
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json)
Hash identifier: AIhmCz++EfX6rs9r7eOwJzV0KVbUup//Vq254rNs1Ko=
Subject key identifier: F6:37:35:33:07:5C:63:E0:57:B7:FA:47:AD:BD:A3:FF:53:B5:FE:DE
Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
Manifest number: 0242
Signing time: Sat 19 Sep 2026 02:34:08 +0000
Manifest this update: Sat 19 Sep 2026 02:34:07 +0000
Manifest next update: Sat 26 Sep 2026 02:34:07 +0000
Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: m/X2w763yIVGtmUTcSTG4ow7gHK3icludNNAyr9SSPc=)
2: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: NAyqjXxHew3fTgSiTUVKkUKTCbweGmMoTZZqsBbKNGc=)
3: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: 6PnVAS1g7LHhPhFEbNomaCcQC2sh7domCqwSzK4ikhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Validity
Not Before: Sep 19 02:34:07 2026 GMT
Not After : Sep 26 02:34:07 2026 GMT
Subject: CN=6aadf4a0-29bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:f0:cb:f7:5e:8e:7e:06:71:5d:32:97:39:
7f:bf:3c:43:fe:9e:9b:2c:3a:0d:0e:99:ec:40:8e:
e2:1e:66:82:b1:e1:78:bb:b4:d4:05:2b:a5:66:cc:
19:f2:bb:7e:a3:9f:e0:4d:71:2b:ac:15:be:65:0e:
b7:e6:aa:df:7b:65:37:af:18:da:37:eb:9e:e6:e9:
c0:07:0d:98:e5:d7:bb:ae:37:55:91:81:80:e3:74:
1c:31:66:ad:1c:cb:a7:39:cb:cd:bb:02:e7:06:6a:
2c:f4:b0:3f:74:c1:47:86:7e:9c:77:a8:98:7e:73:
b1:f5:b0:c9:fb:e4:f5:f1:41:27:5f:b2:e0:37:6e:
c2:db:57:03:fe:70:2d:23:89:a7:fd:e2:ae:9b:92:
cb:59:aa:28:ba:5e:5f:8c:08:96:82:8d:fb:23:e3:
33:47:66:aa:48:79:0a:16:6b:b3:44:70:81:51:21:
99:5b:ee:7c:63:ac:c5:1e:ed:68:66:73:91:ac:c9:
d3:33:0c:21:f3:01:f6:67:7d:93:d1:79:b1:38:4d:
4e:2a:2a:df:e7:6c:fb:bf:3c:ba:b2:77:b9:ab:f1:
c6:87:d8:9b:55:e5:4f:26:d2:1a:50:95:4b:b4:dd:
74:8d:d4:1a:b9:b0:5d:85:bd:49:93:93:5c:bd:be:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:35:33:07:5C:63:E0:57:B7:FA:47:AD:BD:A3:FF:53:B5:FE:DE
X509v3 Authority Key Identifier:
keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ac:02:12:27:80:cb:fb:45:a7:2a:b2:7f:6a:46:af:b8:1b:
2b:a0:61:52:71:8e:ef:8d:1f:67:8f:51:cb:7a:d0:8f:1c:98:
91:8c:fb:c5:1e:11:e5:cf:fa:3d:92:5c:cc:01:8a:9a:83:15:
bc:ff:14:51:e6:ba:40:b7:d7:84:72:cb:b1:e0:3d:4b:d8:da:
60:9e:a6:4c:37:b1:02:c7:36:9d:f0:b8:fb:00:30:f5:39:36:
08:74:8f:d5:33:4c:ee:39:11:e5:86:39:3c:cd:ed:c6:af:b6:
40:0b:01:cc:85:1a:93:b7:b3:f2:c2:b9:6e:ae:54:53:45:a3:
eb:7c:bc:8c:cd:2f:3e:b0:be:4d:b9:ca:25:e6:a6:a5:f6:31:
52:8f:5b:0a:c8:13:16:85:76:94:be:d4:e1:5c:bb:79:9d:cd:
9a:60:8b:03:77:90:37:4b:d7:7d:8b:7f:62:ee:94:43:6c:b2:
5e:a2:65:72:a7:5e:fb:ee:b7:f1:b2:61:e7:77:f7:ef:f3:75:
3e:0b:26:4d:5d:e8:89:68:bd:07:70:74:27:10:d7:97:7d:c2:
5c:4d:f7:4c:8b:ee:16:ad:db:80:be:8f:d1:a2:b3:87:82:11:
3a:37:07:21:11:91:64:d2:06:72:d5:e0:8e:ed:99:2a:5e:85:
d7:31:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:59:37 2026 by rpki-client