
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json)
Hash identifier: Ui5n1881/dhfzspQsobmI6TAalANwot2rj43lncJnSA=
Subject key identifier: CB:97:E2:E9:C5:EC:95:97:52:A6:50:34:00:AD:D6:A8:BF:84:46:C5
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial: 07AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
Manifest number: 077D
Signing time: Sun 20 Sep 2026 21:36:07 +0000
Manifest this update: Sun 20 Sep 2026 21:36:07 +0000
Manifest next update: Sun 27 Sep 2026 21:36:07 +0000
Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: aU5q3qR2x2aeeQIMZt/ipshxULSbhMW7mcJ0bzHfr7A=)
2: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hmmC+8svUfRjvfcFg1OnJ8MEGlC71NOJ13MdkwrsIP4=)
3: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /uXsRHtQ85wtkXc8gIZyNG8uYla6OZlWtyeyihZtW9Q=)
4: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: 94GzLbfU9wvrOoMqnHUdOKE75uiqX+97F7gLUxAyt+c=)
5: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: imktHZ192rrh9lhy/38oX7N5C2b0tCeJYpVYjXO+0oM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Validity
Not Before: Sep 20 21:36:07 2026 GMT
Not After : Sep 27 21:36:07 2026 GMT
Subject: CN=6ab051c7-1524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:6e:a1:bf:29:f9:12:23:e1:da:65:81:f9:
84:da:85:26:de:13:86:4b:e0:cf:c4:6f:62:e4:25:
3c:1f:5c:9c:ad:03:9b:7a:2c:41:29:9e:e1:1d:0f:
64:8e:fd:61:d3:36:34:a7:f6:1c:75:3e:ce:78:e5:
ae:06:7f:80:c8:61:db:95:7c:f4:92:f3:63:17:56:
ec:9a:a9:f5:6c:fd:46:d8:e8:97:9e:d8:7c:ea:a3:
df:34:7f:92:5b:08:a5:f8:e3:e5:55:3b:91:a0:93:
55:2f:7e:a8:93:8b:a2:4f:95:f1:6a:0b:28:b8:f8:
59:15:63:10:53:ff:ba:8e:fe:28:d6:d0:f3:4f:82:
6d:d8:0b:90:e1:e9:ca:d8:e0:9a:d3:8c:79:5d:0f:
1b:9b:ca:58:7a:40:e2:68:35:b3:80:d5:f1:69:ad:
f1:ed:77:03:f7:ad:00:4e:aa:fc:67:96:13:88:b2:
8b:20:40:eb:a3:19:0c:8b:c3:46:2e:2d:5a:b9:5d:
a3:e4:4a:f0:02:60:cd:7a:96:d7:26:78:4e:75:5c:
fc:50:f0:7a:23:29:be:08:d0:d7:77:df:72:7a:14:
0b:33:95:97:17:c6:64:d9:a5:aa:a9:fc:dc:85:ce:
53:b9:c3:46:b0:ca:86:ca:b1:fb:74:6a:a5:6c:e2:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:97:E2:E9:C5:EC:95:97:52:A6:50:34:00:AD:D6:A8:BF:84:46:C5
X509v3 Authority Key Identifier:
keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:18:7d:40:a3:89:71:c3:90:08:70:13:71:c2:cc:de:bf:cb:
ba:d0:d9:48:43:64:c9:a3:32:e9:f7:ee:99:89:dc:bf:4c:11:
de:e5:1c:ea:78:9a:2e:92:c0:e5:f2:2d:59:54:8d:77:84:dc:
f3:b1:26:72:2e:2e:48:c5:95:20:cb:5b:4e:ed:c9:ec:05:cd:
a4:bd:35:d4:45:34:45:cb:05:11:4c:fc:bb:28:5f:fe:2f:fb:
cb:c3:ac:ca:5e:cc:15:7f:5a:28:31:4c:e3:28:f3:9e:67:5f:
90:66:de:71:4d:0d:97:fe:a7:4d:62:f7:5b:a5:50:33:b2:56:
70:ac:9b:19:41:7a:09:b9:8e:74:3d:a3:bd:0f:e3:41:d2:4e:
a1:37:f4:92:02:c9:a1:d8:c4:0c:87:7d:3e:fe:09:25:5d:d2:
94:9e:06:87:4a:19:e4:c5:9b:d7:6e:61:75:b4:9e:09:1c:1f:
b8:67:90:c9:57:20:c6:9c:d4:be:a8:26:b9:1c:14:8f:0b:ba:
e1:e3:43:20:6b:0d:61:77:7c:80:8c:3a:ef:6b:8e:25:34:e5:
0c:f0:f9:f4:13:80:cb:0f:c7:74:d4:53:69:5d:a6:38:86:83:
be:0d:b7:72:9d:4b:55:17:44:63:d5:7b:d0:8e:49:33:e0:98:
79:fd:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:32:27 2026 by rpki-client