
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
File: Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft (raw, json)
Hash identifier: w7gT9wKDbgbcgDr4EB1DEeiKcbSdSypVpLNPUmYSA7c=
Subject key identifier: 6D:5F:36:3A:57:75:82:12:DB:CE:64:FC:BE:A6:58:A6:69:AD:BB:CF
Authority key identifier: 02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
Certificate issuer: /CN=A91FC3D0/serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
Manifest number: 4A
Signing time: Mon 21 Sep 2026 08:28:39 +0000
Manifest this update: Mon 21 Sep 2026 08:28:39 +0000
Manifest next update: Mon 28 Sep 2026 08:28:39 +0000
Files and hashes: 1: Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl (hash: EmpCrKL9lDRyQAsQ08itUDqLBmC+fUQOY6rzass9l/A=)
2: 653B4FA87EAA11F1B173303066A30FBC.roa (hash: EFkhWXtgulJBn3A7ClQDPUCqLh2IZisKv33Z5xFDjxE=)
3: 65D380F27EAA11F1B173303066A30FBC.roa (hash: 5gfdpSY7JYQ5F3wG8OEDwn4p3/ZZWjHNEFO05arQYNo=)
4: 763DF47E5F3611F192539E378047A888.roa (hash: Q5As8jeHYqHhZ7fSSmextS8z5wVQANqrRtBT9kjNokg=)
5: 64B446CA7EAA11F1B173303066A30FBC.roa (hash: tb/s6gLIXaYTsezXokt2OrwPKppQtIENbSawKe+uw8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl
rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC3D0, serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
Validity
Not Before: Sep 21 08:28:39 2026 GMT
Not After : Sep 28 08:28:39 2026 GMT
Subject: CN=6ab0eab7-51f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:de:85:9d:74:91:cc:9a:a7:36:16:ba:cb:
14:1f:7b:4d:7c:bd:b3:6e:5f:3c:78:aa:2e:16:0c:
5e:3f:de:64:7a:72:01:62:06:b5:2e:79:25:f7:1d:
60:5a:6f:d9:56:51:fd:c1:d2:44:89:a4:45:50:bd:
07:c2:8c:e8:dc:a4:09:16:b6:21:eb:00:02:a2:a0:
c1:da:62:1c:68:9f:1a:c6:9b:f4:50:d2:59:6b:1f:
d9:4f:ff:d4:9f:bc:90:50:31:04:ac:ec:c3:d9:7d:
b2:3b:02:77:c7:dc:1f:b6:74:ec:05:e8:14:8a:32:
51:a2:e4:ed:e7:95:30:41:6e:c4:9b:cf:71:e1:f9:
39:ad:26:fd:35:cb:51:e7:d6:e4:71:7d:dd:2b:b3:
41:a6:7d:2b:9e:73:fa:80:61:c5:26:ee:71:4e:ed:
c6:8f:13:fc:16:d7:20:21:10:b1:16:57:10:c3:2f:
28:ed:cb:32:66:8f:93:11:f0:95:88:7b:4c:83:fa:
8f:cc:f6:d9:65:74:16:96:88:ee:5c:c5:70:cf:3d:
17:44:9a:5b:d4:b6:95:1a:cf:7a:19:0d:74:1e:4e:
f4:cb:35:84:ac:4a:3f:b9:ae:94:a2:2c:b4:31:34:
77:a1:19:56:32:37:23:19:26:1e:31:53:1c:ac:05:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5F:36:3A:57:75:82:12:DB:CE:64:FC:BE:A6:58:A6:69:AD:BB:CF
X509v3 Authority Key Identifier:
keyid:02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:7d:42:c3:e9:ca:93:b9:7c:cc:ea:8b:c8:17:e5:50:3e:fe:
6a:a7:eb:c3:d7:6a:ad:3e:70:3f:56:dd:bc:8a:ab:de:1c:2d:
ca:bb:29:a5:1e:c2:7d:b4:35:f9:5b:9b:7d:6e:de:e0:56:d7:
d5:52:ca:91:ef:60:aa:5d:e2:35:99:7c:3d:00:07:c5:8d:8b:
59:31:a9:ad:7d:d3:13:ae:3d:da:47:95:35:75:00:1b:c7:1c:
1c:0f:b6:25:cd:75:d5:09:4e:c8:4c:c2:6b:37:ba:dd:e2:ba:
13:ea:ba:76:39:b8:a1:55:99:71:da:c5:3f:3c:75:ba:dd:54:
57:65:43:8b:64:6a:ac:e8:af:f0:2a:9e:e6:14:f9:51:01:42:
a6:0e:1c:80:57:80:03:56:fb:8d:da:a5:e2:5e:ca:53:4d:ee:
97:5a:c3:09:8b:08:88:16:d1:d8:22:51:3d:aa:a2:db:ff:eb:
ae:02:0e:1a:69:50:ab:c4:40:4f:a6:4a:3f:7c:31:c0:41:75:
ee:a8:e0:f9:cc:bd:6a:67:42:6f:ea:22:6d:db:ef:ad:d6:df:
f2:ab:f4:1c:1b:4f:7d:e3:c3:22:3b:00:d0:c2:0e:64:32:a0:
60:c3:e7:e7:db:72:8a:4d:84:0b:f5:31:35:1f:a9:f3:96:56:
b5:79:4d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:08:29 2026 by rpki-client