
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json)
Hash identifier: 4TORpq2qELTEEXkYVK02VCrcWPa1v4MrUmTLodbi36E=
Subject key identifier: 7E:16:D5:34:95:B0:86:E4:75:C8:59:E4:C8:B8:25:DD:83:96:18:DD
Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Certificate serial: 0756
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
Manifest number: 072B
Signing time: Wed 28 Oct 2026 22:20:32 +0000
Manifest this update: Wed 28 Oct 2026 22:20:32 +0000
Manifest next update: Wed 04 Nov 2026 22:20:32 +0000
Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: lFtuYtnUVsS0toIajicBI5jE1v21Bof+xSrUQ62mYnU=)
2: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: S0fZW2dgUJeGAm9ytfhirRt94xu3NkvG3zNOfvuS6tg=)
3: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: w3+aZlQ2RBmGjxz4SlkYvG+q8BQVGDzpFhvPTfzKDVY=)
4: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: Wf0tkeHPs4IB8mfGOri8fMJK0QaqR5URQJU73Sfpr+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 22:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878 (0x756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Validity
Not Before: Oct 28 22:20:32 2026 GMT
Not After : Nov 4 22:20:32 2026 GMT
Subject: CN=6ae27530-ecd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:ce:a2:ec:19:05:a3:b4:3a:e6:c8:7a:26:
d2:c0:15:fb:dd:aa:c5:66:d8:65:b6:7d:09:e3:29:
78:ea:19:45:bc:9c:96:95:a5:d5:55:d7:8e:57:18:
9b:77:c0:6b:79:85:48:04:51:94:b0:df:94:42:58:
76:95:ef:55:1f:c9:5a:bd:3a:f7:69:02:7c:0f:cc:
12:7a:e5:7e:8d:38:1a:d6:a2:cb:bd:09:87:c1:9b:
6e:bc:6a:02:9b:43:f1:b1:07:8d:7f:b8:86:6c:df:
8a:7b:91:1c:df:72:4f:36:6b:3b:4f:fd:74:d1:bf:
bd:f3:c4:04:53:88:cd:8b:ef:a9:c7:1b:a3:69:2a:
c9:1f:d7:30:e2:e0:4b:70:6b:1a:1a:dd:ae:92:de:
53:ee:ee:77:68:5a:9d:eb:79:a8:22:7b:16:18:cc:
55:75:a1:a8:80:8c:c1:4e:6b:16:13:36:9e:ef:70:
21:0c:e6:24:04:bd:ff:8d:fb:01:31:6f:b9:00:53:
eb:e6:ec:da:32:47:3e:9d:fb:a2:4b:7f:3d:61:49:
92:d7:14:d5:07:b7:1a:82:00:f8:91:09:98:1e:e0:
38:25:c4:12:3b:7b:1e:66:71:6f:41:8b:4c:0d:5c:
6b:fb:7b:6e:7e:1f:9f:dd:02:18:ae:40:58:1d:9b:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:16:D5:34:95:B0:86:E4:75:C8:59:E4:C8:B8:25:DD:83:96:18:DD
X509v3 Authority Key Identifier:
keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:bc:13:d1:ba:52:41:51:2c:8c:9e:f8:b0:d9:2b:90:f9:b7:
db:f4:cf:18:0b:01:4b:e3:c7:c5:f1:22:46:bb:b8:62:18:24:
02:67:48:0b:f2:b5:0e:a3:e1:1b:8f:41:8d:e2:79:55:4f:e4:
4d:ac:33:dd:ba:93:d3:1b:09:36:a6:f7:bc:4e:9f:4c:5b:8f:
2f:34:d1:56:90:0c:b7:80:7b:e3:6b:69:18:02:c2:3b:ca:a8:
37:cc:39:77:a4:72:7a:f8:21:17:57:07:fb:33:71:82:3e:75:
8a:eb:7f:77:8f:27:08:85:39:c1:f4:b0:7d:81:ac:25:3d:33:
4b:e0:86:6e:46:62:e3:14:94:a3:24:ce:86:86:f1:31:5b:14:
ae:0f:55:3f:7c:2e:96:de:32:e8:1c:ad:30:b5:ba:b8:22:c4:
a1:03:7c:35:f3:7b:f4:ee:2b:47:a9:ea:06:53:7a:58:94:e4:
a3:f8:f2:29:21:b9:01:5b:ab:33:b4:22:72:85:f5:43:fd:6f:
b2:6f:84:bd:aa:43:16:83:18:58:62:24:5a:b8:e4:9c:1c:a6:
f6:e3:73:f2:f7:08:f5:e5:ed:eb:9d:95:59:a1:28:bc:76:e9:
0e:36:3a:19:7f:14:a0:ab:f0:23:b3:e6:92:6f:a5:28:1d:56:
2d:a0:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 12:47:03 2026 by rpki-client