
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json)
Hash identifier: 7EnxsPeet0UrhPinXd9fDQ6PrAoZmJRte4Xi1+a1zic=
Subject key identifier: 55:3F:42:DE:5C:D9:48:00:D6:98:F5:70:47:29:CF:85:0A:C8:4E:C7
Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Certificate serial: 0B2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
Manifest number: 0B28
Signing time: Fri 02 Oct 2026 19:31:43 +0000
Manifest this update: Fri 02 Oct 2026 19:31:42 +0000
Manifest next update: Fri 09 Oct 2026 19:31:42 +0000
Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: ZB6T3A0usPTxZmJJ45AIAQAQFM/JBg8gxW1tpxAW1f0=)
2: EaXLIihOAFqNWo7GFAdWwK2gT7U.asa (hash: m9Q/ja5supgZbnee+efxyBUeG6fbF6nbdi5JdB2MvBM=)
3: 2F05099CEC5611F094F5171C4A6F56BC.roa (hash: h3ulFk49Rm6PN3v20dTyyirREDU7f9uOVa0xWMwIDh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860 (0xb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Validity
Not Before: Oct 2 19:31:42 2026 GMT
Not After : Oct 9 19:31:42 2026 GMT
Subject: CN=6ac0069f-cf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:27:36:73:64:35:b5:a3:dc:80:6e:55:e0:
8b:e3:4f:e4:3a:f4:ac:55:fe:bb:f5:a1:c2:2b:71:
e1:24:54:d7:cf:43:7f:6c:3d:b2:ce:5b:3a:db:02:
a5:7a:cd:ee:be:4c:7a:db:5d:60:5e:32:33:d9:20:
bf:7b:a5:7c:b5:a2:bf:b2:50:16:f2:10:be:a2:18:
d4:0c:bd:80:de:d0:b6:43:26:c7:33:37:62:8c:66:
0a:f2:08:be:b3:a2:18:5d:a4:2a:5b:0e:48:15:23:
8e:3d:d7:02:03:6c:2f:3f:f5:20:47:89:8e:94:8c:
a8:df:97:f6:47:0d:c9:6f:93:a4:ce:4d:2b:db:54:
56:a2:05:7c:a8:0a:8f:f6:4c:80:db:52:db:92:06:
13:c7:11:44:4f:98:0c:a9:d4:41:37:c5:62:fc:66:
90:87:dc:50:e9:5e:b5:59:51:8b:44:87:8c:33:59:
05:72:40:63:b5:3e:71:7f:af:00:7c:a8:98:7e:94:
80:ef:a4:52:00:75:dc:3f:02:8a:b6:8e:ca:45:22:
67:5e:03:36:f1:a8:03:4d:45:82:60:3d:15:28:b0:
da:03:db:65:78:7a:9a:87:d8:e1:bf:a7:5e:4c:57:
39:57:2e:d8:19:bd:ce:a1:88:57:97:36:d1:ef:ff:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3F:42:DE:5C:D9:48:00:D6:98:F5:70:47:29:CF:85:0A:C8:4E:C7
X509v3 Authority Key Identifier:
keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:a1:18:eb:ed:fd:20:cd:01:71:3e:98:02:db:4a:11:b1:3d:
93:84:d3:3a:6d:df:a3:5e:52:d4:17:91:98:1b:9e:c8:b9:1a:
af:89:83:6d:be:f4:7a:3b:bb:db:f7:2d:94:d4:d2:af:ef:81:
41:4c:fd:a3:a6:c9:cf:a1:bf:e5:f9:d4:bd:8c:b8:a9:8d:17:
92:4c:38:28:fb:72:e4:5e:69:a8:72:93:84:a2:9b:50:bd:18:
46:f9:83:e7:a7:7b:4e:cb:ea:2d:f7:8c:9d:5b:c4:39:2b:4c:
e5:75:e7:71:b3:ad:22:9c:ab:59:ca:8d:3d:9f:7d:e8:96:ca:
e3:e8:d3:a9:25:64:e3:56:35:9b:cf:72:7b:8e:ab:da:ef:73:
90:a1:92:3a:13:3b:51:b8:68:ef:5e:eb:ee:51:55:9a:38:e9:
35:fc:d7:02:f9:02:39:8e:76:1c:8b:a5:45:e0:e7:ac:0c:5a:
f1:0e:5e:58:65:70:9f:ce:7e:93:d5:e1:d5:f2:14:cb:35:2c:
a1:71:8f:e1:76:99:25:a1:86:50:a8:f3:b1:b9:84:90:18:e4:
d1:d3:1d:75:7a:31:23:75:02:4b:c4:59:db:f9:9c:75:a0:4d:
bc:f2:9e:41:d3:7c:41:3c:54:ba:de:08:03:2e:db:99:72:b0:
2c:b9:75:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:37:19 2026 by rpki-client