
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier: DQdrbJQ5SP8ha6Kk+gyl88qKIp1NPUad+avgW3j4Zxs=
Subject key identifier: 60:9D:0E:FA:D8:00:7E:72:F6:81:4D:FC:7D:46:ED:3E:3B:81:1B:94
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial: 02FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number: 02DF
Signing time: Sun 11 Oct 2026 01:35:25 +0000
Manifest this update: Sun 11 Oct 2026 01:35:24 +0000
Manifest next update: Sun 18 Oct 2026 01:35:24 +0000
Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: jvdNPzx6OKAcFwBn1rwOxpP4ZQ4QtlMRCN7veBYBDTg=)
2: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=)
3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 01:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Validity
Not Before: Oct 11 01:35:24 2026 GMT
Not After : Oct 18 01:35:24 2026 GMT
Subject: CN=6acae7dc-2333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:07:85:85:31:fc:e3:8e:a8:92:c6:28:41:
3a:28:20:5b:cc:f0:66:e7:36:42:ff:70:c6:7c:d3:
38:8b:77:22:a7:99:99:69:31:62:a0:e5:6f:b6:f1:
c0:ad:04:f6:6a:f9:ae:9d:9e:c8:af:a7:c1:6a:91:
b3:46:c9:1d:0c:2d:62:09:b2:90:79:40:81:84:e8:
1e:78:2d:45:25:d3:d5:67:1b:20:99:3a:01:c8:7f:
38:ab:b6:95:b4:09:4b:77:72:64:5b:dc:a1:b9:ae:
5e:9e:fb:c6:27:4b:1a:1a:94:15:87:4a:bc:a3:37:
13:ed:9e:b9:6b:12:40:c0:cb:65:fd:34:5a:bd:ce:
20:bd:0c:e5:0e:6a:34:49:0a:c3:a2:5b:99:93:9c:
e9:cb:51:78:92:86:5a:d1:c3:ed:32:e9:3b:0a:db:
fd:38:a4:48:ce:cc:f3:14:e3:7c:39:fc:98:83:5b:
01:b3:87:cf:86:41:0e:00:15:2f:5d:c2:68:65:53:
40:36:65:7d:bd:5c:b0:4b:9d:21:36:04:6a:10:6a:
97:c3:c0:42:c3:66:d9:16:a2:44:6a:40:54:71:6f:
b4:72:a2:cc:f3:7b:21:0e:d4:fa:b0:00:09:af:0c:
17:4a:c6:95:c3:76:47:31:74:06:4c:90:f8:af:e6:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9D:0E:FA:D8:00:7E:72:F6:81:4D:FC:7D:46:ED:3E:3B:81:1B:94
X509v3 Authority Key Identifier:
keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:df:7a:3c:7c:f5:82:40:1c:0c:07:4d:3e:46:c0:dd:b6:88:
58:38:da:19:08:50:e8:a6:b5:ea:6b:9e:57:75:95:0a:a7:ec:
ce:71:78:0d:16:fe:38:4c:b4:0f:bf:15:90:02:e2:c9:9f:ce:
c3:0d:6d:bd:ed:e2:78:a0:e1:f2:71:5b:8c:58:b4:4c:45:f7:
d2:29:3e:4f:d3:96:99:76:70:f9:35:f7:aa:5a:75:31:50:95:
70:63:fc:2f:72:50:18:12:38:eb:6d:e3:6c:bd:ab:2d:b9:d9:
14:08:05:20:a1:4d:99:f1:01:db:e5:40:c7:3e:6f:f2:d6:98:
f9:7a:7c:96:48:7b:5b:73:c6:4b:59:0d:04:34:de:4f:ee:e8:
56:12:a6:b1:59:5a:0d:68:6e:7f:53:0f:1c:72:4d:02:50:c6:
01:93:bb:5b:9a:e7:ed:66:2d:b8:71:1f:32:3a:6f:59:80:51:
d0:b6:2e:51:08:93:bc:7d:36:5e:0b:ac:5e:ea:de:5c:a6:26:
48:4b:4b:44:56:c6:dc:ba:2d:0c:f0:93:e1:83:9a:f0:78:9d:
ea:53:12:86:5f:9c:a8:61:32:63:46:a3:9d:07:46:1f:99:ab:
7e:38:31:82:70:0b:c2:64:d6:dc:1d:6f:ea:1a:4b:97:82:43:
63:66:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:14:36 2026 by rpki-client