
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
File: pKVwtST2YpG2kJvyMTPV24NQQe0.mft (raw, json)
Hash identifier: 0RcAY3Lt7tg/VI4ORuBRZbVlye6t4wIp+oAL0vLyGp8=
Subject key identifier: A7:4B:C2:0F:47:81:6F:99:31:7E:53:DE:A0:C0:1C:73:48:2B:E6:66
Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED
Certificate issuer: /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
Manifest number: 46
Signing time: Thu 15 Oct 2026 09:36:55 +0000
Manifest this update: Thu 15 Oct 2026 09:36:55 +0000
Manifest next update: Thu 22 Oct 2026 09:36:55 +0000
Files and hashes: 1: pKVwtST2YpG2kJvyMTPV24NQQe0.crl (hash: z47LZmUzQ1kL6q78GJv+bkiRl08UEpIevfCdhTRw0+4=)
2: 8B417B6064AA11F19AE9C6D58F47A888.roa (hash: VxBq9ev4olTZHWXFb/0pr2uIN1FLk3ZIw2Udkr1ORSM=)
3: 694EC58664AE11F189DF701D9347A888.roa (hash: Mz6Te07lf/TFttYs/5xZ/WVJKDZVoMpf6rbwNPc0WGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl
rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 09:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
Validity
Not Before: Oct 15 09:36:55 2026 GMT
Not After : Oct 22 09:36:55 2026 GMT
Subject: CN=6ad09eb7-85a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:a0:86:84:68:33:88:90:4a:53:17:a9:fc:
2b:34:b5:24:14:aa:9a:ca:63:ab:7a:d6:1a:fe:a2:
dc:14:cf:44:80:54:d1:2c:25:f9:fe:0f:bf:46:d2:
3a:59:07:5f:ab:d9:c8:63:1d:c4:db:ef:55:45:67:
f5:6f:c4:e4:ec:8d:c4:35:4d:d3:d7:b4:12:84:dc:
6c:73:8d:22:47:ec:77:0d:ef:97:fa:27:5b:90:a2:
1a:0b:f2:49:89:18:40:f5:18:2e:5a:76:e5:f0:40:
bf:64:e7:e1:dc:86:b7:1c:90:45:06:59:81:da:9a:
7a:18:97:17:74:38:dd:12:6e:ea:13:6a:1b:79:be:
42:e1:99:10:0f:f6:fa:58:fd:1a:c5:ed:84:86:7e:
30:9b:d7:42:6b:55:b7:de:e6:fc:52:1f:06:86:d5:
53:0c:65:df:81:0f:26:6a:5f:12:b4:c5:ea:f1:c0:
16:80:21:58:23:9e:4b:0a:fc:f8:04:26:ce:60:c9:
ca:4d:85:d2:ed:69:33:cf:7e:34:26:a4:03:3f:0e:
46:aa:f7:39:e9:40:d0:8b:88:58:4f:05:be:39:26:
48:d7:f6:c0:a3:5d:fc:84:45:7d:a6:26:02:e0:00:
1c:32:92:63:12:7d:87:ff:dc:ee:1e:e9:51:4f:31:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4B:C2:0F:47:81:6F:99:31:7E:53:DE:A0:C0:1C:73:48:2B:E6:66
X509v3 Authority Key Identifier:
keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3d:59:c6:38:06:c7:fc:44:f7:ce:ac:b5:17:59:9d:e1:a6:
ef:78:86:38:a9:3c:64:ff:6d:a3:a5:f5:f9:af:57:07:6e:ca:
6a:dd:3c:11:44:fc:94:ab:7e:ad:79:f7:f6:af:15:18:4c:64:
e4:84:32:b2:86:2b:19:66:b6:42:8c:e7:57:f3:32:6d:bb:84:
0c:93:bf:1f:ba:42:21:14:10:f0:24:9a:a5:a8:c4:32:1c:22:
54:da:16:aa:a0:fe:a0:e6:70:28:e3:99:7f:cc:db:20:ea:9c:
2c:cf:17:a3:74:69:08:7a:1d:c2:e1:74:a3:4d:3f:44:51:51:
76:da:d8:98:fb:94:81:11:97:3d:c0:a5:49:d9:ba:25:1c:5d:
01:49:24:1f:a6:db:b7:da:cb:3c:0b:13:70:f1:60:65:ac:1f:
93:06:56:a4:7b:08:fd:52:39:8f:70:c6:cf:b3:f7:b7:54:ad:
81:18:2d:40:17:e1:d1:aa:3e:3b:a8:43:4d:44:44:4d:e9:bc:
34:55:30:5e:3c:53:c0:31:10:44:0b:49:32:8d:63:bd:c1:48:
79:16:e7:f5:a6:d0:bc:6a:8d:8f:ee:2e:5f:e4:35:ef:58:c5:
27:b5:2a:11:78:aa:f4:7d:e9:3f:ad:c6:81:02:44:72:67:d2:
3c:50:16:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:27:42 2026 by rpki-client