
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier: DNLU1g+OeUKLiy/JNADNnn8IHIF+mPpN78hF31/jxY0=
Subject key identifier: B9:62:96:32:89:53:B9:C0:CD:E8:15:B1:87:3B:0B:55:17:23:FD:7A
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 02E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number: 02A3
Signing time: Fri 25 Sep 2026 02:11:03 +0000
Manifest this update: Fri 25 Sep 2026 02:11:03 +0000
Manifest next update: Fri 02 Oct 2026 02:11:03 +0000
Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: KoZ+N9SaEOxAYQby58E6KOOyIO7Ev8s7xY9ONOFR8S4=)
2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: X+ionRnl4NOsyOEaMY5HP4N1Hw33cXFC4QNX+HEEnQg=)
3: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: Tz3+hdgyWtYc1/HUoUjEsmhsHMVSkBuU+zwj3+lRJ4Y=)
4: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: BEQq2adPF9DtUnPGJHJJfgnf6dGwneA1V3UD4qTY/sk=)
5: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Qt9iDMNj4N3ReIVZuI3czqq9ixUtCUuaWxevQugerDE=)
6: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: QcfGkLYWjAnaAIuPRWdouuM5MQwIc64e/KwwHNAejyQ=)
7: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: /2oZAnJe5MS3Gc5JLji4AqiTQoX9Gmdygu0nAIyf1NE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: Sep 25 02:11:03 2026 GMT
Not After : Oct 2 02:11:03 2026 GMT
Subject: CN=6ab5d837-9ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:ef:55:c0:02:5b:9d:18:a9:64:27:99:7e:
a7:80:88:41:ed:94:da:e6:ae:81:ff:f0:6b:4b:8a:
6b:e3:67:fa:7b:2b:8f:7b:72:ce:ff:ec:34:88:b8:
40:1e:15:62:fa:4e:df:f7:ab:f1:b0:1a:ed:1a:f7:
d7:7a:2d:08:b2:65:d0:f4:da:1c:e4:0b:0b:db:52:
88:2f:2e:2c:61:90:45:46:e9:b5:69:73:f2:98:8d:
9c:99:66:f4:0d:4c:77:43:5e:0e:a2:58:6c:6a:8f:
aa:1f:84:c6:2e:07:c0:76:ed:3f:c5:31:04:6c:02:
04:40:bc:b3:f3:fa:c4:03:8e:f7:4c:e9:54:ad:80:
53:ce:f4:f9:26:b8:11:62:af:4d:21:be:ea:0f:ca:
2c:3e:27:8a:28:55:6f:1d:4f:81:f2:b7:70:6c:f9:
94:6b:25:79:9d:da:04:2d:91:5f:90:63:fd:09:55:
f3:1f:39:ec:96:31:11:c3:a4:3c:0f:1d:c6:7d:fc:
57:6a:9a:93:75:8b:a9:88:b6:21:60:15:ae:24:9d:
00:b8:f2:95:d9:9a:5a:83:52:f7:43:6a:f5:01:bc:
cb:9a:bd:e9:98:a8:88:bc:90:18:b8:79:09:55:c4:
e5:42:0a:94:1e:c1:3f:ce:05:b4:a5:5c:1a:83:a1:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:96:32:89:53:B9:C0:CD:E8:15:B1:87:3B:0B:55:17:23:FD:7A
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9b:9b:9d:e3:7e:38:02:01:a6:cd:94:fa:cd:ba:c2:62:9b:
6b:e0:0d:de:89:0e:24:1b:75:a2:74:aa:51:ac:5f:a8:92:8f:
10:6d:cb:cf:14:2b:c7:06:4a:56:f1:a8:84:b9:1a:43:a6:28:
f4:a2:72:94:cb:cd:82:77:74:90:e5:2b:8c:64:44:c8:16:ba:
f0:a1:a6:2a:0b:36:70:fe:d1:c0:66:a8:27:6a:6e:0a:ec:d2:
71:10:39:fc:e5:17:d1:92:67:72:68:a7:50:7b:28:da:e7:85:
dd:f2:63:0b:d2:11:56:98:4c:0b:6d:3d:b9:44:48:6e:ae:e0:
b0:6a:6d:4f:bb:a4:cc:32:3e:6c:df:b4:87:bf:11:de:83:db:
fa:48:21:ed:e0:fb:7b:b7:69:d6:d5:43:ea:2d:6b:88:34:e0:
d2:8a:69:7b:db:e2:2d:1e:9e:5f:30:40:f9:f6:bd:7f:05:0f:
51:3e:04:77:32:64:b7:ee:dc:a7:a0:60:f7:fc:e4:b4:1b:d9:
c7:11:8c:9b:5e:9a:d2:63:66:ed:3f:28:07:24:1e:3c:c4:42:
bb:b5:f4:53:b3:65:62:14:35:80:b3:a4:5b:d1:6c:fe:fa:6c:
4d:f4:e1:01:ad:69:ae:ff:68:fe:a4:1d:24:07:95:b8:ac:e4:
d3:14:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:26:47 2026 by rpki-client