
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft
File: 1vZclkuOj1C0u4fpTxStruksJyw.mft (raw, json)
Hash identifier: xUDF4IFQRzJ1CSSEusppuvBKvphxNn6VsO+TCm5kU5c=
Subject key identifier: FF:98:4A:1D:50:7B:E0:96:7D:86:9A:0A:AA:56:3A:EA:08:12:DF:08
Authority key identifier: D6:F6:5C:96:4B:8E:8F:50:B4:BB:87:E9:4F:14:AD:AE:E9:2C:27:2C
Certificate issuer: /CN=A91F5183/serialNumber=D6F65C964B8E8F50B4BB87E94F14ADAEE92C272C
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 06:55:12 +0000
Manifest this update: Fri 25 Sep 2026 06:55:12 +0000
Manifest next update: Fri 02 Oct 2026 06:55:12 +0000
Files and hashes: 1: 1vZclkuOj1C0u4fpTxStruksJyw.crl (hash: tT/PynWEWFGeOwjVi4tCwKxZbKKgKVkDizVzJ5N/nXY=)
2: 1DE4BA468E9011F08491DD13C4F9AE02.roa (hash: tcH2rA8JsGBD1HEVBiG0Z7AYEFoy9FoXJ9VwdK8MFvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.crl
rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5183, serialNumber=D6F65C964B8E8F50B4BB87E94F14ADAEE92C272C
Validity
Not Before: Sep 25 06:55:12 2026 GMT
Not After : Oct 2 06:55:12 2026 GMT
Subject: CN=6ab61ad0-2dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:20:3e:c1:42:20:4b:fd:14:49:19:17:df:
d9:26:5a:9c:ca:76:94:91:77:c1:96:4c:ef:61:42:
4f:57:83:ff:8b:62:00:3d:10:da:66:b6:64:7d:10:
50:07:cb:c3:f9:b4:3f:c4:91:cd:d9:bd:6a:32:5a:
e2:39:ff:68:49:db:72:b5:67:d9:8c:c3:47:2f:37:
e9:fd:4f:eb:eb:be:d6:ea:94:43:d5:23:08:d9:54:
36:87:d8:00:17:e0:f8:f1:e0:ce:62:f8:13:f3:e1:
6f:dc:f5:24:fd:7a:21:d2:02:44:46:b9:38:3e:0b:
1b:1a:f7:d2:20:6a:28:12:73:45:f3:f5:d9:c9:54:
87:2a:c8:29:41:68:fd:a3:c8:cc:40:cb:67:03:2b:
ef:83:ff:31:8f:ff:73:0f:00:b1:25:f5:b1:cf:5e:
b8:0e:1a:a7:42:c3:ba:cd:31:a1:e4:53:17:c4:b8:
68:6f:a4:5a:b7:cc:55:43:b9:7a:dd:a9:12:28:7c:
f6:19:aa:e0:ad:15:01:1e:b8:db:85:69:67:0b:d0:
c3:bc:90:b2:df:ee:bf:93:47:f6:ae:af:1f:f4:cf:
ae:62:f4:c8:cd:41:af:93:84:12:d8:55:e7:91:c9:
5c:36:c5:fb:f5:cf:39:e9:5e:61:cf:92:70:ff:17:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:4A:1D:50:7B:E0:96:7D:86:9A:0A:AA:56:3A:EA:08:12:DF:08
X509v3 Authority Key Identifier:
keyid:D6:F6:5C:96:4B:8E:8F:50:B4:BB:87:E9:4F:14:AD:AE:E9:2C:27:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vZclkuOj1C0u4fpTxStruksJyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5183/A4AF2CB08E8F11F0B07D9E0FC4F9AE02/1vZclkuOj1C0u4fpTxStruksJyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:11:8b:1a:ec:2b:3b:96:5c:95:e4:1c:27:34:eb:21:f9:5b:
30:ff:99:31:65:31:df:96:d9:1f:67:b5:60:82:f5:88:c6:29:
9c:d8:6a:04:45:e5:42:2c:25:e3:56:06:76:54:08:b3:2b:70:
3b:3d:7e:2d:d8:fa:67:7a:a2:9a:60:75:61:31:f5:72:bb:ae:
04:93:ad:23:3c:d0:2a:85:8b:de:5f:71:4c:fa:7e:c9:34:c4:
fc:95:f5:16:fd:f6:04:c5:05:a5:40:9b:e0:4b:b5:28:f8:33:
3b:ed:80:a9:2a:97:c7:bf:9f:5b:0f:d8:b0:25:54:89:11:1c:
61:8f:d0:da:30:6a:98:b5:4f:aa:2d:67:dc:04:a3:3b:aa:6c:
aa:c8:1a:5d:10:85:65:da:cf:10:7f:03:0b:84:a2:de:e2:a2:
22:b5:1e:43:a9:2d:2c:a9:1b:9e:b7:38:8c:5b:39:ed:8f:4b:
1c:ab:8c:0c:21:ba:c4:fa:3f:d2:52:33:cc:01:55:a9:43:ea:
f7:36:a6:9d:82:68:e8:e0:f6:31:49:30:75:68:65:8f:73:ff:
b1:e7:18:9c:4c:98:a1:48:3e:75:92:9b:39:6e:ba:b0:93:27:
07:59:38:38:ad:a3:6d:c5:af:26:9d:81:8b:a5:0f:49:bd:ec:
85:23:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:17:52 2026 by rpki-client