
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier: 3Zxv5fKRzwp/se7tG1/dOlsNhNh1FC69EEuR0RyZiiM=
Subject key identifier: 36:35:4B:B2:BF:C8:7C:DE:C4:88:53:E7:3C:CB:E3:63:9F:8C:4A:D4
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial: 04CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number: 04BC
Signing time: Sat 03 Oct 2026 00:11:14 +0000
Manifest this update: Sat 03 Oct 2026 00:11:14 +0000
Manifest next update: Sat 10 Oct 2026 00:11:14 +0000
Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: U+M+3gji/3pvFhGnq79gsa6kHpVjiK9VSdaH36QNJpE=)
2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=)
3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Validity
Not Before: Oct 3 00:11:14 2026 GMT
Not After : Oct 10 00:11:14 2026 GMT
Subject: CN=6ac04822-78d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:d5:f9:1e:0d:eb:d1:5a:15:71:af:d8:df:
a5:7b:b7:e6:e5:a0:39:f3:51:91:a9:22:0f:ac:dc:
6c:5c:62:b9:59:92:b2:59:ce:0f:02:dc:9e:32:8e:
ac:07:3a:6f:c0:26:2c:91:6b:3f:30:05:10:80:bd:
d1:0c:2f:e7:d8:ed:7f:57:17:42:56:60:da:17:74:
17:ee:ea:06:b8:71:01:cf:6c:de:48:fd:51:33:ec:
f4:91:c3:3e:d7:cf:9e:a3:cc:33:52:8a:a3:2c:ae:
85:4d:c0:cf:67:74:b3:93:a2:58:24:6a:28:d8:e4:
da:34:9f:de:c1:f9:31:eb:6d:14:b5:19:25:fa:e8:
d5:ab:44:23:3d:21:cf:b5:66:bb:ac:df:d7:cf:4a:
84:10:37:03:71:87:9c:ce:d6:a9:ce:36:36:47:82:
ac:b8:73:88:76:65:45:55:05:f6:27:0a:00:f2:2d:
c6:75:0c:6b:36:89:e7:34:ff:7d:85:36:45:50:d1:
cc:5b:b8:d4:81:45:d7:9f:01:7a:55:bd:47:c3:8b:
0f:db:38:0c:b3:54:50:e6:c8:55:81:12:f2:b9:71:
3b:81:20:83:33:b9:1e:62:b4:6d:37:b2:78:d9:a9:
43:48:df:ed:1d:05:27:7f:7e:23:c3:d5:39:60:0e:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:4B:B2:BF:C8:7C:DE:C4:88:53:E7:3C:CB:E3:63:9F:8C:4A:D4
X509v3 Authority Key Identifier:
keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:5a:81:d0:ea:66:54:74:7b:1c:9c:c6:3b:a1:2e:cc:67:8b:
2e:bc:18:f8:c4:36:c4:eb:fe:f0:13:4f:10:8a:2b:4b:fe:31:
b9:1e:46:ed:bc:5f:fe:61:ad:6a:47:ac:c3:0f:d6:ee:e3:13:
43:9f:d7:61:fc:66:ea:bf:58:88:69:b0:5b:dc:65:ca:ba:eb:
ca:f5:c5:45:c4:e0:dc:e5:59:fd:db:40:90:5e:96:05:b4:12:
81:be:75:8d:46:20:70:32:82:f1:46:8d:ea:33:45:7c:0c:e2:
1a:65:3f:08:be:a0:28:da:1e:f9:e9:e5:e0:74:ff:6f:98:9c:
c9:98:41:bf:67:f0:01:d0:9d:c7:ab:95:fe:59:79:d3:6a:51:
61:01:4c:e8:70:5a:d2:bf:70:26:de:d7:82:ab:2b:57:7a:a3:
bd:be:1e:d8:91:ad:f7:77:d1:82:9e:65:28:75:06:a7:cf:8f:
c8:86:71:d2:91:08:fb:1b:33:c6:fe:fd:c2:7c:5d:d2:a6:ed:
e6:31:76:7e:44:67:df:28:0f:7f:80:07:0b:f4:bb:0c:44:8f:
d2:3b:29:5a:90:21:96:03:c9:98:77:60:7a:b3:6c:ca:d8:f5:
85:7d:a1:a8:95:66:4e:55:10:95:c0:06:34:40:68:91:09:17:
53:24:f8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:23:49 2026 by rpki-client