
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
File: F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json)
Hash identifier: NZhm21eOpDzJKqL7PK5DWk9hNWZaY3cj3BZ/2vxA6x4=
Subject key identifier: 49:A0:1C:C6:83:3D:3D:5C:6C:20:8E:5B:09:21:1D:CD:B1:A8:C9:D0
Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
Certificate issuer: /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
Manifest number: 018D
Signing time: Fri 09 Oct 2026 05:10:19 +0000
Manifest this update: Fri 09 Oct 2026 05:10:18 +0000
Manifest next update: Fri 16 Oct 2026 05:10:18 +0000
Files and hashes: 1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: k4lRp5yXRIDKHIvrOvtYvGqLOJQ+77cIxQLKCMFb2xM=)
2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: CxBnP1Bhuzv2L8lPanx//qf8e43DGUku1GVxqwR+LTk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Validity
Not Before: Oct 9 05:10:18 2026 GMT
Not After : Oct 16 05:10:18 2026 GMT
Subject: CN=6ac8773b-7b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:78:45:a7:9a:93:27:99:3e:04:e2:6b:92:
91:2d:4f:7d:03:dd:9b:f4:cd:40:90:36:01:f3:e0:
f2:e1:bf:d0:c3:e2:2d:fc:d2:c3:bd:87:0b:b9:68:
71:d2:4e:a7:8a:f9:68:69:e8:59:0f:09:79:aa:be:
9b:ea:ce:77:76:cc:05:f7:46:b0:ee:26:13:f6:85:
b7:64:25:15:60:44:bd:af:dd:dc:90:79:71:34:fd:
da:cd:9e:5a:4f:f4:80:b9:49:d2:2d:3f:9a:d7:a3:
9e:30:c5:ca:13:92:03:10:63:38:21:66:44:2c:99:
66:b7:f1:46:22:e9:f2:cc:6c:74:72:cc:a7:4c:bc:
e3:fc:d1:ff:e7:67:03:ba:d9:0c:60:3b:84:3c:01:
f0:07:bd:15:c1:8a:04:f9:b7:2e:1f:72:1c:6e:b1:
46:83:4c:ea:37:3c:33:eb:67:0c:3f:fc:44:c0:49:
0a:6e:20:37:cd:a5:08:a4:b3:5f:6b:13:81:14:15:
1d:27:ec:86:24:e4:e3:db:69:6d:cd:0c:2e:5f:5d:
9c:0b:2f:ca:57:9d:04:a9:e3:96:87:bb:40:fb:8e:
03:8a:aa:b1:14:b4:12:5c:05:96:0e:ed:a4:f7:6d:
90:4f:c7:c1:3d:67:f3:86:df:6e:a7:c3:ca:f6:25:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A0:1C:C6:83:3D:3D:5C:6C:20:8E:5B:09:21:1D:CD:B1:A8:C9:D0
X509v3 Authority Key Identifier:
keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:04:d9:64:f5:2f:cb:94:9f:79:56:92:f3:0c:a3:56:20:4d:
9b:2a:65:02:59:17:39:4c:f3:c7:13:46:84:51:0f:5d:10:c1:
11:a5:fe:c5:84:b5:88:17:fe:8c:14:08:0f:2e:af:c6:9f:b6:
6e:1e:5a:49:f8:48:9f:59:da:f4:0c:81:f7:32:c8:cd:46:6f:
1f:21:1d:82:95:19:7f:15:5c:7a:75:17:c9:e3:64:7d:07:01:
39:b1:91:eb:e6:02:65:15:6b:9e:7c:53:00:12:9d:a1:08:fe:
15:f7:c1:fa:ef:80:f5:79:91:3a:47:05:42:8d:ce:fa:e7:df:
93:96:aa:7e:91:49:89:31:c2:69:a0:90:0d:9c:6e:5c:ba:11:
ca:65:f4:3d:9e:62:d0:a9:6b:49:1e:4e:13:ff:40:3a:0d:9f:
0b:bf:e6:ac:dc:8f:1d:93:be:55:51:e8:c6:7d:a6:e5:a9:23:
ca:6e:00:77:66:ec:4a:18:b8:96:63:0f:5e:79:47:f1:2b:bc:
3e:2f:ce:86:e8:9d:01:3a:43:9b:f4:38:ec:14:3a:66:b8:48:
35:b6:4f:19:90:2c:32:1a:6c:66:09:e9:53:4a:80:83:6b:f9:
ed:e9:89:49:35:c7:8d:02:4d:81:8c:6a:f0:ce:75:b0:75:e3:
61:33:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:38:36 2026 by rpki-client