
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json)
Hash identifier: v1MrfvE2iJ5292SSSNJ7HBxJqE9hx0jLcuE3gUcURYg=
Subject key identifier: 37:CD:7D:16:0B:C0:EA:A8:42:BC:65:35:2D:1F:D4:EB:6F:2B:FA:A1
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
Manifest number: 0108
Signing time: Tue 29 Sep 2026 06:42:29 +0000
Manifest this update: Tue 29 Sep 2026 06:42:29 +0000
Manifest next update: Tue 06 Oct 2026 06:42:29 +0000
Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: NuqOQMpgUmyZDHg5FR0zV+QVHEO5YX6NqeqKliWDQFE=)
2: 4F895700924A11F191BBE0403711F970.roa (hash: o8rIUX0iXF0/vLlaYop34iZteYCZTpdvvS4dPkBqo4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 06:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Validity
Not Before: Sep 29 06:42:29 2026 GMT
Not After : Oct 6 06:42:29 2026 GMT
Subject: CN=6abb5dd5-1445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:9a:5c:53:e4:52:ad:ab:c2:25:2b:70:32:
6c:73:df:a8:bb:26:d8:09:d5:29:fe:24:89:21:3f:
e3:43:79:8e:f0:bb:c2:0d:2d:27:1c:49:ee:51:00:
72:98:25:ed:01:10:f0:2d:9e:d9:a9:4b:d1:01:46:
8e:d9:ca:68:f6:2c:3f:a0:c1:da:3e:fb:b7:39:b6:
bf:23:77:5b:98:c7:4e:00:db:25:25:d3:4b:ff:90:
a8:bc:b2:96:97:25:6e:50:5b:5e:18:68:99:ca:6d:
71:07:8c:20:12:e7:ab:cf:46:da:14:36:0c:2e:7f:
66:f8:c6:ed:3a:da:55:2a:1b:a5:6b:0c:c3:3d:7c:
b2:0e:bf:79:46:b0:8b:cd:2f:f1:d2:90:92:75:52:
1b:05:3e:5f:b3:df:da:87:13:07:d3:51:e2:46:7e:
24:8d:90:fd:a8:01:73:47:da:7d:cc:54:74:b3:09:
17:44:bc:ed:56:35:24:64:8c:48:81:4b:54:ee:5f:
7e:b7:eb:18:02:53:4d:83:74:d0:5d:c6:4b:68:13:
d5:4f:66:64:10:bc:d5:8d:ea:da:f1:e2:58:bd:ef:
1a:eb:d9:7c:fa:c4:32:c3:15:18:c4:4e:fe:bc:6f:
a9:08:da:41:9f:9d:c9:32:58:b6:3d:7c:4f:51:16:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:7D:16:0B:C0:EA:A8:42:BC:65:35:2D:1F:D4:EB:6F:2B:FA:A1
X509v3 Authority Key Identifier:
keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:36:bb:2d:72:95:94:91:76:23:7f:96:07:b2:5d:5c:bc:ee:
31:f2:28:ee:ab:f3:a2:7f:ae:f9:b9:fc:1a:3a:a4:6a:fd:c3:
fb:90:11:e4:82:18:b6:c2:77:5a:a5:d0:16:4d:0e:d7:86:a9:
ff:dd:06:ee:f3:68:cf:89:c0:f8:d8:f0:a6:91:61:6e:55:f7:
3d:38:f4:be:b1:5e:88:ca:6a:df:bb:dd:db:30:25:10:8a:95:
93:f5:d9:a7:46:4e:2f:a6:08:e2:48:fd:e9:fb:41:d9:79:c4:
54:26:58:94:c3:36:45:78:3c:d5:77:5d:6f:38:27:f6:d5:9c:
2a:14:23:d7:82:fd:39:42:14:2d:0e:81:91:a4:cd:37:96:0c:
2e:7e:6e:5a:30:4b:8f:d2:1c:88:98:a5:ff:a2:ad:d8:23:b1:
46:dc:97:13:d6:a3:05:59:10:6e:b3:0e:22:ee:26:86:b4:94:
40:a2:75:66:5f:76:dc:7c:0e:96:11:18:1a:2f:27:57:d0:80:
03:b4:62:1f:4f:60:70:9b:93:5d:ed:d9:04:95:79:3a:7c:93:
df:68:c0:fe:b0:84:12:10:08:dd:27:d7:5f:17:4a:9e:9c:b6:
57:f9:c8:0a:e9:cb:af:a9:8d:b2:25:45:7a:fa:2b:34:bd:15:
2e:1d:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:46:12 2026 by rpki-client