
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json)
Hash identifier: I0KjAbhGQYkpBG8/dLTyxFD6Q/S+AmoqrKTEhUQUSec=
Subject key identifier: 6E:B4:26:93:30:BC:3C:02:5F:F3:92:F2:79:04:F2:7B:E9:D3:4C:94
Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Certificate serial: 03FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
Manifest number: 03F4
Signing time: Thu 03 Sep 2026 00:24:15 +0000
Manifest this update: Thu 03 Sep 2026 00:24:15 +0000
Manifest next update: Thu 10 Sep 2026 00:24:15 +0000
Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: csz8nv8ac2YXYJmSdwL5auuk3BfYylWTs3sQeDALK28=)
2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: SFrPVIEcm3Sob1UjztJCMJRsgyH7hMthtgc0D0N7bCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 00:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1019 (0x3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D
Validity
Not Before: Sep 3 00:24:15 2026 GMT
Not After : Sep 10 00:24:15 2026 GMT
Subject: CN=6a98be2f-484f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:a7:63:db:39:de:1d:ea:41:9e:c7:70:b0:
e6:25:4c:0e:a5:61:c7:09:0c:ce:73:53:76:86:44:
ae:c0:ae:ae:ce:46:90:89:59:0e:c1:cc:4d:57:e6:
4b:f6:0c:27:ae:b6:02:80:cf:84:99:88:9c:f1:61:
a7:28:23:65:19:43:5b:f7:98:b4:af:02:a0:0e:6e:
73:b1:6e:75:88:ba:ca:e3:ce:f7:40:14:ea:5e:d0:
58:3d:19:fd:10:00:35:1c:bd:f1:93:2d:61:91:9a:
ad:34:f0:be:95:a3:97:a1:15:a7:a1:b2:90:ca:c2:
23:2c:07:e7:9f:52:a1:af:d9:19:85:32:69:52:4b:
1b:c6:2f:dc:03:3e:90:c3:64:2b:24:2a:dc:46:5a:
cb:05:68:1b:9c:26:ac:f6:0d:86:17:0e:cd:5b:e4:
de:43:fc:6e:b5:d3:5a:bf:35:8f:f7:00:23:20:b3:
5a:3f:47:83:83:06:4f:58:b6:50:46:4f:ca:d1:bd:
a0:51:ae:36:46:9e:cb:34:e2:86:db:84:33:fa:6d:
66:60:39:db:2b:80:1e:1a:68:af:f7:a5:58:af:3c:
19:c3:22:99:c0:ec:f5:cc:01:9c:e3:2a:42:0c:f5:
7d:b6:3f:82:fa:53:a9:fe:6b:bb:f8:5e:af:7c:f4:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B4:26:93:30:BC:3C:02:5F:F3:92:F2:79:04:F2:7B:E9:D3:4C:94
X509v3 Authority Key Identifier:
keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:b1:6a:37:b1:f3:79:90:bf:ee:a3:7e:84:28:ea:c4:0a:db:
94:5b:3c:e7:27:9b:40:83:8b:71:8e:6f:07:d7:de:2d:2c:6f:
e2:dd:a7:ec:df:35:67:82:6a:fa:18:c1:83:6c:23:6c:eb:d1:
40:e5:b4:94:db:1e:7a:d2:ae:ee:0b:fd:68:35:4a:d4:5d:17:
07:14:c4:d6:79:d2:aa:6b:a1:23:42:f3:a2:43:ae:38:41:a9:
f0:d2:68:40:ce:2c:6d:16:c2:90:a3:9c:88:40:a9:df:59:35:
55:5c:85:60:60:58:f8:21:39:66:aa:18:6c:a8:a6:9f:70:3e:
17:de:12:cb:be:77:a6:ce:ae:ad:6a:41:8f:0c:f1:69:34:f9:
8c:e4:6f:aa:3f:a0:9f:2a:2e:d2:5b:34:83:d5:01:e0:05:a0:
a8:a0:58:2d:e3:05:38:37:89:63:73:5a:6d:da:02:aa:48:56:
cb:37:a5:29:42:f8:96:79:1c:3a:ce:64:53:77:92:fe:d6:2b:
3b:32:a9:88:bc:8c:18:f3:a8:a5:6f:b6:1e:d4:37:9a:53:cf:
98:ea:95:4c:ea:64:a1:cf:b3:a4:5f:11:c8:87:d5:33:f3:99:
bf:00:05:dd:f8:b0:c5:2f:d8:4e:4c:87:37:85:f3:8e:a5:38:
1e:d3:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:58:13 2026 by rpki-client