
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
File: _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json)
Hash identifier: UHWqsk+APzkuk4stpIdPYf1ligSIhb6lmJ4EdyhyrGE=
Subject key identifier: BE:F8:2B:27:31:72:60:3F:81:64:05:79:F9:FF:06:42:D4:0D:49:C6
Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
Certificate issuer: /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
Manifest number: 0101
Signing time: Mon 21 Sep 2026 06:09:45 +0000
Manifest this update: Mon 21 Sep 2026 06:09:44 +0000
Manifest next update: Mon 28 Sep 2026 06:09:44 +0000
Files and hashes: 1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: pFij4n/yrp4L3U3kB9r9xT3E5EL5i8SfZ3NA7/6MRHs=)
2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: LfCoz7Dnyj7tBchjned94Fjoj2Azlhk3SF6mzP2Fido=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl
rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
Validity
Not Before: Sep 21 06:09:44 2026 GMT
Not After : Sep 28 06:09:44 2026 GMT
Subject: CN=6ab0ca29-ca9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:81:08:60:b9:fd:83:4f:b8:c3:c7:39:0a:
79:b5:db:2d:af:9b:0a:c5:97:49:b6:88:c9:2b:ad:
40:16:47:dc:63:e7:55:80:67:cc:44:8b:37:f1:a1:
5c:2d:98:d9:53:b7:51:3a:ce:7a:fc:cb:83:b2:11:
fb:ba:ce:62:88:17:39:aa:99:d8:58:11:d4:b0:b1:
1c:2b:01:3c:35:3f:8e:6b:e8:fd:ec:8e:82:e1:ff:
7b:d3:15:56:2f:43:e6:6e:65:bb:f8:02:64:4f:a2:
8d:5d:a5:8a:99:0b:4e:63:8f:e7:1f:23:52:cc:49:
03:79:04:62:9e:08:7c:b6:0f:e3:a6:c5:89:37:ac:
7a:41:d8:d4:0c:5c:08:05:3c:ca:06:cc:95:b9:9e:
a9:d7:23:2f:65:6f:2a:d6:d6:4f:bf:1c:c8:52:e4:
e9:35:ea:d9:1d:16:59:54:59:f0:1d:75:24:d7:3d:
35:cd:1a:b6:ef:ea:83:7d:d5:79:ab:fd:c8:1b:96:
a9:94:fc:64:3e:22:c1:13:ac:e9:e5:d9:57:59:02:
56:57:23:d4:9e:5b:5e:43:90:79:c3:c6:b3:d9:a1:
fe:b5:3a:98:8e:7e:76:47:1a:cc:7e:ee:5e:f0:49:
93:7a:27:55:f4:7b:b9:ad:1c:96:e3:07:84:8d:dc:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F8:2B:27:31:72:60:3F:81:64:05:79:F9:FF:06:42:D4:0D:49:C6
X509v3 Authority Key Identifier:
keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:6e:fe:d8:f1:b3:90:b3:9f:06:a1:16:26:01:85:4d:56:ad:
61:99:6e:61:77:6d:4f:34:3c:f7:d1:26:57:b2:0f:e2:97:bd:
af:b8:82:47:a3:d6:c7:ee:c1:4d:eb:57:5d:83:aa:da:8c:3d:
55:45:d2:b8:54:87:24:b5:58:3f:2e:a2:c3:eb:4a:38:2d:fb:
cf:d0:b6:88:2e:84:81:2d:1a:a1:f2:46:99:3d:da:5d:95:1d:
0b:7d:5b:5a:09:67:a8:29:92:90:f5:4c:08:d6:47:59:18:11:
af:22:34:92:bb:b9:a0:2d:b9:1f:b6:7f:46:2e:e4:9c:8a:f6:
6f:c0:59:85:6e:b6:59:9a:ca:35:a0:57:7f:4b:ca:18:b1:a1:
d5:31:15:17:a0:21:b3:5e:29:18:67:61:44:ff:53:ba:f1:f5:
5d:03:e9:0a:71:57:75:0a:d9:53:75:b3:a4:ae:b0:39:c7:0e:
3d:7c:e3:74:95:cf:f3:0b:22:a9:55:f7:2b:92:b3:4d:31:6d:
9c:d8:b6:0e:14:12:72:1e:15:bc:ea:2a:3f:98:24:1e:66:08:
4a:df:20:b9:a7:62:a1:1d:56:1c:29:e9:64:2a:b9:be:83:3f:
f7:e0:77:8a:a1:7c:9c:05:4e:3f:26:78:d4:56:f8:b3:c7:ea:
59:9a:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:21:15 2026 by rpki-client