
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
File: mtiSjq8lxRyzsyEdSba6ufC59n8.mft (raw, json)
Hash identifier: CXdD+LvHVUNFxB4lcmKf/wDXEtBgrGSFgb+Re9W1yOo=
Subject key identifier: FB:4D:25:5C:28:A6:88:79:9E:17:46:D2:30:89:8E:74:DB:3E:4B:A0
Authority key identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F
Certificate issuer: /CN=A91EBD8F/serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
Manifest number: 9D
Signing time: Tue 13 Oct 2026 07:58:21 +0000
Manifest this update: Tue 13 Oct 2026 07:58:20 +0000
Manifest next update: Tue 20 Oct 2026 07:58:20 +0000
Files and hashes: 1: mtiSjq8lxRyzsyEdSba6ufC59n8.crl (hash: 7c2URZDdlMfC7KNUIOEy+6DC4YJtNgQ7T8rjP/i0/H8=)
2: 805F9336DF1611F0ADE7C949616F56BC.roa (hash: Ifqu/imW1CpJtOK3B5gKpgSp1ZH+G/n9WtAUtx4GCTI=)
3: 80EEB89ADF1611F0ADE7C949616F56BC.roa (hash: T0uD7GQksTME+qhX3xTaNiGDGWI7HGkb3DLPjDo3u3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl
rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 07:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBD8F, serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F
Validity
Not Before: Oct 13 07:58:20 2026 GMT
Not After : Oct 20 07:58:20 2026 GMT
Subject: CN=6acde49c-192d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:45:20:f9:51:da:0d:07:bb:c7:db:d4:79:
6f:6c:c0:17:d9:85:a4:12:81:3b:19:1c:78:89:a3:
47:d6:85:7c:53:c8:7a:56:b7:9a:63:c7:9c:e6:ab:
b1:be:73:60:df:b3:34:eb:48:5c:24:f2:0d:dd:f8:
a3:2a:55:c2:9f:6a:a4:07:b9:da:50:4d:e3:36:d2:
4d:7c:6f:0f:a6:8b:4f:37:7f:97:aa:c3:5c:6a:a8:
ed:16:1b:46:53:85:fe:18:ff:18:74:b2:8e:96:00:
6f:ad:9c:49:73:16:a7:f3:ca:f5:b9:52:63:af:78:
c3:43:e3:fd:22:85:2e:2b:b5:fd:2f:df:cd:36:a9:
47:65:fc:df:05:87:56:fb:47:d5:37:4c:39:7b:22:
a5:2c:8a:37:dd:ba:c3:f9:5a:17:e0:df:97:34:79:
3a:ca:b5:60:e4:a0:f8:da:22:8b:d9:5f:b1:b6:d8:
f1:bc:45:da:30:30:8d:49:1d:8c:e4:02:f5:0e:a1:
26:08:c6:b7:7e:ad:b7:01:7e:82:37:0a:ae:4d:5c:
82:94:6b:ad:5f:6d:c5:ee:6e:de:57:a0:14:df:a4:
7d:7f:70:96:4c:a6:50:3d:7f:e7:72:c5:c4:d7:06:
ad:00:fc:a8:b0:d8:a4:94:ed:61:88:1d:57:22:e7:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:25:5C:28:A6:88:79:9E:17:46:D2:30:89:8E:74:DB:3E:4B:A0
X509v3 Authority Key Identifier:
keyid:9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:3c:05:70:66:82:01:be:05:86:c4:bd:b1:49:e8:9b:75:
fa:8e:ef:28:85:d8:ab:e7:e7:99:0d:5f:9b:ce:8a:b2:5a:55:
c5:2f:b6:f8:cf:64:85:31:03:6a:58:ac:58:c3:5a:e8:f6:a4:
21:2a:f2:d7:47:3d:a0:d1:e9:6d:76:1d:96:64:fc:41:3b:08:
cf:96:a3:f3:5a:0a:7e:7f:e9:e0:c7:2a:55:4e:f3:71:f3:cb:
4c:80:6e:2c:65:32:c5:6d:ee:0b:8a:a0:80:b7:53:d2:27:c0:
f7:28:9b:12:53:5e:b0:e4:8c:5f:07:f3:97:96:d3:61:75:84:
4e:7d:cd:bc:0e:a1:c1:73:aa:04:11:69:fc:94:02:86:c8:f9:
d2:18:48:72:43:f2:bc:37:77:a2:f9:dd:75:43:35:01:15:b9:
ad:58:60:7a:c4:65:e5:31:65:11:d6:37:4f:0b:03:cc:e7:a4:
ee:0b:54:27:36:ed:76:24:63:0f:a5:8e:06:88:00:7f:69:a9:
14:7f:56:d7:36:48:d6:79:28:cc:35:3c:39:94:77:23:35:f0:
1a:95:64:58:35:4f:f5:b9:fc:4f:8b:be:90:25:c9:df:67:0b:
08:1e:74:19:fd:c6:c5:92:82:68:50:d6:72:53:c9:eb:4a:97:
cb:e2:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:17:58 2026 by rpki-client