
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json)
Hash identifier: hzw4Nk+GaM8QFHn/h7Alb8VvE5ff9MDmMbCpGYbdsEU=
Subject key identifier: D5:4A:AA:67:E9:36:D9:6F:5A:9E:E8:1E:E8:7E:57:97:44:8B:8E:B0
Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
Manifest number: 0266
Signing time: Wed 23 Sep 2026 02:00:37 +0000
Manifest this update: Wed 23 Sep 2026 02:00:37 +0000
Manifest next update: Wed 30 Sep 2026 02:00:37 +0000
Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: NlRGDbAaFgbzfeLLZVPISQtrFQTneYxWy4NY0Ym6Iv4=)
2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: k50pyswPVAJjF83tcl2ttbv+lV78Nbi1RduGBQNNES0=)
3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: HkA6U1wFsTKTzUQHdDn6LGozzBTZRy33eQX4h5sxnuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Validity
Not Before: Sep 23 02:00:37 2026 GMT
Not After : Sep 30 02:00:37 2026 GMT
Subject: CN=6ab332c5-3830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:b5:f5:19:82:f1:50:ad:42:d6:b5:90:3b:
87:6b:43:85:5c:b0:3b:c2:22:5e:7a:8b:aa:46:61:
42:40:8b:76:15:92:34:5f:74:13:b3:16:29:b6:e7:
5f:8a:93:2b:8b:1f:f2:ba:6b:cf:54:bf:38:98:3b:
be:5d:37:af:d9:67:66:c1:a9:26:99:1c:f4:52:eb:
7a:4e:d3:e6:3b:a0:c6:0b:28:f2:d0:55:7a:13:2a:
ef:aa:65:43:35:17:81:e4:7b:11:53:ca:c4:65:19:
e5:50:ae:ee:13:69:ff:b4:12:37:0e:53:c3:ef:c4:
30:91:f5:73:1d:71:47:87:a4:4a:3b:db:81:db:8e:
90:dd:15:2e:44:55:18:cd:98:d2:00:bd:9f:fe:fe:
d7:51:53:b9:3b:fc:4a:e8:a7:18:b2:67:a0:fe:72:
eb:dd:0c:6d:7f:33:9d:c8:45:b9:80:63:51:68:21:
80:99:cd:b3:02:87:94:48:04:41:9a:49:1b:db:3e:
8f:83:52:ae:2c:ea:d4:eb:c6:80:eb:92:6c:0e:b7:
da:26:95:a9:1c:c9:bb:fb:44:13:a1:9f:94:17:93:
fb:12:52:d0:8f:4e:22:0e:be:2c:26:05:8d:6f:41:
af:0f:3e:54:64:e0:6d:f9:a9:df:b0:80:e1:3c:96:
ba:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:AA:67:E9:36:D9:6F:5A:9E:E8:1E:E8:7E:57:97:44:8B:8E:B0
X509v3 Authority Key Identifier:
keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:a1:52:66:32:e7:4d:ac:74:01:81:c0:5b:13:4c:9b:ed:fa:
0c:6d:1f:41:ea:27:77:ad:7f:22:87:43:36:e4:66:92:9e:b1:
77:15:d1:0c:76:b3:7a:43:16:dc:10:13:4a:99:94:92:6a:94:
b3:b8:14:71:90:69:10:bd:9c:d1:95:a3:10:5c:a3:4a:13:5b:
8f:fe:7b:5b:65:de:e8:76:f0:cc:48:80:f2:ff:f4:e9:fc:9b:
9c:b7:34:c8:4a:d2:e1:4e:69:65:5d:13:34:a8:85:99:e9:07:
c7:18:9d:63:4b:35:49:24:7e:4f:db:59:a0:75:f3:44:fc:d4:
ea:6c:0a:43:9c:df:20:bc:c1:be:ea:2d:1d:9b:ba:f2:35:f8:
78:41:fa:66:0c:84:00:52:28:1d:bf:c6:24:d7:53:96:f6:7b:
23:12:f0:3c:c5:1f:7f:63:b4:82:a0:aa:ee:14:9e:a4:7a:69:
e8:e0:39:c8:54:4c:a9:c5:73:e5:c8:ae:98:be:ec:36:a1:88:
21:59:5e:24:bd:8a:18:46:3f:24:4b:97:db:5e:1e:a3:2b:28:
2f:04:af:54:2e:e8:7a:d8:c0:d5:e2:8a:be:a6:5d:50:66:25:
a0:48:f4:db:12:21:8a:a1:7f:00:0d:26:ec:6e:4d:88:61:2e:
3e:46:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:17:17 2026 by rpki-client