
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json)
Hash identifier: KyMhLZUyTajUDmkEeThNCWAmgTTJaPi7k/5CsUzcxIc=
Subject key identifier: C9:5F:40:C9:DC:B1:16:5B:2F:33:A8:62:F0:31:09:E1:90:D3:06:F5
Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Certificate serial: 1154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
Manifest number: 114A
Signing time: Fri 02 Oct 2026 17:23:32 +0000
Manifest this update: Fri 02 Oct 2026 17:23:31 +0000
Manifest next update: Fri 09 Oct 2026 17:23:31 +0000
Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: aLnGkbwY12n3EFdsxgzGErdlvlE8gRv/jnPPZAhX/bM=)
2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: oFeE08+96lFkhO5Y8pgw40xMTO01awfdjL1KNmvvWOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl
rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 17:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4436 (0x1154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Validity
Not Before: Oct 2 17:23:31 2026 GMT
Not After : Oct 9 17:23:31 2026 GMT
Subject: CN=6abfe894-b725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:e2:5c:f3:9d:d6:b8:3b:9e:1f:00:e9:85:
da:53:9c:db:12:7b:9a:8e:d8:ec:8f:cb:af:ac:cb:
b1:70:4e:4d:bb:02:f7:9b:bb:4f:43:71:a9:6f:06:
60:a0:7e:d4:fc:37:91:0d:43:e8:64:d0:59:2d:9c:
14:77:7e:49:b2:d9:c1:b5:5c:f2:48:d9:42:12:d4:
70:a4:ae:1f:64:ec:ea:fb:29:c8:4a:0a:8a:e7:64:
b6:3b:6d:40:0d:10:22:2d:1d:3a:2f:73:5a:f5:41:
9d:ea:77:52:53:7b:cc:47:6a:cb:22:47:e5:33:6e:
77:12:2d:e0:6c:82:e1:cd:f5:2d:bf:fa:66:0a:db:
f2:de:6a:a5:44:c0:e1:ca:5d:5a:95:ca:5f:b2:90:
b5:c3:60:e6:34:4c:4d:10:ae:f1:e2:d5:54:2c:6f:
6b:b6:ad:46:27:e3:aa:59:90:e9:11:8a:77:27:ea:
d4:d9:7d:1c:9f:63:10:43:50:6f:57:b9:56:47:81:
94:b4:ec:b2:2b:c2:12:15:23:1f:ef:9e:17:e4:db:
72:f2:b3:b8:27:b8:61:ba:7c:b5:45:0b:40:96:7d:
3d:d5:1d:00:f4:1b:68:c2:8b:c5:d5:b8:b0:5a:94:
4b:de:96:85:1f:fb:8b:61:40:31:3d:e0:7f:1d:99:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5F:40:C9:DC:B1:16:5B:2F:33:A8:62:F0:31:09:E1:90:D3:06:F5
X509v3 Authority Key Identifier:
keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:cf:5e:90:e8:d8:8d:a7:e9:5c:2f:52:13:be:9c:7e:be:71:
91:95:f3:43:6f:f6:20:cb:47:e5:3d:62:c2:a8:05:4e:07:d2:
71:10:c0:19:4c:9c:e8:0a:fb:95:c4:19:5e:fb:06:fa:04:9a:
32:b1:a6:2b:75:d9:63:fd:90:b3:87:92:e5:8a:e3:36:d8:e7:
95:d4:55:bc:9a:c6:03:3c:c6:39:75:51:7a:a6:f6:bb:20:55:
52:89:de:c1:db:7d:52:9c:cf:3a:60:f2:11:4e:03:39:e1:86:
31:75:00:d4:70:c0:9c:79:04:ac:b5:ce:67:a9:c6:14:2a:58:
88:f5:eb:33:33:d8:e0:67:4c:77:bd:05:4c:fe:7a:1b:0f:9a:
a8:35:c6:4d:91:70:c6:b8:a5:f7:85:66:5e:e9:3c:86:8b:a7:
58:67:e4:61:a6:05:2c:c2:0d:c5:f6:5b:bb:c0:63:d8:4b:f8:
ca:8c:19:fa:a1:bc:4f:08:d9:e6:07:ea:d4:47:df:c7:88:ef:
5b:da:fa:0f:74:84:e5:c0:6c:0a:7b:79:3f:6d:d8:af:51:b4:
3f:af:ed:4e:3d:d6:b5:2a:b6:53:5f:df:dc:79:e0:30:95:2c:
46:4b:a8:e0:a3:20:04:de:ad:79:b2:30:c4:5c:ca:bf:33:34:
b1:96:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:01:54 2026 by rpki-client