
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
File: 70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json)
Hash identifier: 3HIILIeuLypOyDppTmrZVGjB5b+uNkWOFyOxAIwoI1A=
Subject key identifier: 81:B8:E1:04:17:EF:1F:D7:FC:08:8A:4C:CB:72:74:06:9F:55:F0:AB
Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD
Certificate issuer: /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
Certificate serial: 06DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
Manifest number: 06D6
Signing time: Tue 06 Oct 2026 22:24:27 +0000
Manifest this update: Tue 06 Oct 2026 22:24:26 +0000
Manifest next update: Tue 13 Oct 2026 22:24:26 +0000
Files and hashes: 1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: SodlxhV//tIp2We4Q9zYqhE3KiHpNQkqa6nBxaY1ev4=)
2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: PC7NOM6+hnkG1gPiPyv+NHeq+JDdl65OBUlZqNZsHp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl
rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD
Validity
Not Before: Oct 6 22:24:26 2026 GMT
Not After : Oct 13 22:24:26 2026 GMT
Subject: CN=6ac5751b-e4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:d3:5e:71:1c:2c:2c:ac:97:6a:e0:f4:41:
ee:31:f3:68:13:8f:49:15:b7:0f:bb:26:9b:b9:3b:
49:a0:a5:a0:84:34:39:c6:b7:bf:d2:89:43:d9:78:
3d:4d:23:3f:20:56:fa:50:62:86:12:ae:15:16:7e:
01:97:7a:39:27:d5:b1:6a:f7:72:24:ad:cd:d5:6b:
1f:66:ee:8e:de:ab:b9:6b:0a:42:7d:f2:92:60:3a:
ee:8e:1a:3b:ff:18:e8:49:c0:7b:b3:01:2a:b1:ad:
ef:e8:c8:39:09:b6:ba:de:1c:f0:48:d7:97:5e:e3:
33:a8:19:37:79:1e:95:59:b3:7f:94:c8:d5:c1:90:
61:01:83:af:4f:e5:01:8e:34:b5:ae:bb:90:21:8e:
ea:3e:b4:1b:b9:4d:d3:5b:ee:cb:3d:fb:57:9a:8d:
4d:6e:85:7a:0f:6b:0e:b5:4f:91:26:4a:5b:b0:db:
5d:46:26:b6:8e:e7:c5:2a:c7:bf:66:16:b3:f1:bb:
10:3f:39:e4:5b:a2:4d:0e:58:ac:30:10:71:05:fb:
bf:73:53:7b:e5:02:6b:c8:f1:e5:99:2b:3a:5c:43:
fe:04:b7:fd:93:9f:8f:37:e6:91:35:c0:f7:d2:e5:
db:36:a4:53:7c:12:ed:e5:37:c6:d5:69:ac:71:8c:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B8:E1:04:17:EF:1F:D7:FC:08:8A:4C:CB:72:74:06:9F:55:F0:AB
X509v3 Authority Key Identifier:
keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:06:d2:06:18:81:1a:56:e0:6b:5c:6c:d3:15:dc:8a:13:85:
3e:48:ca:9b:c8:ea:a5:bb:db:22:67:1d:ce:bc:1f:76:72:e9:
b6:62:4c:55:48:38:62:f9:5e:10:57:e6:22:7e:09:65:4c:73:
11:30:6c:7b:bd:fb:bd:93:b2:3c:b2:45:1b:21:44:99:d6:fb:
fb:4d:40:dd:a4:69:df:16:73:ab:e7:51:f0:81:97:9f:29:a1:
bb:d3:4a:e3:5b:46:64:29:30:42:5a:1e:b7:35:cb:cf:59:15:
35:8d:b1:7e:12:da:39:5d:d2:9a:9e:8c:94:51:b9:9e:b6:44:
b2:ca:de:9f:66:b7:a6:4f:ee:45:46:f1:a2:0d:10:f5:89:ec:
54:29:fc:e8:3a:82:36:3a:53:e8:ae:43:b2:99:24:9e:d2:f9:
ba:80:74:fd:32:19:44:37:af:1b:e0:f5:66:09:48:92:fe:ef:
63:b3:58:91:dd:e9:03:0b:8e:5d:d2:0b:a8:fd:3b:f3:aa:98:
c4:26:3a:63:dd:7d:68:33:e3:eb:76:d5:d9:9d:7d:3c:0f:26:
66:78:a9:bb:23:2f:b3:95:9a:85:19:af:b0:24:02:fe:12:7b:
eb:98:34:80:01:05:8b:51:54:25:77:06:23:13:b8:c3:0b:28:
dd:67:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:02:45 2026 by rpki-client