
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json)
Hash identifier: upnV/sA23YBZJ1o+B9GGqm+8wJPjX0KGgZLUxGzet7s=
Subject key identifier: EC:36:87:BE:4F:F0:27:D4:33:F7:EB:87:C0:A2:95:0E:64:5E:2E:D1
Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
Manifest number: 0155
Signing time: Wed 23 Sep 2026 05:01:07 +0000
Manifest this update: Wed 23 Sep 2026 05:01:06 +0000
Manifest next update: Wed 30 Sep 2026 05:01:06 +0000
Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: XW/43yCA3zZApY3E6Ve/m1LOMNlwup0RM9csZzbKsXo=)
2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: Z33Oa7MXRQs8Va13un2oigc2yJEQMc7nxUU5xcFCzXI=)
3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: 5akZ6mHQq1ksNbd/DS/b4qeyRo6TcvJuP9SLF4pNYTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Validity
Not Before: Sep 23 05:01:06 2026 GMT
Not After : Sep 30 05:01:06 2026 GMT
Subject: CN=6ab35d13-5f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:96:36:a8:64:6d:b6:4a:f6:71:5c:ef:32:
18:aa:b1:9c:82:0c:67:de:4e:00:0a:d5:fe:59:50:
44:5a:46:1e:d0:fb:83:15:ed:8d:e7:dc:b6:43:e9:
b4:34:f6:d5:d2:df:bc:d6:fb:a8:09:53:76:ff:80:
ee:78:6f:75:c2:63:33:16:65:05:c7:a2:4b:6e:3c:
41:3f:b8:b1:d3:5d:74:5d:d2:64:df:ac:ef:61:87:
7b:44:ec:d2:d2:d7:d8:63:7a:6f:2e:90:a9:7d:50:
2b:f8:24:71:9b:c8:6a:71:5e:42:ed:e0:b2:6f:27:
b9:45:e1:09:4d:8a:9c:17:ad:a3:5f:5e:d7:05:dc:
03:15:3a:75:68:6e:dd:0e:3b:1d:35:94:d9:a1:5a:
56:02:5d:d2:c3:f9:a7:a8:0c:84:dc:ec:5e:da:11:
d4:03:16:42:f8:17:e4:da:7d:c4:76:8f:8a:d9:5b:
f2:c9:bd:4d:78:f0:63:f7:b6:42:3c:a3:e3:70:59:
55:88:37:8e:5e:53:d5:0c:95:9c:e6:f5:3c:1c:0d:
b4:9f:75:3d:3d:5b:09:4e:a4:ff:44:a7:64:c1:b6:
80:6d:b9:39:e7:27:4e:dc:0a:05:2f:ea:e6:84:c9:
5d:8f:e2:bd:69:13:b7:d7:76:20:b8:a7:4d:b0:a1:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:87:BE:4F:F0:27:D4:33:F7:EB:87:C0:A2:95:0E:64:5E:2E:D1
X509v3 Authority Key Identifier:
keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:8d:c1:16:4b:ba:aa:52:b9:8e:a7:ea:73:ed:57:ba:29:f0:
62:bc:8f:d3:ab:c3:a8:c1:a4:1e:ea:a9:09:bf:99:da:f2:5e:
ea:16:c9:d8:cf:54:72:0f:58:34:9d:64:1b:13:46:7c:10:c8:
97:1c:74:ce:43:82:5f:c4:6d:78:5b:73:b9:98:ec:7f:7d:b9:
fa:35:85:71:72:77:0e:62:a7:bd:1e:bb:f7:8a:a9:aa:26:76:
0e:94:7d:03:ea:96:bb:7f:70:97:50:d6:74:9b:4d:75:ed:1b:
cf:f7:82:de:f6:8a:35:e9:f3:14:7a:98:ff:61:5d:17:9a:62:
e9:a9:03:b6:77:bf:64:e6:84:a3:a3:ad:65:22:db:c0:2b:71:
67:78:0e:15:37:36:7e:e2:ca:82:64:89:12:f5:47:ec:9c:8f:
cb:1c:bd:ca:10:6f:04:35:a7:42:3e:45:2a:d9:7a:f8:4d:c5:
db:10:a0:96:21:9d:c2:16:c3:7a:d3:7d:49:15:e0:49:b4:83:
28:53:e9:b1:3c:c3:3f:18:3a:6a:0b:2a:7b:8d:02:fc:d5:56:
64:0b:2e:fd:ee:d7:8e:24:c1:ba:c4:88:4a:fb:72:cc:aa:60:
3e:d8:12:2f:15:89:4a:85:db:62:f5:cd:36:d6:ce:81:93:e9:
53:a1:78:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:02:32 2026 by rpki-client