
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
File: sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json)
Hash identifier: GQevjJufFuzukDbOgGHQ6osk4rhpKshzWeTgtQ7KogU=
Subject key identifier: 96:F0:19:F6:F1:B3:B0:D9:CA:EC:CC:2F:C3:61:CB:0E:6D:C8:7A:A4
Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB
Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
Manifest number: 9C
Signing time: Fri 11 Sep 2026 07:21:19 +0000
Manifest this update: Fri 11 Sep 2026 07:21:19 +0000
Manifest next update: Fri 18 Sep 2026 07:21:19 +0000
Files and hashes: 1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: l6kWiarul+odrm/OMwLGGWI638zSSJaYj5NTqeHJNKQ=)
2: F29881C82D2811F19656BE60B9833773.roa (hash: j49xZ/pNE+6bd9Li6teEM+llvM2db9Ji2DZmBv8OAyg=)
3: 961A909E2D2811F181F3AA41B9833773.roa (hash: dYzmlzKtC22HQCzv3r68DO5+DJnISkpljTZWCe4Wn+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl
rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB
Validity
Not Before: Sep 11 07:21:19 2026 GMT
Not After : Sep 18 07:21:19 2026 GMT
Subject: CN=6aa3abef-61fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:52:35:83:b4:14:dd:74:30:6c:9c:21:9f:
f1:90:b7:60:99:46:dc:b3:08:55:ea:c2:2e:b1:c0:
82:35:f9:dc:c7:4c:ed:80:41:c0:dd:54:a0:78:96:
7f:b5:32:01:58:a0:66:f3:a2:02:ac:7d:8d:06:ab:
cd:5c:28:98:1b:59:2b:b3:2b:6d:ad:35:14:b3:ca:
56:45:40:2d:85:63:a4:ea:a8:04:9f:90:34:32:08:
a7:88:14:10:6e:df:e2:c8:4c:31:ec:f6:e1:e7:d6:
32:da:fb:1e:81:b7:2b:6c:91:8e:7f:b0:41:c7:b4:
9e:f9:d7:af:99:ff:84:fd:65:9e:ca:0a:26:cb:50:
db:f1:03:1b:b6:4b:82:ab:b0:0f:d5:54:42:ed:06:
66:c5:9d:21:77:2d:12:d5:2e:42:f6:16:d1:9f:3c:
c0:55:27:52:6a:48:0f:2d:b0:05:68:67:55:53:7c:
44:b7:1c:a4:57:17:f2:41:c1:39:42:6a:53:91:f8:
ba:65:fd:10:da:5e:a4:83:1d:53:60:1f:c2:8a:a4:
bb:40:09:f8:91:ab:08:a4:62:44:53:d0:e1:78:02:
7a:f0:2a:2a:02:7c:14:3a:c8:e6:79:a5:32:57:e2:
51:f8:3b:b7:93:e1:b8:76:31:32:05:ea:27:4a:2a:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:19:F6:F1:B3:B0:D9:CA:EC:CC:2F:C3:61:CB:0E:6D:C8:7A:A4
X509v3 Authority Key Identifier:
keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ad:dc:8b:c9:0c:d5:a5:e2:93:22:65:c1:28:b6:61:95:34:
3f:11:99:cc:1c:5a:51:a9:18:08:72:c7:00:b1:e5:89:60:ff:
df:b8:7f:e9:ff:e3:03:66:1a:1f:0b:8f:17:83:5d:90:43:04:
fb:ed:b5:bc:0f:ec:87:fb:51:33:90:45:8a:5b:d4:30:dc:bb:
f1:e4:ec:05:e2:c0:be:fb:5d:18:21:35:a4:66:48:d4:5f:2c:
b9:b9:10:2f:88:9c:ef:51:7e:5b:c8:c6:f3:4f:5c:7f:62:f6:
bc:f5:0d:c2:45:3d:74:6a:d5:01:07:df:0c:4f:e2:91:c1:89:
36:68:0c:2c:d9:b0:30:67:5e:10:a4:7a:b0:c1:d8:86:c8:8b:
bc:fd:2d:b6:46:13:f0:10:90:df:0f:4f:f9:ad:33:98:06:c8:
51:cf:bb:09:15:11:a1:29:03:ea:6a:44:36:3c:70:46:c5:77:
43:34:c4:f6:cd:d6:93:2c:57:2f:3c:0f:56:9d:84:7d:3e:1f:
4f:19:b7:19:c0:b1:2a:9c:68:2f:42:3d:f5:06:e5:81:e2:b7:
d6:77:8b:30:40:b2:34:9d:39:7d:8e:b4:e8:60:6c:a6:8f:43:
9c:2b:95:97:16:87:78:77:a6:a2:66:d7:c4:45:93:78:1c:a5:
e3:98:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:42:05 2026 by rpki-client