
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier: Wdk+q9tD2OzP9QaPp2bu5GAr3OpTqR/Gf9Xh5phmOoc=
Subject key identifier: D1:6D:B4:52:CE:27:23:5E:FF:62:A4:F6:AB:FB:1D:A9:9C:F0:FC:E1
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number: 011D
Signing time: Thu 03 Sep 2026 06:02:13 +0000
Manifest this update: Thu 03 Sep 2026 06:02:13 +0000
Manifest next update: Thu 10 Sep 2026 06:02:13 +0000
Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: FS8iRICh1Gc/xKvE1cPdmSMw7s3qvjuU9SNc8Bq/mW8=)
2: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: bi6yZUP9Smkax+xVdkGT/x3hFrhWjvPzPQn2lGZjFLA=)
3: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: A9CzU8MDj6rLJSlF21HcobLlJ5jlCrKiSpiRirq4aHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 06:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Validity
Not Before: Sep 3 06:02:13 2026 GMT
Not After : Sep 10 06:02:13 2026 GMT
Subject: CN=6a990d65-860a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:f1:6e:3f:77:c5:1c:44:ca:14:63:58:ea:
61:4d:77:e9:5e:3c:3b:04:21:a1:b6:02:51:a6:ed:
b0:a6:be:45:a2:e0:88:6f:f5:8b:f0:41:8f:ce:c7:
cf:46:7d:0a:0b:6c:cc:39:2b:ef:33:d9:14:2f:f7:
0b:de:06:d0:42:2a:2b:a7:d1:64:2c:67:fc:7e:26:
1b:4c:ed:9f:55:c3:ff:c4:ca:43:cf:d6:73:01:c1:
67:11:12:96:2c:7d:1e:8b:96:95:64:c0:8d:27:67:
25:fe:76:c6:5b:bb:51:09:e9:4d:d6:c6:ce:8c:4b:
eb:f6:e9:0b:c5:f4:95:b9:45:44:32:a0:78:bc:49:
4f:0b:0a:fe:c6:a0:cb:18:80:49:0d:e0:8f:d9:31:
2d:bc:06:e4:11:e7:5a:bf:88:4e:a0:01:59:de:cb:
be:9e:48:97:89:d3:e3:d4:65:37:c7:65:63:df:ba:
6f:9a:34:24:46:d6:8e:d2:04:21:44:90:78:fd:f6:
9a:de:22:2f:6a:d8:a9:15:1a:f2:98:b3:df:2f:c8:
59:36:db:c3:4e:df:7b:ed:84:40:29:55:de:0c:15:
89:8f:2d:7c:8b:bf:a8:19:d8:34:4a:d9:fc:ae:23:
ee:bc:c7:f6:2f:c6:bb:d2:ec:ca:17:8b:be:51:21:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:B4:52:CE:27:23:5E:FF:62:A4:F6:AB:FB:1D:A9:9C:F0:FC:E1
X509v3 Authority Key Identifier:
keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:2e:b3:a1:5c:bf:68:1e:84:e7:d3:19:0b:31:bf:1f:4a:9c:
ce:6c:b3:b0:10:bc:58:86:db:12:c0:30:fe:87:87:98:8a:47:
13:93:1a:2c:f0:e8:e9:57:c6:f4:ad:3f:03:d8:ce:96:22:9e:
9a:64:24:ba:d9:56:51:dd:06:e9:ed:c0:54:c4:ba:50:60:38:
61:ad:6b:8d:72:4a:7a:af:81:25:21:bf:8d:64:3b:84:27:03:
69:80:e6:01:34:ab:07:21:41:7d:0c:38:81:aa:63:73:88:19:
e2:36:61:2f:0f:b1:1b:f9:1a:bd:5e:13:a9:b2:62:46:a7:be:
30:89:c7:5a:0b:1f:35:a7:3f:86:7c:90:65:a5:7a:2f:a1:02:
1a:71:46:9a:8b:84:72:ff:9c:e8:70:72:52:fa:bb:d2:9f:0c:
fd:26:8c:46:c9:58:60:4e:b3:6d:74:54:f4:4e:6e:8b:e9:8d:
b2:41:d8:3d:09:0c:91:65:df:22:44:a6:63:c4:bb:0f:b8:f8:
16:70:49:15:90:cb:82:7e:60:53:a0:3e:3e:9d:81:a2:09:a1:
f2:eb:ab:f5:9a:17:69:03:45:37:3b:35:7f:c7:6c:c1:ad:96:
c1:93:36:50:ad:60:ef:e1:29:cb:8e:43:81:ad:fb:e0:46:3f:
ff:bd:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:00:18 2026 by rpki-client