
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
File: b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json)
Hash identifier: LdxWV/+kV+7GX0lSfTTu6bg4JQ/X2Z/cX3Cb3ipooyM=
Subject key identifier: 8E:B8:B4:E9:9C:31:E0:33:AC:7A:1A:D6:30:1C:0E:97:D5:C4:98:00
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
Manifest number: 01C1
Signing time: Mon 31 Aug 2026 04:22:24 +0000
Manifest this update: Mon 31 Aug 2026 04:22:23 +0000
Manifest next update: Mon 07 Sep 2026 04:22:23 +0000
Files and hashes: 1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: 6kwgd5Xs+1HYTl5NBJEp/RC5Jp4IVvSm4l5YG04iC0s=)
2: 9DE187FA2A8211F08575E277C4F9AE02.roa (hash: 4eeNf5jC2Mk+3sdc5Wmsh3IL+6DgzipfF5IlQKuRXx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 04:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Validity
Not Before: Aug 31 04:22:23 2026 GMT
Not After : Sep 7 04:22:23 2026 GMT
Subject: CN=6a950180-c9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:a1:a8:fc:cb:08:9f:73:b0:24:d7:53:8d:
5c:02:06:93:42:c7:de:bc:8b:c5:be:4b:0a:aa:8f:
e4:fe:98:9f:4e:5f:8e:a2:4d:37:01:b9:1d:c2:0c:
9b:c3:b3:3f:5c:e8:63:8a:40:31:15:63:85:de:a4:
9e:93:14:de:cf:39:e3:a5:6f:51:d2:04:6d:35:49:
ab:d4:f8:4f:25:18:82:ac:ce:4b:20:23:d3:58:4e:
ed:2a:98:e7:50:45:c1:83:23:0b:76:1c:12:32:c6:
a7:e1:f8:37:aa:8e:c2:51:c3:9a:4f:c3:1c:e5:f9:
02:62:8b:eb:07:ef:d5:88:68:6e:7c:c4:2c:62:21:
27:9f:78:c0:43:b4:c0:77:d1:b9:ec:bb:7f:58:9f:
ac:55:ae:51:47:f4:21:16:70:16:0f:91:0e:32:55:
09:35:95:7b:3e:71:c3:0d:63:bc:5a:09:76:57:0a:
7e:6d:13:bf:f7:85:04:70:c0:29:79:40:24:56:53:
fb:de:c5:72:b2:6e:31:86:90:9e:2f:48:89:9c:33:
e8:69:ba:b4:20:bb:03:fe:66:fa:df:ff:ce:52:d5:
81:0c:10:63:ad:3f:50:46:db:68:f5:e4:2f:8f:3a:
a5:e6:44:ef:ad:2e:1b:d6:69:d2:a0:81:71:89:2a:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B8:B4:E9:9C:31:E0:33:AC:7A:1A:D6:30:1C:0E:97:D5:C4:98:00
X509v3 Authority Key Identifier:
keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:84:ea:d2:61:7d:50:4c:cc:69:95:24:01:f0:4e:6c:71:d3:
58:5f:a2:ea:6e:d3:be:6c:c0:ac:cf:66:c5:d0:6d:30:8f:04:
83:09:85:8a:79:15:cb:20:a0:7c:56:bf:e6:17:49:b3:b0:d2:
c1:b3:db:ae:bf:6e:56:eb:81:19:ca:1c:25:b0:5d:e7:82:02:
09:ba:9f:1c:fe:c4:72:ba:10:15:67:26:d8:7e:2e:e9:ae:74:
15:0b:69:65:b4:11:35:00:df:8f:01:51:c0:2c:9f:bb:5c:f0:
56:fe:4e:5b:84:de:92:78:d3:e2:33:33:dd:47:31:b4:36:a6:
e8:39:db:8a:c6:9a:fa:19:d9:51:88:b8:f9:a0:b3:f4:84:f9:
05:5c:33:70:5e:e4:0a:8d:de:5d:32:b8:78:f4:4c:a5:68:b3:
c5:91:35:4a:33:88:dd:4b:c0:8d:df:cd:36:37:ac:e0:86:9c:
fa:7c:ee:b6:5f:57:fd:e3:9c:50:30:5c:30:40:d8:d4:af:bb:
dd:6b:67:43:26:01:bc:4c:6f:cc:d5:86:eb:f6:bb:21:8d:5c:
62:40:40:82:87:1c:b6:6f:f3:63:e3:61:e3:5b:8f:59:ca:ce:
50:a4:73:33:64:14:19:75:57:ba:c0:b5:93:4a:b3:ff:c7:3d:
82:dd:a5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:41:22 2026 by rpki-client