
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
File: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json)
Hash identifier: nxEPvoVgBhV52dypPgNxvoY8MzSv0gyuLeLWMjPxlZs=
Subject key identifier: 0A:50:76:5B:E4:15:96:27:A6:7A:8B:8F:FF:C0:DA:8B:F8:16:4C:78
Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
Certificate issuer: /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Certificate serial: 060F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
Manifest number: 0607
Signing time: Tue 06 Oct 2026 23:01:21 +0000
Manifest this update: Tue 06 Oct 2026 23:01:21 +0000
Manifest next update: Tue 13 Oct 2026 23:01:21 +0000
Files and hashes: 1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: UIWcd9e/1eVrusvWfDUIYFyUIValV1HuWIj4mEgIEqg=)
2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: MyT7XofLYnzbUWOsIx3LwQVnAKb+WKaP6LQMJGUgR18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Validity
Not Before: Oct 6 23:01:21 2026 GMT
Not After : Oct 13 23:01:21 2026 GMT
Subject: CN=6ac57dc1-c637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:a9:21:46:cc:e1:88:01:01:19:2a:71:5e:
38:43:fb:57:df:90:99:39:ba:02:78:81:c9:ca:fd:
9f:eb:ff:ec:e2:95:5b:3b:1a:96:37:40:99:27:d9:
ff:93:6b:90:d7:50:24:89:db:ae:89:7c:29:76:d7:
c4:ad:0f:82:68:cf:4a:35:86:c7:4a:4d:44:e3:ab:
d4:f1:4e:33:95:1b:f6:a3:ed:a3:22:f8:da:57:be:
1e:ad:6c:42:70:dd:e9:37:53:b3:21:8a:98:dc:87:
c6:71:a4:9a:41:72:35:04:b2:0e:19:1f:25:f5:96:
49:45:c1:e4:bc:3c:55:48:e5:1a:df:98:b8:4e:8b:
ab:a4:b8:86:1e:d4:f6:7a:af:f5:6d:10:7e:ab:2e:
6b:5e:96:9a:ab:74:8a:ae:48:8d:9e:c8:57:d0:ad:
cf:78:3e:bc:43:4f:ab:fc:74:d9:ab:7b:0f:00:07:
c5:1a:4f:d6:1a:8d:a7:d7:0e:30:92:34:82:61:ac:
46:08:8c:e7:ef:bf:d7:3c:90:d3:14:8c:d2:44:c2:
28:35:7b:77:7b:51:b5:e1:98:fe:73:0e:5e:7d:ec:
c6:ef:da:fc:8b:ba:d5:ce:ce:bd:c6:d9:20:9f:c4:
35:6e:b4:13:1d:a1:88:43:a5:8f:c6:bc:87:3f:b4:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:50:76:5B:E4:15:96:27:A6:7A:8B:8F:FF:C0:DA:8B:F8:16:4C:78
X509v3 Authority Key Identifier:
keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:9d:3d:02:22:2c:e9:27:f9:b5:aa:f4:08:81:0f:4d:ec:52:
b4:f5:ac:f1:0c:ba:5b:73:8f:23:f3:da:5d:a9:7a:97:41:a0:
2c:62:74:64:19:1a:e3:0f:ed:f6:b2:5d:7b:83:e8:41:e8:94:
3c:fc:0b:5d:0d:f9:dd:d1:e7:ce:d7:c1:5a:3a:5a:5e:48:d2:
29:67:03:6e:bc:34:cb:64:dd:e8:81:2a:43:6c:82:a3:35:3f:
fc:8e:87:8c:de:2d:b8:23:e6:8c:67:c7:a2:ab:99:8e:62:d9:
31:8d:8a:e2:1d:2a:47:ad:07:11:8b:15:18:79:56:30:e9:47:
1f:49:66:8d:75:2f:68:82:66:a4:d9:28:72:78:4e:43:aa:6d:
75:4a:b2:50:da:93:49:d6:51:5c:83:f5:b8:94:2f:62:a2:28:
92:a8:8f:31:2a:82:e6:8d:48:e7:93:b6:e6:84:6c:3a:e1:80:
0a:e2:23:9b:75:11:cd:24:eb:02:d8:12:07:5e:d3:f4:df:90:
0f:14:a7:25:71:71:61:09:4d:e5:61:5b:f6:df:0d:d5:00:ca:
a5:45:68:8d:82:dd:03:27:1f:fd:29:31:ae:3d:24:5a:14:db:
77:06:ef:17:c0:bb:67:9d:0a:7f:4f:0a:2d:18:eb:cd:b7:0b:
7d:03:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:23:12 2026 by rpki-client