
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json)
Hash identifier: j5Zn/UvFhji7NMq2MP/UtPsGRcAftAU+Tk/SZRHC75s=
Subject key identifier: 6F:0F:58:9B:01:98:5E:F2:F5:58:2D:C7:86:D8:64:C2:6B:1E:1F:78
Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88
Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
Certificate serial: 06A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
Manifest number: 06A0
Signing time: Sat 14 Nov 2026 22:15:20 +0000
Manifest this update: Sat 14 Nov 2026 22:15:19 +0000
Manifest next update: Sat 21 Nov 2026 22:15:19 +0000
Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: j6ayg35MgJzd0l8GaZ1J1oEl82q+rQZ+6AV+lXUv2dQ=)
2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: 7ciUUzLJ+kZgShwA8i58YsGujRYv/UGV/4XGImsbT2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl
rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 22:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1704 (0x6a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
Validity
Not Before: Nov 14 22:15:19 2026 GMT
Not After : Nov 21 22:15:19 2026 GMT
Subject: CN=6af8dd78-e837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:bd:2f:75:39:8c:b8:46:9a:b2:d8:61:dc:
78:6c:09:ef:85:db:e9:4b:66:d1:eb:95:72:82:27:
1e:c6:00:46:61:20:38:53:e2:95:75:94:5e:0c:8a:
91:71:de:d9:72:26:5f:e0:66:82:70:b0:b0:c8:f7:
27:49:fe:4e:5a:48:51:09:6d:b1:cc:c7:c1:d7:37:
88:a2:f0:40:a8:7f:87:a6:58:3b:e0:a0:0d:7d:47:
35:6c:dd:c3:38:68:c0:40:d6:89:a2:f0:a1:8b:66:
84:42:18:f0:08:97:12:df:e9:b3:91:e8:7e:52:73:
25:c3:32:39:86:74:c4:88:91:b5:43:02:bc:fc:b1:
aa:aa:76:cc:d1:64:c8:58:dd:7e:3f:f0:f8:b0:08:
d4:0c:9c:d3:5d:f8:88:04:21:e1:eb:80:11:74:29:
15:9c:f8:f3:e5:54:93:d9:f8:d0:bb:4b:de:6e:6a:
dd:2a:27:2f:44:01:1c:f3:f4:b2:24:19:de:f9:10:
a9:76:23:17:ac:52:90:ce:b4:32:d6:f4:75:d1:c8:
e0:53:36:74:8a:c5:db:6c:67:a7:ff:f2:02:02:b4:
a8:8b:22:b5:d4:ec:0f:40:ff:b1:13:16:ce:60:50:
48:e2:d5:49:eb:cc:52:c6:93:d6:71:1e:6d:41:1f:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:58:9B:01:98:5E:F2:F5:58:2D:C7:86:D8:64:C2:6B:1E:1F:78
X509v3 Authority Key Identifier:
keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a0:91:fb:5b:6a:c4:7b:95:52:f9:d7:b7:72:f2:73:e9:e2:
09:67:1a:18:d8:21:18:53:ed:b3:cd:0a:eb:95:e6:be:1b:5e:
38:10:ea:3b:28:1b:05:b2:a8:a5:f3:23:e6:c0:06:fc:19:44:
2a:e6:5b:b9:bd:4b:47:36:8a:5c:37:4a:4f:c1:9e:4c:81:15:
f3:a0:45:71:08:93:8e:17:cc:f2:67:d2:56:8d:b4:33:7a:5c:
44:0e:10:87:fc:94:60:44:10:5d:6b:c3:92:43:ae:c8:83:6e:
22:27:58:15:47:d9:3b:da:b8:fb:69:ab:76:f0:3e:6d:18:92:
f2:85:14:30:26:84:d7:62:25:ed:08:c1:5c:f5:ba:c4:c7:38:
07:0f:f5:10:c7:33:6a:fe:8f:97:59:26:8f:0e:41:5c:5e:07:
cb:81:45:0a:ea:28:ff:4c:48:15:08:2e:ac:c8:72:48:1d:1e:
ce:11:5d:94:88:8f:f6:e0:13:ab:9a:08:fd:67:c4:ae:f3:31:
dc:97:d2:90:f2:fd:6a:79:bf:cf:2b:17:80:61:38:70:9c:e5:
bd:f3:ef:29:1f:87:75:2c:74:87:c6:d9:8c:80:57:7a:7d:75:
63:80:e2:97:0c:7f:37:a6:67:a4:45:c3:05:73:ef:21:fb:3f:
b4:ca:f8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:28 2026 by rpki-client