
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
File: _KoIYibfAq-DlPqyLR-5bgt9Zd0.mft (raw, json)
Hash identifier: UV+W08+6jzZWh9f7siRq7WMahsoE54E5yRH7Q8wmJUg=
Subject key identifier: 19:25:72:99:C2:0E:57:63:7B:A6:31:4A:8E:DF:87:2F:69:05:67:20
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0D26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
Manifest number: 0CD6
Signing time: Thu 24 Sep 2026 18:35:13 +0000
Manifest this update: Thu 24 Sep 2026 18:35:13 +0000
Manifest next update: Thu 01 Oct 2026 18:35:13 +0000
Files and hashes: 1: _KoIYibfAq-DlPqyLR-5bgt9Zd0.crl (hash: 4aFQGF8z9dlWOQHnxAMZ5vcvc0enljGLE/W8jFcWgDY=)
2: 78E949B8BA2B11F091659A18C4F9AE02.roa (hash: jySnNcQ/+odq2S87rB45bvuTiaw3wlS7bGHDCJXajj0=)
3: 16C56390B6FF11F096DEAA71C4F9AE02.roa (hash: BgUHPnvLwPxqiAYZUON/ST5O2jioUi7aR9uP+MPdncA=)
4: E2D5171C2F3211ED958A415DC4F9AE02.roa (hash: EKgPE59Um2mB3Cb/fDjzGAqBUuX41HjcK3tgwN7mb6g=)
5: 75775B8A5E3C11F094FDCD71C4F9AE02.roa (hash: 71T3pzVhzyKgAZZGhNCVsYqKbfXYuUmjUcBl+S0PhoM=)
6: 9FC61D303F7A11F0BC711E7FC4F9AE02.roa (hash: gzcKTWUYCkW7/UycwF0pi+085wVbUmNYAwtTydE5q9k=)
7: A28603BE3D5D11F19617582FAB833773.roa (hash: guX6EhbcTR6j/8h8tuHU18WPC5/CU3vKLdR4Gif3JRY=)
8: 50229D303D6711F1A0848E61AE833773.roa (hash: reIxgqe05sEBUJKY+WscmjdUtjvd2Rhqu3ZL/1RHcqc=)
9: 45DE9550BADF11F09B91D509C4F9AE02.roa (hash: p36IxgJSYxSVxDcgWekbNQXRkHJAnWyPDPHksjl233k=)
10: 336E2134D0FF11F0904A3785C4F9AE02.roa (hash: 8ReXEY/ooZI9VWwdjyL+EpSnY0MpgK9LpTHh2PDG6Qw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3366 (0xd26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Validity
Not Before: Sep 24 18:35:13 2026 GMT
Not After : Oct 1 18:35:13 2026 GMT
Subject: CN=6ab56d61-cb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:e0:bd:40:29:74:8a:df:78:db:73:37:22:
ea:2b:11:03:e2:ec:09:8a:25:9f:88:8a:7d:3d:0f:
ed:f9:15:51:ca:e7:7a:87:f3:fe:02:24:ab:a1:72:
64:2a:a5:18:78:39:24:7d:4f:e9:40:97:f1:fe:0b:
e2:61:f4:1f:6a:ed:ee:c9:ca:ed:ee:00:dc:8a:ad:
0d:6d:0f:1b:e5:5d:95:8b:02:ce:d6:6a:24:58:b7:
f3:25:8e:db:78:85:5b:4f:e8:48:0e:e4:ac:c2:16:
83:68:12:58:90:e2:a2:24:d1:7f:eb:b8:a0:63:d8:
fe:20:d8:89:a3:7b:a7:4f:bd:ab:57:c5:1c:ac:cd:
92:01:ab:f6:f8:a5:96:88:dd:95:f6:5f:e1:e8:f6:
66:c2:7e:40:3e:0d:7e:54:7c:0f:93:fd:9b:8e:17:
2f:08:a0:5a:04:28:ba:2b:a6:0b:4f:3d:eb:a9:67:
22:82:45:58:7b:b6:f4:a0:c2:e3:ab:a1:0c:bf:7f:
3a:73:61:81:14:1a:91:19:22:a7:ae:31:b1:1d:e3:
9b:cd:a6:c1:a2:dc:9f:cb:57:ae:e9:60:d8:57:ba:
5f:91:ce:90:82:47:f8:08:65:ee:1f:e7:6b:54:ec:
de:96:e1:a4:fb:ca:04:d0:61:92:d7:e9:e0:7a:4f:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:72:99:C2:0E:57:63:7B:A6:31:4A:8E:DF:87:2F:69:05:67:20
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:08:bd:6b:55:c7:bf:ca:6d:2d:63:1f:c7:e6:b7:15:b1:f0:
c2:67:d3:a3:ec:fe:97:dd:68:8c:13:0a:8a:8b:89:8b:02:d9:
52:2c:83:f2:18:b0:f0:fd:1c:e7:23:c4:26:49:5d:17:ba:90:
e8:c7:85:14:e7:c5:a5:79:ec:79:4e:34:46:b0:0f:bd:cd:4c:
9a:ca:4b:45:4d:8b:a4:56:67:01:d2:cb:c0:b6:fb:98:ee:3d:
69:d7:dc:72:89:a0:22:e3:b6:38:56:da:d7:10:f6:3d:db:21:
d7:2b:7a:83:3e:b5:ed:92:6f:32:7b:44:bd:6e:ed:f6:01:ad:
a0:b7:dc:48:8a:57:b2:4b:17:4f:aa:ac:99:76:5e:f6:28:a4:
5e:6c:27:76:eb:9a:8a:a2:35:50:cf:74:2c:ee:c1:6c:6a:67:
5f:cf:ae:64:a2:5d:13:3d:23:ad:d5:e4:c9:b4:cb:a6:17:fb:
37:6e:9a:16:f6:dd:4c:90:c1:80:b8:3d:07:d5:b3:69:9a:31:
41:42:93:eb:87:1f:cb:38:ea:77:b0:1a:4a:bf:15:04:a5:05:
95:78:06:89:1c:65:c9:5b:21:8d:39:db:aa:c4:4d:cd:a6:3e:
24:8a:1c:a8:91:34:f3:c4:64:3c:1f:0d:90:1e:4d:65:61:9c:
01:15:24:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:17:53 2026 by rpki-client