
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier: tVfxP94lJ01GcGI2nXcYITDYf2f9E/QVFnuFyAL9K/4=
Subject key identifier: 60:E1:09:DF:77:7B:24:DD:51:2D:88:EE:E8:5F:58:B4:B7:96:EC:1E
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 1508
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number: 1497
Signing time: Tue 22 Sep 2026 16:47:33 +0000
Manifest this update: Tue 22 Sep 2026 16:47:32 +0000
Manifest next update: Tue 29 Sep 2026 16:47:32 +0000
Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: 9nNVZbM0T5P+N9zj22Zx07JEiVIlIJfwUj2WYpGHoVY=)
2: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: XTo7hzo+YS5Mx8+cYSyBvlAGKzskb8sqYpNZv6UbZw0=)
3: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: wFgqxtjBGSnNz0V3JbbMZbJffl0S6xGyyA4P8cQ+F5Q=)
4: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: xKENUn13Ef2bP0B62DPkEXchyNaPtBjxu7QmsrqxB9E=)
5: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: RY4kpnbvPpjFeHSCdD9BLyLv0qAmm+duLbNyMu+5+gA=)
6: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wx0Bxj5s6AtaxYxKTNAOFbXAlN9uVO+TgC5goivQpV0=)
7: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: 35M/vR3gb3Yiy8oN9cgMH76bee2iK7+OfBfGhUwH558=)
8: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: 3JrsTAYAGHynUAu7FXh7i6mKx20TisYQ8rxOPDDqL30=)
9: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: JVqWfxQ3Imk/tHtB1lFlgnw7x7J3sXEP1K4IX9cY6Sk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5384 (0x1508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Sep 22 16:47:32 2026 GMT
Not After : Sep 29 16:47:32 2026 GMT
Subject: CN=6ab2b124-7195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:65:06:87:8e:61:08:1b:23:7e:6d:0a:c1:
c5:f3:c4:4f:2d:41:45:93:06:60:73:8c:9c:24:cf:
a4:61:2a:06:77:1b:91:f4:c1:be:8d:b8:24:91:00:
ec:f0:ff:7f:22:ac:e1:f5:4c:b7:c3:c6:a3:95:38:
bf:86:d1:26:09:3d:1d:52:6c:43:f9:55:e8:13:20:
4a:ca:fd:1b:89:e4:3a:81:37:b2:a8:35:fd:71:4d:
50:bf:e2:50:e2:4b:78:d2:88:ba:50:1e:37:5e:a0:
38:84:39:4d:d1:31:aa:ea:7e:57:c3:5d:5a:56:12:
7f:4a:ad:af:68:23:6f:20:4e:38:88:2c:17:ce:53:
66:95:5a:91:1e:d8:fe:45:af:c4:d8:00:a3:24:ea:
d8:7f:ee:8b:34:da:08:87:89:60:d3:d7:5e:fb:38:
6e:57:55:75:aa:30:2a:61:a1:43:e5:c6:2f:0e:08:
16:65:aa:c0:e3:45:ee:ee:9f:da:56:1c:fd:f2:51:
0c:8c:64:86:33:cf:3b:fb:3e:73:e2:f6:29:97:38:
03:6b:f0:63:a0:66:e7:e1:30:4d:9d:4d:09:b9:15:
83:96:2e:62:12:aa:73:ce:34:e1:4f:d9:cb:bd:6e:
71:7d:cd:c5:30:94:a4:21:30:82:33:bc:f8:5e:4e:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:09:DF:77:7B:24:DD:51:2D:88:EE:E8:5F:58:B4:B7:96:EC:1E
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:fc:e0:71:b2:8d:a3:77:5f:4b:5c:c0:97:7b:c7:7f:6b:79:
4e:0e:6a:fa:db:35:a0:2d:8e:b0:1e:49:bd:16:09:c6:ee:aa:
65:cc:c9:55:d2:90:0c:a6:3a:a5:fa:ec:5e:2d:5c:82:a7:56:
e3:49:6b:e8:ea:b6:29:a6:86:0c:21:49:87:ee:85:8c:cb:63:
e3:68:5e:42:fc:e9:3e:ac:2d:68:5b:3c:fa:4a:a9:0e:33:36:
3f:5c:1a:db:94:aa:29:70:23:a1:92:47:a7:3d:0a:ba:e8:78:
cf:1c:70:24:a5:51:81:ae:73:86:22:68:0a:a0:11:61:76:d9:
c4:a4:31:f6:1d:50:43:24:b0:7d:b2:e7:36:72:36:c8:87:ff:
1d:c6:8d:58:cf:61:20:e3:54:96:c3:7a:c3:95:00:23:50:4e:
3b:8e:1b:f1:54:41:60:d7:da:98:50:2a:33:f4:51:1f:7f:aa:
dd:ac:9f:ff:7b:90:78:74:b7:18:09:2f:6c:22:b8:91:56:a3:
37:8f:92:20:30:3d:25:05:e9:48:e5:6f:68:0d:d0:bc:a7:c5:
d8:10:29:20:33:fd:2b:d8:02:e3:a4:2d:78:cb:d3:45:f0:b0:
88:72:88:8a:6b:73:60:79:cc:f1:76:31:d6:c8:b8:b6:58:51:
af:b4:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:39:03 2026 by rpki-client