
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
File: 0S_1veXU0upxiMsALH_wFtyZTXI.mft (raw, json)
Hash identifier: GwnpKibe0RegHHIADC3yRQcTJlZ6PodsyrrnUKdnr1k=
Subject key identifier: A1:DD:E2:CF:A2:58:9E:93:93:F7:3A:74:72:32:74:ED:6E:42:9E:74
Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72
Certificate issuer: /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
Certificate serial: 0616
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
Manifest number: 060E
Signing time: Tue 22 Sep 2026 22:34:12 +0000
Manifest this update: Tue 22 Sep 2026 22:34:11 +0000
Manifest next update: Tue 29 Sep 2026 22:34:11 +0000
Files and hashes: 1: 0S_1veXU0upxiMsALH_wFtyZTXI.crl (hash: +91j8zYNectSBrj4H5nIzFUGIMKH7d2mQS823AbcSGI=)
2: 9CD333C6B92B11F09402D810C4F9AE02.roa (hash: g/iViSJomlNp1cYO1eJotO/CO79RIUjeoIEUf9uvmn8=)
3: C6212596B5FF11F0A3F6A41AC4F9AE02.roa (hash: vjcVmpY5exF0KvvFr7MQCETy6G444Gcd8QqEnM4obso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl
rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72
Validity
Not Before: Sep 22 22:34:11 2026 GMT
Not After : Sep 29 22:34:11 2026 GMT
Subject: CN=6ab30264-ca6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:f9:88:29:89:d7:58:b1:97:ea:be:98:16:
9f:84:bc:8f:fd:6e:21:86:37:f6:9d:9d:40:4d:47:
ee:50:8e:6b:42:18:a1:cf:07:29:9c:c1:90:52:8d:
49:53:70:74:13:16:12:23:9f:13:92:d4:bc:e5:93:
85:19:b2:1c:e8:e4:40:19:a6:aa:19:8e:38:f5:22:
8b:ea:78:9a:ca:31:f4:fd:2f:e7:37:76:4a:da:cb:
21:1e:92:03:b1:43:d0:a7:c6:99:72:87:ab:fa:e2:
7d:84:d9:35:ab:30:7f:68:d7:39:3b:12:ca:7a:ed:
f5:8d:56:8a:64:ce:59:36:5a:3e:36:0d:3f:77:ed:
50:61:c3:39:96:db:02:35:be:5f:4a:b9:c7:be:24:
4f:e1:cb:84:23:a9:44:38:e9:a5:c1:17:0e:9b:d0:
97:4f:77:02:11:f8:71:64:e7:39:47:74:c4:c2:68:
8b:81:51:1d:97:b5:e6:06:e6:45:cc:3c:e7:71:88:
f1:00:bf:97:2f:83:85:ec:ea:c8:83:e6:f2:71:f8:
f9:7e:c1:70:e7:e7:a9:43:b0:95:8e:7a:b1:ce:38:
03:de:e1:a7:6d:dc:ef:8c:3f:e5:80:12:30:2a:9a:
03:82:5f:b6:c9:6f:00:66:98:df:ca:17:8b:02:89:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DD:E2:CF:A2:58:9E:93:93:F7:3A:74:72:32:74:ED:6E:42:9E:74
X509v3 Authority Key Identifier:
keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:90:8d:d5:7f:1a:b1:2f:39:df:d3:48:18:e0:fa:a6:f0:6a:
59:d8:8e:7b:c2:cb:eb:a9:47:63:ce:0d:64:f0:08:aa:13:63:
2d:60:4e:12:4e:58:19:a3:bb:db:dc:77:6a:7d:34:33:24:1a:
77:ea:f3:34:52:73:4b:c1:8b:61:71:02:11:82:fe:5d:5c:b2:
39:49:81:7b:c8:cb:49:ee:3b:40:5f:06:eb:50:67:8f:4d:08:
5e:85:02:9f:8c:b6:ba:97:01:8c:88:b1:70:11:ec:92:b8:d0:
12:c1:d5:7a:4a:b2:b3:bb:bc:85:15:59:a0:c2:67:6a:7c:f4:
bc:2a:32:e4:2d:e5:ed:49:1e:69:9d:d9:6c:86:86:e3:83:f8:
68:c0:ca:f6:1d:a7:b9:31:77:9a:0c:eb:6c:8c:64:70:c3:d2:
2c:6b:78:fc:35:dd:1c:bb:26:55:a5:66:0d:5b:c1:5f:24:ac:
74:33:a1:a9:d3:80:bf:3b:fc:4d:ee:ad:e6:c4:e6:b1:b0:f6:
bc:06:3f:af:de:79:8f:43:48:7f:d7:b8:8d:63:66:7b:78:07:
49:36:1d:fb:06:ee:5c:24:02:4a:7f:60:48:1d:d4:cf:d8:a8:
eb:64:21:ae:e0:ea:b8:a6:0d:a2:d4:a3:96:96:53:67:24:db:
fd:53:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:18:46 2026 by rpki-client