
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
File: AWua7YGMT9MEeU6yQtiz5WdlpUU.mft (raw, json)
Hash identifier: yt/00nXUj9ds3P00SviN5Os7IEcwftjcOP2c9dr5VsE=
Subject key identifier: 1F:55:BB:F4:8B:BF:B2:40:B3:1B:6C:11:89:AC:9E:AA:49:5F:00:7A
Authority key identifier: 01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45
Certificate issuer: /CN=A91F53E8/serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
Manifest number: 36
Signing time: Sat 17 Oct 2026 09:26:17 +0000
Manifest this update: Sat 17 Oct 2026 09:26:16 +0000
Manifest next update: Sat 24 Oct 2026 09:26:16 +0000
Files and hashes: 1: AWua7YGMT9MEeU6yQtiz5WdlpUU.crl (hash: CBURfdRnebhJL3jR79h2Tb1Ir1tzd8UEcgTt72B8eSo=)
2: ECDD26C485F411F18488A9A174A30FBC.roa (hash: VW4iL+otXl2aCZSt2+vQ6u30LJgxp5dtKkbiclHRg5w=)
3: E9B1F1B8A91811F18EC286413C11F970.roa (hash: wImMWO9pGivt+ncg4d/fuAa6GL2v48XaohUBkLie4ao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl
rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 09:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53E8, serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
Validity
Not Before: Oct 17 09:26:16 2026 GMT
Not After : Oct 24 09:26:16 2026 GMT
Subject: CN=6ad33f39-03ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:32:03:fa:b4:db:1a:37:0a:88:9d:b7:3f:
82:ad:7c:2d:2b:c5:58:ce:69:97:68:8b:2d:b4:d7:
37:c9:25:c9:38:13:42:87:ae:c6:2b:b4:ea:3c:93:
8e:41:bf:f6:18:8b:80:02:5f:44:be:4b:d1:6c:f9:
3e:ae:d1:3d:18:bf:76:78:e8:c5:6d:b6:59:22:4d:
fe:e8:41:c6:9f:14:9d:89:08:ee:3e:c9:16:26:25:
27:6c:f8:90:db:46:cf:e7:6c:8b:f7:5f:ab:98:4d:
59:cb:d7:1e:b9:e6:87:f1:ee:19:ea:f1:a9:69:b8:
d3:30:86:a2:5b:a1:59:e2:c7:c0:3e:e1:a9:1f:66:
15:83:a1:ff:16:df:b9:7f:3c:9d:10:64:1b:67:ab:
55:85:97:b6:2a:c7:8c:6e:ef:ff:be:61:c1:9b:83:
c4:3f:d1:c8:61:22:a0:a5:c0:c6:38:50:c0:9a:51:
16:fa:78:3b:24:80:2e:1a:84:a8:0f:37:68:a6:06:
e3:9e:8c:b0:3e:4c:40:e5:85:72:eb:b9:af:28:91:
08:d8:c1:de:aa:d9:50:c9:f0:f4:35:a3:8e:1a:cb:
25:d1:0e:90:2c:6c:96:1e:49:bd:ab:47:6c:74:7b:
66:c5:41:33:e3:26:18:04:ad:56:83:2d:6d:73:13:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:55:BB:F4:8B:BF:B2:40:B3:1B:6C:11:89:AC:9E:AA:49:5F:00:7A
X509v3 Authority Key Identifier:
keyid:01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:c4:12:9a:09:25:58:12:19:a0:77:04:30:dc:79:fc:4e:2d:
f5:c6:3c:10:b9:99:25:68:ed:49:ce:1d:fd:90:44:db:2c:35:
2a:52:f9:0a:d6:91:3b:3c:78:b3:21:45:28:ef:28:e2:4f:52:
60:36:6d:43:2f:f7:c8:cd:da:16:a2:f0:9b:ed:ff:4f:f6:41:
14:ea:86:98:17:1b:56:ab:80:c0:2f:cc:cc:d7:11:a8:ae:f7:
36:62:3e:80:1f:ba:02:7c:7d:1b:f0:1c:ef:0a:5a:86:1c:f1:
ae:31:11:d0:9a:43:bd:e0:33:8d:87:f1:23:05:9b:3b:ed:b1:
b2:15:39:c7:1e:02:fa:73:48:25:49:2e:58:25:b2:fe:9c:2a:
2c:82:d4:07:78:d5:37:d2:25:0a:09:d7:70:6b:27:89:a7:e5:
5c:c9:7f:23:96:40:25:e5:5f:29:ec:37:37:86:4e:d0:01:f1:
c5:d6:f4:fe:1d:08:83:a5:35:a2:1c:7a:13:f2:0c:55:78:17:
fb:35:b7:24:f8:d5:e4:d1:c7:bc:15:8b:d1:bc:4a:9b:e9:db:
a3:81:9e:56:8d:93:33:70:3f:f8:fc:69:a5:15:21:5d:cd:03:
e2:23:4e:1f:2e:d2:09:45:74:66:7f:2a:f1:5c:18:d8:78:50:
26:11:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 10:55:41 2026 by rpki-client