
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
File: i0hqzK8SpnqVaI6NEb1ljAQcElo.mft (raw, json)
Hash identifier: NYI4X4XU2FohVIyCH4ZWKr4ryWchyZTNyS+g8mI5wPE=
Subject key identifier: 30:56:67:D1:A0:41:85:EF:63:6C:AF:E2:4D:F7:1A:3D:9C:2C:5C:F9
Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
Manifest number: 0188
Signing time: Sun 11 Oct 2026 05:08:44 +0000
Manifest this update: Sun 11 Oct 2026 05:08:44 +0000
Manifest next update: Sun 18 Oct 2026 05:08:44 +0000
Files and hashes: 1: i0hqzK8SpnqVaI6NEb1ljAQcElo.crl (hash: QmZ/aaQ5fXYAPK2oYuJ2hbYiBmYnE7VXCXQr0/ZRA2I=)
2: F305F43270E711EF8573CF71C4F9AE02.roa (hash: /pgTpJCeELO0vx7ey0ylXFhJZdDNJrts1Zcttp5czrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 05:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA5B, serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Validity
Not Before: Oct 11 05:08:44 2026 GMT
Not After : Oct 18 05:08:44 2026 GMT
Subject: CN=6acb19dc-271e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:b1:c5:7f:ea:c3:c7:93:c4:8c:29:43:eb:
f0:c0:72:86:7e:c5:c7:ca:59:45:61:3d:b5:c0:f6:
d7:9c:0e:7e:f7:08:20:fc:f0:1c:2a:35:a3:e5:31:
68:05:cd:bc:20:d2:86:11:bb:ea:6d:79:80:3f:5b:
17:5a:a2:03:77:d6:99:01:28:21:7c:9d:22:b7:e8:
a1:e3:98:79:38:93:98:e3:93:60:9a:5d:2c:dd:9d:
5a:4c:37:36:22:23:63:20:e9:fd:83:24:f3:f6:a0:
c3:cb:15:9b:c1:32:22:02:fe:3d:b6:63:27:00:7e:
dd:c9:ed:c8:38:be:49:d6:41:ce:e7:50:05:3c:f6:
b3:a4:de:4b:ff:a3:fc:76:e1:42:d2:ad:da:54:1a:
d5:a8:58:13:b6:5e:d6:29:f3:62:2e:6d:37:f0:de:
68:84:3a:49:54:0a:ca:37:ee:06:b7:67:e2:06:80:
0d:c6:38:25:6d:a4:b0:1a:88:0a:bd:a7:b8:00:2e:
1d:dd:98:2d:af:6b:a2:45:3d:e0:91:1b:20:36:10:
70:94:c7:7a:c9:c0:a7:a1:c9:8c:d1:c5:ae:11:d5:
a1:bf:32:18:d9:66:d4:52:86:8a:c0:2c:24:a3:8b:
ab:11:2c:f6:04:56:5b:b2:8d:f5:cc:7f:34:98:a6:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:56:67:D1:A0:41:85:EF:63:6C:AF:E2:4D:F7:1A:3D:9C:2C:5C:F9
X509v3 Authority Key Identifier:
keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e8:10:10:10:46:4f:9e:b4:dc:1a:49:11:80:23:7c:f5:78:93:
2a:1f:a5:c6:24:66:df:fa:57:ae:8d:00:5e:1a:d4:43:79:3c:
00:d8:32:17:8c:ce:ad:ae:2b:43:a2:7d:1e:89:7f:07:52:3e:
85:90:5e:eb:4e:44:92:75:3b:c6:7b:c8:d4:4e:74:73:68:4e:
3f:6d:2f:5d:79:dc:2f:0b:dc:bf:34:35:7f:21:87:28:09:1d:
b1:e0:55:65:64:60:80:8f:e0:a0:4a:ce:0e:6d:0a:59:49:3c:
97:e1:90:b7:3e:eb:83:86:81:32:dc:bb:2b:ef:37:24:ab:d8:
06:65:d3:a8:5b:88:d2:9b:11:47:b4:b0:82:0e:52:94:d0:58:
33:0b:de:78:73:c4:82:6a:96:a3:87:fe:a6:c1:cc:ba:a4:fa:
d8:dc:0d:02:5a:89:82:f8:40:f4:14:ac:1d:0e:5a:84:8f:12:
8d:c7:68:f3:93:2a:30:3a:4b:7c:65:11:e6:31:9a:3d:77:e3:
69:51:0d:ed:53:c0:63:54:2e:f8:fd:3f:e2:cf:4c:fd:b7:6d:
44:6b:0e:a4:05:eb:83:f8:9d:d5:d0:fc:b7:e0:c7:eb:27:01:
5f:d1:14:64:77:20:58:ca:82:03:2c:98:83:27:d5:b8:5a:f5:
91:ce:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:12:49 2026 by rpki-client