
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier: JxJRA7DIrzbVOcWAQJTVdx/iDMYtF/3mpC1ri8aIUFA=
Subject key identifier: 2D:6D:E0:1D:3A:16:AF:09:92:1C:F5:C4:0E:CA:3C:05:AF:5A:5F:F4
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number: 0138
Signing time: Fri 23 Oct 2026 06:08:23 +0000
Manifest this update: Fri 23 Oct 2026 06:08:22 +0000
Manifest next update: Fri 30 Oct 2026 06:08:22 +0000
Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: pFqfKZez5cwjSuufYlVCDqAzXB8qGgsC59RNTkgbKrk=)
2: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: +IS6BQPlYHRlENNfFD5PNm5HOT08Tf9LEgNwUaL5c+c=)
3: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: 9V3djN95Y3WFhcVo6wyjhroX6p2qUf/3VzFGHHd4H2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 06:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Validity
Not Before: Oct 23 06:08:22 2026 GMT
Not After : Oct 30 06:08:22 2026 GMT
Subject: CN=6adaf9d7-f7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:a7:71:53:f2:38:c2:5c:4f:4e:77:fa:53:
31:58:46:da:55:34:db:24:83:4e:34:fe:6c:de:45:
31:b6:62:15:f6:f0:2d:74:c1:2e:3a:a5:26:4a:81:
d5:45:be:7c:00:fc:eb:74:25:db:28:4d:39:e7:29:
de:b7:34:b2:f3:71:a4:74:88:de:63:f4:a4:0f:28:
3a:1e:b3:2c:16:67:ae:cc:f2:b1:89:26:c5:48:b3:
44:17:6d:d9:84:6a:67:7c:3e:9c:97:22:b0:02:b9:
20:31:b6:c2:b2:bd:e2:d7:a5:38:fd:52:ed:a3:57:
5e:e3:24:d2:56:12:ae:6d:d7:25:07:c3:57:97:69:
53:00:0a:37:20:11:bc:22:af:04:e4:fa:59:98:d6:
94:a2:4e:57:16:a7:84:bd:ad:00:54:d1:a8:72:d7:
ee:67:11:52:f3:26:c8:61:51:68:7c:b1:47:52:af:
5c:e0:6b:e2:a3:bf:f9:00:af:a7:17:32:19:98:15:
02:c3:65:21:6a:ad:db:5d:73:36:fc:b5:f7:6b:c1:
c1:67:9d:58:5f:5e:23:ba:d1:ec:49:1c:39:50:da:
bc:ef:41:14:b6:24:96:8a:23:51:7a:25:3b:7f:a5:
ec:70:30:af:d3:47:45:ea:1c:70:a0:99:6a:35:b0:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:E0:1D:3A:16:AF:09:92:1C:F5:C4:0E:CA:3C:05:AF:5A:5F:F4
X509v3 Authority Key Identifier:
keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b5:99:f5:66:7e:65:49:32:33:83:a4:a8:d8:18:de:73:8b:
bf:fc:58:fd:52:48:ea:af:95:df:ae:2d:6d:d0:38:5e:86:0e:
a6:03:db:2c:ea:2d:98:18:dd:25:05:d1:63:bc:a4:a8:20:88:
e8:ed:d9:b3:ee:bd:19:d7:e2:12:18:31:9e:c9:c9:17:6b:fe:
4b:cb:bb:2d:31:e8:3e:26:e7:0f:e6:a8:79:b5:46:76:19:58:
53:3d:c6:93:d0:24:73:e9:2a:e9:75:09:13:6e:58:98:0b:66:
dc:3f:37:6a:47:c8:61:c5:8f:e5:ed:0b:5e:12:05:f8:87:b3:
63:b7:89:a2:8c:ed:13:f8:8c:89:a4:ef:46:73:bb:93:77:67:
bf:82:c2:75:cd:f6:0d:2f:75:f1:3e:b8:f9:49:24:2b:41:47:
6f:e6:22:1c:c9:87:65:6b:69:8d:b0:fe:ce:bd:22:9b:f3:4a:
bf:23:84:f0:a6:47:db:e0:f3:4d:db:ef:5b:4a:1b:14:d7:40:
64:34:b8:8f:ac:69:4b:19:e2:12:fe:9b:a6:61:28:d3:83:f4:
32:10:48:c3:23:c5:6c:95:40:5b:4d:c9:0d:74:c5:9c:0e:5b:
f8:d8:f5:bb:2b:75:68:8b:a1:56:42:1f:0f:a4:55:58:f9:10:
9a:51:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:38:57 2026 by rpki-client