
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
File: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft (raw, json)
Hash identifier: BGjORTq0g3Gv/TEq6Wv0izNkP7jh2H1QokD0+v8hXI0=
Subject key identifier: 76:01:AE:CD:F5:3B:BA:E5:75:FF:6F:87:EB:09:DE:7D:05:7F:B1:28
Authority key identifier: 42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E
Certificate issuer: /CN=A91F9BB3/serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
Manifest number: 95
Signing time: Sat 03 Oct 2026 08:10:04 +0000
Manifest this update: Sat 03 Oct 2026 08:10:03 +0000
Manifest next update: Sat 10 Oct 2026 08:10:03 +0000
Files and hashes: 1: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl (hash: ZrNctlynqUOnzajHV38o7deAJGK51AdP7lzwdV4RqE0=)
2: DB9D3A1AE24411F0BBC3E4F5716F56BC.roa (hash: FGeU1tZaj6B6d9kcXemk68XFxPuUp5ULKxFkHVuu17c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl
rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9BB3, serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E
Validity
Not Before: Oct 3 08:10:03 2026 GMT
Not After : Oct 10 08:10:03 2026 GMT
Subject: CN=6ac0b85c-c6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:84:4e:b3:9f:ad:bc:71:0a:f7:e1:1e:f9:
b7:9c:38:9d:14:c9:71:c2:01:84:db:81:98:5f:9d:
98:2a:83:4f:f9:f2:39:38:a5:ea:1e:f3:1b:98:08:
74:bd:32:51:04:c3:d4:c3:d7:1f:13:2f:ad:18:8c:
b5:39:ef:11:27:1c:d3:c7:21:aa:8e:6d:b4:6e:89:
2e:89:68:92:4a:15:4c:ad:de:38:3e:fe:91:3f:76:
fa:33:1e:d2:e4:60:40:dd:72:70:52:fb:1c:f6:c7:
41:2d:52:52:92:16:f4:67:f4:68:ed:e8:16:2c:ac:
9d:a6:f2:22:44:c6:c0:6a:f3:25:e8:a3:c4:34:61:
5f:5c:40:4e:3e:8e:d9:e0:24:b8:39:c6:7a:54:31:
15:16:40:e7:36:d1:1b:2e:82:be:21:3d:22:2c:9e:
89:85:2b:f2:64:e2:c8:85:11:87:68:7c:9d:8e:3a:
fd:ed:e7:ee:05:33:58:5d:d5:3a:a5:b5:79:2d:3a:
db:17:37:3d:ae:de:1f:bd:0d:72:84:0e:1b:d2:02:
4c:fc:c6:f4:c3:10:a5:64:fc:63:4d:9e:9e:0a:bf:
30:4a:17:b4:95:fc:4a:f4:7a:5c:41:f5:84:90:e5:
1f:a3:12:b1:f6:c4:bd:2c:6c:f8:80:a4:83:66:69:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:01:AE:CD:F5:3B:BA:E5:75:FF:6F:87:EB:09:DE:7D:05:7F:B1:28
X509v3 Authority Key Identifier:
keyid:42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:ac:64:7f:39:c9:d3:e0:4e:60:4d:33:b8:a4:fa:de:db:0e:
24:d2:c8:66:24:05:fa:83:0f:a4:59:0a:9c:3e:50:6f:e0:be:
b1:0f:26:ef:8a:26:69:d1:e9:56:3b:69:cf:3f:3f:a6:4b:80:
55:aa:57:e9:01:d1:a6:f3:a5:69:45:ea:1a:9c:d2:e7:33:ae:
6a:3d:b9:06:ad:c5:b4:62:e5:37:52:e0:ff:2c:fb:74:a8:f5:
c4:b0:33:ad:90:ce:07:e1:8d:86:58:11:6b:9d:da:0e:fe:a5:
6b:b8:81:98:19:e6:2d:44:0e:04:c7:c9:55:3d:cd:1e:ac:6d:
e8:f5:1b:cf:7e:6e:24:73:ac:78:7e:d1:15:0e:bd:a7:8a:5e:
79:4b:a1:78:e8:69:e6:4d:89:35:2f:bf:f5:bf:b5:e9:ec:7b:
00:1a:87:14:c0:ea:dd:8e:e2:a1:4b:1d:b5:8a:ad:ee:64:aa:
c5:b2:b6:01:77:13:f6:b9:2e:e0:a4:70:05:56:be:48:d2:19:
05:5f:c2:ca:11:d6:06:ab:1a:3e:17:37:4c:9d:b2:20:0a:67:
04:8d:e1:1e:17:16:4d:ee:fc:1a:27:da:23:d1:56:d1:30:a2:
50:16:be:be:b1:dc:55:59:bb:2c:df:a8:73:89:f4:5a:aa:06:
c4:85:9b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:45:30 2026 by rpki-client