
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json)
Hash identifier: YDWTSHLAuvjyHNN5U/cCAp4lqQ9eDjzLmkSUZH2o7lw=
Subject key identifier: 61:DB:53:3A:AE:A9:29:5A:16:74:B4:D2:AA:6F:68:6F:54:42:A2:17
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 1795
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
Manifest number: 174A
Signing time: Sun 20 Sep 2026 16:35:18 +0000
Manifest this update: Sun 20 Sep 2026 16:35:18 +0000
Manifest next update: Sun 27 Sep 2026 16:35:18 +0000
Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: SoirFnceARXQzQlD6RgEzVBcU220uXvnPPOcfZeZMIo=)
2: 539AC1C6B27A11F19678C2773511F970.roa (hash: kjhI0eeZ4Kl7oEROg4YfSikLSMN/fVN+2AESo76PF0k=)
3: 52574F8CB27A11F19678C2773511F970.roa (hash: qhFcjN+ZaFSnR2upISnDozu4NN35tYfPc/0WdcH7emg=)
4: BD2B0858B27A11F19095CEA23511F970.roa (hash: JN2Oh4NAb4qZWkyTkJ8HdWLvLh4qFlBcfnXv4X0jbyQ=)
5: 125EA39CBE0311F0BD65F062C4F9AE02.roa (hash: qv8edl3PP2lUfLEX63XMIljMaIJhob91NbUv2EBIJxI=)
6: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: cHv3fnxqNHW1Zw2vL2G/L2D1Q/7NINT+H1rvDrx7FGE=)
7: EECE3EC83CAC11F191D82B64AE833773.roa (hash: w9oUAma24okW8iq8Kb6jjeHqtZAlY2V722gRG14VEBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6037 (0x1795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Sep 20 16:35:18 2026 GMT
Not After : Sep 27 16:35:18 2026 GMT
Subject: CN=6ab00b46-c0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:ef:33:60:32:96:fe:04:b6:b1:1b:ca:39:
06:e0:f7:b8:31:49:d8:d9:0f:0c:91:10:8d:78:4c:
fe:ae:ec:ad:73:42:01:26:bc:da:af:b9:fd:91:5c:
4d:69:96:9f:c9:63:1c:bc:5a:7a:60:08:e5:d9:c0:
e3:77:0a:3a:88:18:91:a0:13:43:eb:3e:87:dc:d7:
d6:bb:58:ec:97:26:9b:b0:fd:51:f5:ee:85:35:4e:
bd:60:d4:0d:e6:b0:3c:73:8d:6f:ff:3a:cd:e8:1e:
cc:41:a3:6d:13:02:ee:08:dd:f2:fe:d1:42:6b:52:
4c:d3:d1:d9:90:1f:39:56:be:c1:df:46:e0:d8:69:
72:ef:0c:fc:c9:e6:cd:3e:6c:a3:d4:2d:2a:54:88:
b5:5f:b7:ec:ce:43:db:9f:07:02:76:6a:72:f9:b7:
77:0a:3a:12:4d:65:f1:51:6a:72:99:f8:ec:36:f1:
fe:d0:cb:af:80:a3:ef:ae:7a:80:2b:9f:47:75:66:
ac:34:fb:93:c5:63:81:d1:28:77:fa:aa:dd:62:2a:
50:74:c2:fd:b4:74:ec:7c:dd:f0:37:39:e8:d3:57:
c2:33:0d:3f:27:9f:6f:13:3e:4e:88:7b:fd:4c:3b:
06:56:ea:48:b8:bd:f7:62:0b:e6:d9:9e:19:32:aa:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DB:53:3A:AE:A9:29:5A:16:74:B4:D2:AA:6F:68:6F:54:42:A2:17
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e6:9d:18:c5:8a:2a:05:d8:11:6d:dd:5f:fb:e3:a1:13:fd:
f0:a4:ac:f3:53:87:43:2c:66:e4:fd:50:04:dc:02:5c:77:37:
47:84:c8:21:2e:d8:85:b5:c8:8e:73:8c:55:99:73:37:58:17:
4f:20:6e:38:54:0a:73:92:82:5d:45:57:3d:2b:c0:ee:dd:27:
d0:09:4f:d1:58:83:5a:53:e9:a0:1c:85:a8:c1:27:37:42:e4:
75:b7:b5:c3:2c:29:0a:2f:73:2b:b5:e6:a8:db:54:ab:05:c7:
ca:6b:7e:54:94:0e:f6:4d:5b:3b:70:e9:9b:35:a9:17:07:c7:
49:7d:ab:95:88:a2:07:63:bb:81:f6:cf:74:e6:c0:02:b1:32:
5e:d5:1c:0f:62:52:f7:fb:6e:07:1a:ea:18:ca:ac:44:5a:b7:
08:aa:c8:e1:18:80:7d:7c:f6:7b:e6:52:fa:d9:3b:5b:da:c6:
26:98:64:6c:ba:cd:98:49:12:ac:2d:be:07:a5:30:c4:88:d5:
91:3e:99:e8:55:e0:fe:57:95:03:df:31:a5:28:04:ad:e9:93:
0b:7e:8a:37:18:10:1d:4d:83:cf:c9:14:1e:e6:1c:cf:5b:57:
50:d2:51:08:0f:7d:73:ce:4e:ed:6e:ac:ae:57:7c:47:f5:a2:
d7:03:fa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:27:19 2026 by rpki-client