
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json)
Hash identifier: IP6y11GB0Ep7gUNXhWx7Ms2CuzX+qe4bYA+cdrgFSHI=
Subject key identifier: D9:D2:FB:16:83:81:EE:7F:9F:71:F4:8B:E0:18:AE:F0:96:37:3D:0F
Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47
Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447
Certificate serial: 0A85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
Manifest number: 0A85
Signing time: Tue 06 Oct 2026 14:59:13 +0000
Manifest this update: Tue 06 Oct 2026 14:59:13 +0000
Manifest next update: Tue 13 Oct 2026 14:59:13 +0000
Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: 2tmsfCErtPXywb539BMp1HhGcpfZG/HEBgPyZwBca+I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl
rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2693 (0xa85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447
Validity
Not Before: Oct 6 14:59:13 2026 GMT
Not After : Oct 13 14:59:13 2026 GMT
Subject: CN=6ac50cc1-6f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:1a:a6:d2:ef:dc:1c:ff:5f:49:fb:9a:0b:
a8:fd:e6:86:69:23:75:c9:aa:d0:16:70:ba:db:7d:
b0:77:da:69:ca:4c:5c:ec:c0:99:aa:85:52:73:ae:
5a:83:57:5d:bc:8a:1d:66:b3:a6:9c:10:e9:7b:e9:
1e:d9:65:39:10:94:ba:77:30:62:5d:fc:37:f2:ef:
ef:d6:04:18:a5:05:74:b1:d7:cb:ba:e3:2c:fa:6f:
a3:34:9a:2d:c5:26:ca:d6:4a:74:ff:0c:41:6d:95:
07:91:22:79:ba:ab:b1:bc:5c:60:04:aa:91:5f:d2:
04:e1:38:4b:0b:d4:a0:fd:68:c6:29:86:93:fe:f0:
f2:48:70:a1:3d:6d:99:7f:aa:46:32:ab:9e:c9:e1:
95:ec:8f:59:d0:bf:49:40:b5:99:28:fa:7d:8d:c7:
ef:28:bd:0b:53:d1:d8:2c:1a:4e:00:a6:ba:f0:9b:
5e:5f:3c:da:01:03:3c:b6:e8:e7:fa:22:f9:89:2c:
e3:7a:d2:98:8b:3a:e1:08:66:be:f1:6d:4a:72:58:
45:6a:9d:7c:cc:be:0d:92:5e:55:aa:a8:22:48:2a:
af:c7:97:b4:86:83:65:f2:83:d0:6f:71:0a:bc:30:
7d:88:f6:4e:d3:ee:d0:74:d3:71:ce:e1:7c:f4:66:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:FB:16:83:81:EE:7F:9F:71:F4:8B:E0:18:AE:F0:96:37:3D:0F
X509v3 Authority Key Identifier:
keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:26:45:84:7c:be:26:34:e5:59:e0:17:df:c7:9e:67:eb:5f:
eb:cf:b8:02:61:7a:f1:5e:41:0a:b0:e1:e3:e7:01:31:57:4d:
82:ac:89:58:c8:d8:09:b7:40:06:c8:00:68:03:87:0a:74:2c:
57:aa:f6:77:08:84:ac:d4:c1:63:64:44:63:29:6b:ec:63:af:
f4:87:4d:ba:28:89:0d:69:c3:2b:04:3a:4f:3d:d2:38:3c:e6:
14:0b:27:42:41:0c:1e:a4:1c:11:3c:e0:1c:cd:78:ad:ab:2b:
99:1a:5f:f0:e1:46:ec:7b:cf:3d:45:5f:9a:c3:ac:b0:3b:69:
07:69:a5:86:23:c2:cb:5b:28:3c:ff:fb:d1:a6:d9:98:11:c6:
57:c6:12:01:88:a7:70:50:eb:9d:6a:14:27:07:d6:ca:8d:d5:
d4:f0:e3:26:52:b8:8e:5d:21:52:fa:d5:19:0b:2e:2b:a7:1b:
d7:69:d0:36:2b:6e:2a:63:ca:65:34:d3:c8:f5:e9:ce:ab:db:
2e:ee:b5:62:16:37:95:50:d7:ef:19:d9:46:26:74:12:89:4b:
53:fb:3d:01:d6:6c:1a:a3:c0:4b:77:23:65:ac:4d:7d:b3:e8:
f1:d0:34:12:e6:0e:43:6f:d1:4f:64:08:f9:f8:c1:ed:d7:8a:
3e:76:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:29:01 2026 by rpki-client