
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json)
Hash identifier: BgIcnlERUlPKrdXetvJlKSN+l/rlmfNE+Vjl4lUsXsQ=
Subject key identifier: 54:4E:44:85:70:36:39:16:CE:06:81:9F:52:62:3D:3A:38:F3:18:13
Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Certificate serial: 0175
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
Manifest number: 016C
Signing time: Wed 19 Aug 2026 05:29:32 +0000
Manifest this update: Wed 19 Aug 2026 05:29:32 +0000
Manifest next update: Wed 26 Aug 2026 05:29:32 +0000
Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: eAW5ANvJQzudf/zW09x9hfGTAYkPcb+cLKNFtRMceAY=)
2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: of9gDmyx98htPYcM2lAvW1XGnxUh1bmJa4MFK/pfI3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl
rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24
Validity
Not Before: Aug 19 05:29:32 2026 GMT
Not After : Aug 26 05:29:32 2026 GMT
Subject: CN=6a853f3c-928b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:04:eb:97:12:cf:fa:14:70:3c:9d:45:4b:
53:eb:e0:b6:fb:e8:ff:45:63:ea:13:58:ae:9d:4f:
1d:bd:e4:b2:0d:94:2d:5c:b8:c5:ae:07:6d:41:08:
33:7e:3d:3f:8d:de:9e:21:c2:55:df:70:08:da:81:
f1:c9:0a:8d:72:a1:40:ba:f4:d9:d9:42:33:fb:f1:
4e:36:65:48:b7:51:02:33:80:ac:d3:67:00:08:23:
3f:4b:99:6c:3a:81:7b:19:e3:12:f7:38:6d:42:75:
b8:b8:3a:51:90:f5:a6:30:3c:8b:7b:04:62:97:87:
b6:85:46:b4:bf:08:f3:28:fe:db:f4:0f:73:b4:5c:
9e:d2:85:52:6b:9a:20:f2:5c:8e:03:29:67:6e:8c:
89:27:6a:48:51:bb:58:27:46:f3:06:e0:af:c7:cf:
fb:b8:8f:98:f0:64:5d:81:e0:f9:11:95:35:d0:a8:
a0:89:1d:48:b5:e6:53:03:6f:b1:35:7f:03:d4:90:
c6:05:e1:c1:7d:c1:8a:6c:26:64:9b:8f:58:9e:6e:
b3:7b:88:ff:3e:8e:e4:8d:c8:32:c8:87:d6:7f:90:
90:8f:99:30:9d:a5:2e:1c:a0:4d:88:eb:9d:93:67:
6e:95:eb:a2:c8:51:9e:ac:11:c1:40:bf:9c:85:bf:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4E:44:85:70:36:39:16:CE:06:81:9F:52:62:3D:3A:38:F3:18:13
X509v3 Authority Key Identifier:
keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:20:89:9e:67:f2:54:ad:ca:b6:66:b5:7b:10:8b:d6:a8:5a:
2c:ac:92:02:3d:b0:af:8f:71:b9:7c:7f:6d:5e:9f:9e:14:a2:
93:17:d9:11:5d:5c:6c:7d:63:85:c1:ae:dd:f8:e5:ac:14:03:
99:49:60:7a:64:54:cf:73:a4:1e:f0:fd:6d:c4:37:19:aa:85:
8a:f3:49:1c:f8:d5:25:58:de:33:09:24:c1:03:0d:07:26:fb:
08:e0:96:58:37:6a:59:5f:8f:b2:18:7d:cc:89:72:4a:56:2d:
31:03:1a:81:e5:02:e1:6a:03:c2:66:66:78:8a:11:0a:c8:8f:
89:19:84:17:45:2b:bf:17:6b:71:87:f0:44:1d:d3:9e:58:9b:
9b:2a:8b:47:27:08:39:14:a5:f6:13:a0:b4:9f:80:2e:95:0b:
1c:08:56:2f:3f:b4:74:68:b7:4c:9e:8a:54:f3:15:61:a0:18:
b0:db:4a:53:2f:88:79:48:1a:1f:9a:bf:9d:11:1f:a0:f9:c8:
aa:a4:c3:9b:2b:a4:40:37:6e:74:47:64:fe:54:b7:1f:f6:9f:
46:23:9b:48:fb:da:af:d5:75:cb:de:b8:6e:4d:92:da:c0:4b:
98:8b:21:92:42:59:5f:c5:31:f6:0b:65:bb:f0:b0:e4:51:15:
15:61:5c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:45 2026 by rpki-client