e8:8b:6e:34:9b:58:5a:
95:ae:82:22:a5:81:c6:fd:a4:d1:98:2f:97:21:5c:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A0:8A:BE:BE:1D:50:EC:53:B3:C6:57:BD:91:62:BB:99:00:89:0E
X509v3 Authority Key Identifier:
keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:3f:4f:47:73:98:63:1f:23:fd:b1:9e:be:3d:d3:70:09:
8a:3f:e6:2a:0e:8d:18:86:cc:1e:7e:38:e3:b0:91:9f:58:d9:
6d:71:89:11:1f:bc:ae:3a:86:ba:da:91:c6:da:bc:5f:c0:a8:
df:87:1e:72:70:cd:13:a2:be:40:d3:99:9f:c3:92:c8:7a:f5:
f2:2a:55:b5:d1:5e:a6:cf:8a:45:f5:01:0c:75:03:34:5c:10:
d4:ac:fc:cc:1b:fe:ff:42:ce:54:c1:bf:3e:4f:7e:12:07:76:
0e:ce:56:3d:8c:b3:cd:42:d1:ad:50:c3:f7:3a:f0:24:21:41:
67:5e:5d:ba:d5:5d:1f:a8:a9:10:6c:c7:21:3c:de:58:9b:04:
5d:65:91:05:69:36:ac:dc:34:6b:26:30:6f:4b:08:b3:d5:eb:
a8:22:f2:2c:75:eb:b2:15:dc:86:63:e5:24:8c:36:2a:68:22:
12:12:c8:fe:ff:60:3a:db:de:c1:e6:14:9b:98:cc:31:2c:40:
7c:fe:b3:d6:93:65:5b:45:f7:86:72:77:fc:f0:80:34:74:9b:
c4:44:a3:7c:4a:9b:1d:44:f0:03:4a:77:1e:8e:50:cf:a8:7d:
b7:d3:88:63:ff:f1:21:70:9d:91:d0:77:60:f3:80:e7:9d:82:
c1:03:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 08:12:35 2026 by rpki-client