
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json)
Hash identifier: idM3HbiJ0DU6W64bOvs/AGrnd6vpXRhGAbkS+4sB/cE=
Subject key identifier: 0B:88:F4:A7:AE:F6:73:D7:79:16:6C:B6:91:AA:D8:2A:16:74:10:01
Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Certificate serial: 107D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
Manifest number: 105A
Signing time: Thu 08 Oct 2026 17:29:40 +0000
Manifest this update: Thu 08 Oct 2026 17:29:39 +0000
Manifest next update: Thu 15 Oct 2026 17:29:39 +0000
Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: jeq+ftQ2R5qD/S52FUeBqht+kYOA6YBONO9a6LGuflc=)
2: F0F0DEC2C43411F0836DBC7DC4F9AE02.roa (hash: LMzi/nUop3Zg3Ri+ttMW1AIJQZt36oNcqeMlHwO8Bco=)
3: 4E05A11CA29511F1A58BD2117011F970.roa (hash: iovmDQFeUgMExa+ObKm6ePmLB8Un8IRAlJOPHRPzmKc=)
4: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: /jxk5arOtk8XX4x0oqH6WonBrSttsEFSJuqdd1pQsXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 17:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4221 (0x107d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Validity
Not Before: Oct 8 17:29:39 2026 GMT
Not After : Oct 15 17:29:39 2026 GMT
Subject: CN=6ac7d304-16d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:a3:14:42:e1:72:08:16:5a:51:10:6c:2e:
18:ea:9e:e9:46:25:c1:22:89:85:ca:be:8c:97:b4:
0d:c7:e5:a1:61:9f:fb:74:2b:6c:d3:41:d2:8c:ea:
e8:3b:22:f9:50:da:19:b5:18:3b:67:ee:17:10:aa:
11:be:58:87:1e:f0:6c:68:11:16:de:d3:d3:0c:2d:
fc:ab:04:5b:6c:05:e7:be:57:4d:03:2f:42:9f:06:
98:e3:40:a1:55:42:ed:a3:a6:42:89:9c:e8:25:5c:
ac:89:c2:96:c2:49:32:28:03:ff:5a:03:81:57:70:
2d:e5:69:2b:e7:90:3f:9d:4a:37:ce:19:a9:f3:f5:
fd:1d:dd:d4:4f:24:75:64:b2:2f:3e:0f:ec:3d:fc:
94:d2:58:b7:c2:9c:d3:72:3a:2a:9c:8b:cd:d5:65:
7d:cc:60:42:3f:aa:ae:91:46:b3:7f:4c:54:ce:c1:
cd:46:d6:b4:8d:22:cd:b4:9c:7d:1e:92:7a:5f:b6:
2d:bc:6e:61:98:e0:fe:3c:b0:14:71:ce:41:26:d2:
e8:29:61:5b:8c:c0:75:dc:6f:9b:92:e3:48:c6:e8:
da:5b:06:61:52:e9:8f:d8:19:98:9d:80:ba:d5:65:
bd:5a:16:f1:98:29:a6:2a:62:2d:b9:8e:04:2e:67:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:88:F4:A7:AE:F6:73:D7:79:16:6C:B6:91:AA:D8:2A:16:74:10:01
X509v3 Authority Key Identifier:
keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a5:bf:4e:43:86:23:43:e9:0d:a9:62:a8:fd:f2:c9:60:0c:
a5:f4:e5:2c:b4:40:a0:38:c9:50:36:a7:d9:99:79:93:c4:dd:
e4:92:8b:37:ca:12:a0:33:bc:a2:01:aa:9e:7b:60:55:25:a9:
7f:f2:ed:0b:ec:a5:29:f8:66:2f:f4:3a:e1:34:6a:48:11:85:
8e:6c:f7:6d:a2:22:80:cc:2a:b6:c3:af:f1:94:ca:41:b0:1b:
7f:26:4e:e2:e1:f8:8f:cf:27:7e:c5:52:8e:fd:92:62:c9:42:
66:0f:85:d1:64:d1:9c:61:ce:79:ad:c2:36:f1:b4:c4:59:1a:
8c:9d:2e:76:31:39:dd:f7:e2:b2:bc:80:b5:74:a7:b5:85:a0:
59:42:7f:3b:e3:bd:9d:1a:b0:e2:75:96:60:f8:10:6e:32:eb:
c2:53:1b:fe:dc:87:51:72:37:34:ff:db:0c:06:db:36:24:73:
b2:6d:24:01:46:36:c1:b7:2d:b5:97:35:58:81:35:48:b7:28:
de:a6:0b:80:3d:64:35:07:74:f7:d2:4e:24:95:6c:ab:53:41:
d9:b8:9a:d7:41:46:3b:ca:60:aa:10:0b:32:f7:22:0f:27:8f:
e3:84:88:4f:dd:92:c2:5c:99:c3:86:09:57:ea:96:60:e4:c7:
8a:75:79:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:54:32 2026 by rpki-client