
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier: O1jGI6IiyH/0OiwJoWCwDxmYSbP9hBqKsvBjisYTOXI=
Subject key identifier: BD:44:DC:05:E4:1A:AD:D8:71:7C:16:95:1E:4A:10:7A:F5:00:74:04
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0E2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number: 0D25
Signing time: Wed 04 Nov 2026 18:56:48 +0000
Manifest this update: Wed 04 Nov 2026 18:56:48 +0000
Manifest next update: Wed 11 Nov 2026 18:56:48 +0000
Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: xDHEjDNyEJbmIrpN4Fyn9grJ9vap6RDn7xRoUIQuz68=)
2: 4A7E2898A5C411F19C8FF2B67011F970.roa (hash: FjThLBw2H1Vgo2XVwexsW1c+HATo1/D1xZQEZgYo2F0=)
3: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
4: BFF3DC6A8D7511F1984B69733211F970.roa (hash: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI=)
5: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
6: 0CE85BA6BE1111F18720DB3D5611F970.roa (hash: nz9vc68IV5WJ7mQXbS6rNZIjFtBJkdis8tlOkiay7Qw=)
7: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
8: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
9: 7CDB77C68D7511F1B81A5A6E3211F970.roa (hash: qV41HhWJkk9bGNMXnKLZx7jPUgw0pOayrAqVgkbP6uY=)
10: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: fSPgQ0LMQzI8bkHaUu8bL3d8S8z0D/SfCDL4l0l5jeY=)
11: 7B0202308D7511F1B81A5A6E3211F970.roa (hash: cLjdhUjlRnZ/CysDyvE5WxC4HuYKkSjsastV+5g0hOA=)
12: D36559D68D7511F1A94DC67B3211F970.roa (hash: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4=)
13: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
14: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: 4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=)
15: 3486A02AA5C311F19BC95E547011F970.roa (hash: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4=)
16: F04C908AA85711F18FFCAC0D4011F970.roa (hash: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg=)
17: C7BD7A22908211F1B42CEF406511F970.roa (hash: URZ1HAVsZ8gDNHs/f+Mvco7+rFhBUEkt2pK3T1DSEzw=)
18: 60A1565CA1F211F1993DFC693F11F970.roa (hash: RFHpBcGzcu8zc3vv4bbihIv1/WTO6k7Pot6Tojz87xo=)
19: 9DBA4E02D71411F1A6D299031A66CEF9.roa (hash: pdSyUMPpA8a/ewj/0DOaHahHB7MmG/Q6lb6CIo1RnLQ=)
20: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
21: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
22: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
23: 1F379CE69D2211F1A2D31D4A4411F970.roa (hash: hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=)
24: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 18:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3629 (0xe2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Nov 4 18:56:48 2026 GMT
Not After : Nov 11 18:56:48 2026 GMT
Subject: CN=6aeb7ff0-a97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:79:08:ec:44:a0:d4:52:b3:fe:b7:d8:ec:
56:20:22:26:7a:f0:d7:b3:19:96:ee:4f:74:7a:bc:
02:45:20:81:9e:ea:6a:be:55:a2:b2:7a:d2:95:7d:
b0:2e:b1:bd:5a:eb:63:49:6c:d4:57:37:bd:37:f4:
34:3b:d0:23:f0:ac:af:2d:6e:e0:ae:ed:24:47:d8:
8a:bb:b9:7a:2c:d7:57:2e:7d:e4:60:3a:a8:5d:d5:
de:ea:0e:d5:a5:d0:7a:33:7b:20:e8:9b:04:5c:5a:
97:0b:8d:64:4e:c8:c4:f8:52:77:26:73:d0:91:3e:
29:84:ae:68:c7:84:f6:94:81:e3:15:04:bc:4d:87:
76:70:9b:a0:09:57:c3:e2:19:e9:05:65:eb:37:a1:
37:b9:33:17:b9:51:0a:ef:5b:cb:c8:6c:c5:d4:f9:
2a:c1:f3:7f:1d:f3:70:72:c5:ef:73:3f:48:c1:e2:
e4:c7:d9:33:c4:15:12:52:68:f9:79:29:80:56:a1:
4a:d2:16:b8:b5:49:c2:d3:d2:32:0f:a7:19:12:26:
cc:d0:10:e1:06:ed:11:16:e7:94:3b:1f:6d:02:26:
85:3e:83:c3:98:ad:b3:03:d2:0f:3a:41:41:b8:c5:
dd:65:2a:47:15:ca:a3:38:d8:bc:ce:e6:da:ad:bd:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:44:DC:05:E4:1A:AD:D8:71:7C:16:95:1E:4A:10:7A:F5:00:74:04
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:1f:c4:ee:94:39:f2:93:f0:bb:43:64:6a:32:bb:aa:cc:13:
32:8f:4a:53:96:60:8b:42:d5:21:16:c0:2c:7d:51:21:c1:19:
99:0c:b4:9c:36:65:6a:ec:4c:87:1d:72:ac:ca:5c:c8:95:ff:
32:fa:0b:11:60:28:c6:d9:dd:ea:0c:2d:05:11:da:d1:7c:90:
ea:c3:02:11:cb:ac:0d:31:8f:f9:b0:cc:86:64:ab:c3:45:ca:
8a:71:5f:0e:23:c7:e6:b9:03:b6:1d:66:1a:62:eb:09:3f:6b:
65:ba:d4:97:0d:55:39:f7:89:92:3a:5e:5b:58:61:45:6d:8f:
22:d0:83:21:e3:98:c6:81:7a:ce:5d:04:c0:63:0b:be:90:c2:
9e:37:24:5e:62:30:ac:c0:c6:48:d6:74:d6:80:fa:d4:e5:f2:
72:c0:df:8e:7e:32:d4:d3:f5:5c:0e:40:7d:1e:da:da:b7:ab:
0b:66:f4:46:fc:8d:7b:d4:92:3c:12:0f:cc:54:63:8d:46:b8:
8e:6c:57:51:9c:80:b7:be:7a:3c:39:6d:f2:16:70:47:2c:cb:
2f:de:4b:a0:dd:38:3d:4f:38:89:11:fb:fe:ac:69:cb:0b:4b:
f9:fd:1d:1c:46:34:de:86:8e:67:59:40:bb:fb:d0:87:bf:67:
2d:c5:a5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:32:14 2026 by rpki-client