
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json)
Hash identifier: nuh+zpxq09E9tfJsyZhtrowN2eKSpaYX0eWvvKZzsdY=
Subject key identifier: 09:B5:84:3F:7D:43:71:C6:8F:6F:96:8E:D5:48:8C:B2:4F:0B:A8:E9
Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Certificate serial: 23AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
Manifest number: 2399
Signing time: Mon 28 Sep 2026 15:50:26 +0000
Manifest this update: Mon 28 Sep 2026 15:50:25 +0000
Manifest next update: Mon 05 Oct 2026 15:50:25 +0000
Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: w7I0sx90CX/CM2Abfbz7QHIVuUwPSk/1ruL06uoxu84=)
2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: s8TTg9P3l8A2JinlhgnrgySiNnwBKzYcLgd2CwnP9lU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 15:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9132 (0x23ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Validity
Not Before: Sep 28 15:50:25 2026 GMT
Not After : Oct 5 15:50:25 2026 GMT
Subject: CN=6aba8cc1-1d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0b:36:a4:a3:bb:5f:37:14:e6:ed:83:4f:c7:
be:94:a2:9f:2c:ad:20:7a:bf:83:5a:3c:80:8a:58:
1f:99:56:23:0c:54:3a:dc:92:ae:5d:cf:f6:44:e1:
ff:06:88:b8:21:21:df:83:57:f5:ee:45:c6:fd:45:
7a:5e:45:7c:32:dd:38:7e:26:ba:d0:27:bb:df:1d:
78:22:ac:b7:74:48:03:1f:cb:90:28:15:bf:62:65:
b3:eb:69:46:98:07:47:b0:4d:53:ae:3c:8a:06:49:
64:f7:23:d6:dc:af:23:72:94:b5:9a:83:66:8e:8c:
d1:ee:f5:40:b1:19:b3:ea:f5:d9:75:83:3a:4d:bf:
26:5c:7d:5e:04:af:6c:77:f7:21:09:27:c8:27:3d:
15:12:99:ab:da:0e:72:4b:07:b5:1e:05:89:1e:d9:
d7:5f:d0:1e:a4:c8:a6:b7:0d:6b:fd:84:0f:58:99:
dc:f2:b1:f8:0a:31:31:86:23:20:40:f3:ab:30:58:
52:77:cc:96:bb:4c:06:fd:f0:c2:47:9a:5a:af:a2:
ab:2f:99:92:58:e6:25:0b:71:41:6f:a6:95:7b:78:
d0:bf:78:69:bd:09:2e:4d:7c:d9:2b:2c:be:f4:65:
39:47:03:1b:1e:0d:07:fd:93:4c:92:3c:08:f2:80:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B5:84:3F:7D:43:71:C6:8F:6F:96:8E:D5:48:8C:B2:4F:0B:A8:E9
X509v3 Authority Key Identifier:
keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3a:61:ae:66:dc:dd:6a:70:64:6a:f8:02:38:47:f2:56:d5:
0c:20:66:a1:d3:d9:b9:7c:e2:32:29:06:4d:2e:3c:a9:43:1d:
4e:30:64:52:89:77:cb:0a:58:ab:0f:43:df:9b:96:42:80:fd:
fe:46:e1:a2:c2:49:a1:fb:7d:8c:6f:9b:ea:9f:86:fd:84:8e:
b9:9d:3e:ae:23:fc:38:10:e4:01:d7:71:6a:b0:2a:fb:4e:8a:
93:13:46:09:ed:2b:fa:c4:a9:4e:7d:a0:0e:a0:16:94:cd:9e:
ea:00:cd:d8:93:b1:94:19:89:a4:64:07:c2:98:56:53:43:6e:
76:05:95:ad:a2:a9:24:90:60:90:d8:02:6c:5f:71:28:6a:0a:
22:1b:67:20:6c:38:81:4c:e6:60:87:7b:bf:bf:a4:e6:9e:30:
03:ea:77:f3:b8:06:7a:38:d4:a7:bd:63:f5:64:df:c0:3f:fd:
8d:19:a4:9e:4f:f2:cb:64:bb:51:1f:1d:df:3d:86:a6:0e:dd:
e7:f2:ef:f8:f9:98:a8:c1:b7:3a:b3:68:60:81:47:7f:4a:57:
ac:30:b8:e7:4e:71:87:27:1d:ae:3b:5b:80:37:e7:78:67:6e:
4b:82:df:0c:81:17:56:1c:fa:b3:87:9b:f5:f0:67:d7:eb:2e:
f6:de:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:11:57 2026 by rpki-client