
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json)
Hash identifier: WUPV9hpn13Tg0bb0o25zsxueXtsAE6L6/X81qKurI20=
Subject key identifier: AA:C7:9D:3B:AE:54:F7:6E:17:46:87:59:5D:0A:C2:F7:02:5D:00:DD
Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
Certificate serial: 0D1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
Manifest number: 0D0F
Signing time: Mon 12 Oct 2026 18:28:13 +0000
Manifest this update: Mon 12 Oct 2026 18:28:13 +0000
Manifest next update: Mon 19 Oct 2026 18:28:13 +0000
Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: LVYzMOlQEUhUsBMWnyajU+gg6v9Znpr98shNmEn5YyU=)
2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 6d9x5P4qjslvkCA0UbFumpnnbX594CB88ciKOH4G9Ks=)
3: w0UxDksEhVgTbiOPi32yfBjO8Nc.asa (hash: cCNwpQu6uKNcvL+/ux8Wy6Y48MKl03STw/0+ZuYQCes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl
rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
Validity
Not Before: Oct 12 18:28:13 2026 GMT
Not After : Oct 19 18:28:13 2026 GMT
Subject: CN=6acd26bd-2c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:e6:3b:5d:58:b2:ce:e5:76:0f:52:31:a7:
1f:d8:14:cb:86:73:26:cd:b3:35:f6:5e:c6:cc:10:
fc:20:df:bd:01:9c:6f:fc:92:81:0d:53:df:ab:8f:
18:9d:a6:4b:d6:b3:bb:18:2b:b8:9a:bd:05:b4:01:
95:15:4c:4c:3a:8f:2d:ba:8c:d2:25:6d:53:59:5b:
34:41:5f:48:40:14:82:c9:da:2a:63:72:ca:f4:b4:
b1:56:6f:94:c3:95:ff:bc:f6:9c:7d:5e:ac:6b:ce:
9c:fc:49:c2:c5:39:62:57:f1:b4:62:79:73:43:b7:
9e:b1:1e:4b:64:83:9c:7d:4b:20:4f:8c:4a:de:ff:
e4:7f:06:e5:9c:17:2d:23:14:08:d1:bd:3b:b2:07:
64:5e:71:e8:af:48:7b:a4:04:04:1a:d5:bb:cf:f7:
cd:f2:1f:0f:18:9f:8b:6c:85:2b:4a:e3:45:b9:d7:
76:46:fd:8a:18:22:5c:b7:7a:e7:6d:79:6d:7f:c3:
bf:26:c2:72:8e:1e:ce:47:16:76:76:6a:55:db:12:
03:7f:40:d0:c1:51:92:9b:8d:38:09:7e:bd:67:39:
d5:a2:26:1f:3b:40:1e:0d:39:88:06:70:4f:3d:a2:
45:c7:18:6a:d3:52:50:1a:e1:b5:eb:e6:79:1c:37:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C7:9D:3B:AE:54:F7:6E:17:46:87:59:5D:0A:C2:F7:02:5D:00:DD
X509v3 Authority Key Identifier:
keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:51:bc:24:61:92:85:ee:03:27:e7:e1:bd:75:ba:26:8c:22:
9f:66:aa:a7:f8:33:c4:a9:3e:97:d7:82:ea:54:fe:22:63:86:
5b:5f:c6:4b:53:a3:76:ec:7d:4c:ba:fc:64:24:70:20:bd:2c:
d1:0e:86:bc:ad:14:5b:59:b6:aa:fc:fb:a2:15:cb:94:69:27:
6a:0c:98:7d:c8:2a:0b:90:4d:15:fb:25:db:ac:4f:25:86:f3:
c4:ea:dd:6c:9a:be:60:83:78:a9:e8:ef:3c:98:bf:0d:96:79:
78:e8:14:c2:fd:86:ce:a6:49:b0:c4:f6:00:32:8f:f8:b8:98:
ab:36:30:27:6d:18:ea:f1:df:58:ba:12:d5:bf:42:ce:d6:36:
7c:46:3e:4d:22:6e:87:2c:7b:cd:5d:27:ff:af:ee:48:85:4e:
e4:f8:cb:71:e7:8a:6b:4e:cf:7c:90:30:78:86:b1:ca:c5:59:
47:6e:10:a6:38:a7:c8:4c:a6:4a:32:80:b1:7b:85:f0:69:32:
3a:6a:2d:17:f0:37:28:b4:d5:87:24:0e:ff:db:74:7c:59:30:
87:52:8a:b5:4c:b0:92:a0:e5:3d:05:42:15:e1:06:1a:e7:81:
db:1c:13:18:1f:39:2a:50:cd:b3:ab:ac:6d:c9:de:5a:fd:72:
6c:ff:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:56:35 2026 by rpki-client