
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json)
Hash identifier: 0pxw1VbyrQJF/hRJYqHIyqK547bVPhx8n7hshoap8aI=
Subject key identifier: 7D:C8:C9:F6:DB:45:A4:B9:A5:3C:0F:B1:FE:61:66:E5:3A:FD:9F:EB
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial: 3621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
Manifest number: 35C7
Signing time: Tue 06 Oct 2026 14:17:40 +0000
Manifest this update: Tue 06 Oct 2026 14:17:39 +0000
Manifest next update: Tue 13 Oct 2026 14:17:39 +0000
Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: +PlP8NgbLsrZS2a6IMfqWr2ffBXhszuLUvUgM/YoIfM=)
2: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: yReVTcL58773Jpuyzjun19aGFuK7z9XDGu28zTvah3k=)
3: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: BUp0zcWa4HIudpk64mEylcMBmmGpd1vuqwNaBAsC6O8=)
4: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: tHVxf9Q3vQhMutTNU0Up1wvh8aZLr2ux0lvTei/d9kc=)
5: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: S5MQHQKHGoySn52561lN0xrvmjrDRJUvv1CviMHuNKM=)
6: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: 8krrPxGdC1AJXLst0L0sKBcp7J4vtNMSaCyCJqfKloU=)
7: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: aqVmmYIJQaHpLvDdH8MbBjTUJnEk1fL6///wI+ixCg4=)
8: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: GnJt59bMAjeqlYPa4lin7QYgA2KcGbUA51eIDiT69YA=)
9: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: VG82nm7UqU5w2sJlNK4SDxqINYJwoA6/oxLrBlm8JIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13857 (0x3621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Validity
Not Before: Oct 6 14:17:39 2026 GMT
Not After : Oct 13 14:17:39 2026 GMT
Subject: CN=6ac50304-effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:b0:c4:4b:b8:d2:d9:8a:cb:2d:d3:e5:4a:
ec:60:d3:cf:1f:16:7e:b1:32:41:28:a0:1b:01:f0:
45:e8:c5:94:e4:84:27:8a:3e:39:1a:14:49:1a:f4:
a0:bf:3c:8f:30:f0:ab:6f:14:fe:c0:8c:9c:23:3c:
85:bb:8c:66:f1:13:a8:0c:67:37:e1:5a:52:de:cf:
89:11:ee:15:13:e4:48:be:35:c2:50:9e:d0:c4:0e:
8b:77:76:bc:40:f6:7b:8d:75:9d:69:17:7a:a4:67:
b5:98:3d:c8:4a:41:18:93:2e:9d:ad:e2:21:3c:44:
b3:1a:3c:12:ac:a7:39:6f:a6:4d:36:79:c3:a8:d0:
87:c5:7b:9a:c3:78:1a:cf:1a:4d:0f:7f:54:12:c7:
80:a0:b2:2f:62:9a:80:c2:38:9a:91:41:35:a6:fa:
ae:02:e9:6c:db:b2:17:ee:63:9e:9f:b5:94:42:87:
65:25:04:6b:5a:e7:59:8c:61:b9:c6:93:2f:1e:9c:
78:6e:ae:44:32:12:0c:77:80:1b:cd:43:37:ed:77:
8f:4a:a9:af:25:f6:60:40:d3:91:37:f1:e7:4a:fc:
cf:ec:02:47:2a:a9:06:90:73:32:76:73:e2:42:03:
a2:60:db:dd:49:49:9d:9b:49:05:0c:c9:f1:a3:5b:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C8:C9:F6:DB:45:A4:B9:A5:3C:0F:B1:FE:61:66:E5:3A:FD:9F:EB
X509v3 Authority Key Identifier:
keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:cc:81:6d:95:77:50:66:a6:b4:19:be:ce:26:ff:d0:36:
93:9c:1b:bb:5a:21:e5:5d:b6:44:ee:27:4c:58:19:8c:3f:d4:
7d:8c:e5:a4:91:e6:b7:b8:5a:fb:08:d4:fe:1f:a4:bc:d1:78:
17:35:0d:c0:d7:c7:46:ab:4d:4f:85:7b:17:83:b7:8e:dc:ad:
bf:92:88:bf:61:3f:85:2e:2f:29:09:87:fd:a7:58:07:9a:63:
92:c1:f7:ba:8a:cc:1e:2a:1d:4f:74:79:60:bd:9a:b8:11:d3:
09:79:c5:7a:87:db:a4:72:4f:91:ac:a8:1b:ed:27:34:ef:2c:
59:63:cf:e4:ff:80:1b:dd:8f:80:ae:1c:3b:cf:6a:65:c8:10:
42:ba:53:60:e5:98:8a:64:8b:e7:2e:9d:85:23:01:4c:54:0a:
e9:1e:27:51:87:6e:d4:8f:24:40:77:49:8b:c2:04:9e:ae:75:
8e:b6:7a:f2:66:8a:9d:75:65:49:87:22:b4:37:75:06:b3:fd:
4b:c9:93:d9:db:25:82:62:24:e9:08:a6:54:4c:7a:14:ea:c2:
77:75:08:45:6e:a5:56:29:68:de:fa:ee:38:3c:3c:8b:b2:f5:
d1:c9:4f:3a:35:42:8a:b8:32:de:04:a2:33:09:43:5e:de:c8:
0f:73:24:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:58:37 2026 by rpki-client