
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier: QJI76kYT10q8vYvVDsYOHv8+33OEkv8IVwyi6kB+OVI=
Subject key identifier: 81:DE:FA:4F:59:52:5D:43:9C:6A:2B:4C:F7:7F:9A:8C:C0:3D:8A:BB
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0E26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number: 0D1F
Signing time: Mon 26 Oct 2026 18:47:26 +0000
Manifest this update: Mon 26 Oct 2026 18:47:26 +0000
Manifest next update: Mon 02 Nov 2026 18:47:26 +0000
Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: l/kOVuzwzlobF2S1z2STGUbDcctcXPmCrYbirbTzdRo=)
2: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
3: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: 4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=)
4: 1F379CE69D2211F1A2D31D4A4411F970.roa (hash: hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=)
5: F04C908AA85711F18FFCAC0D4011F970.roa (hash: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg=)
6: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
7: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
8: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
9: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: fSPgQ0LMQzI8bkHaUu8bL3d8S8z0D/SfCDL4l0l5jeY=)
10: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
11: C7BD7A22908211F1B42CEF406511F970.roa (hash: URZ1HAVsZ8gDNHs/f+Mvco7+rFhBUEkt2pK3T1DSEzw=)
12: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
13: 7CDB77C68D7511F1B81A5A6E3211F970.roa (hash: qV41HhWJkk9bGNMXnKLZx7jPUgw0pOayrAqVgkbP6uY=)
14: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4=)
15: 3486A02AA5C311F19BC95E547011F970.roa (hash: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4=)
16: 4A7E2898A5C411F19C8FF2B67011F970.roa (hash: FjThLBw2H1Vgo2XVwexsW1c+HATo1/D1xZQEZgYo2F0=)
17: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
18: 60A1565CA1F211F1993DFC693F11F970.roa (hash: RFHpBcGzcu8zc3vv4bbihIv1/WTO6k7Pot6Tojz87xo=)
19: D36559D68D7511F1A94DC67B3211F970.roa (hash: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4=)
20: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
21: BFF3DC6A8D7511F1984B69733211F970.roa (hash: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI=)
22: 0CE85BA6BE1111F18720DB3D5611F970.roa (hash: nz9vc68IV5WJ7mQXbS6rNZIjFtBJkdis8tlOkiay7Qw=)
23: 7B0202308D7511F1B81A5A6E3211F970.roa (hash: cLjdhUjlRnZ/CysDyvE5WxC4HuYKkSjsastV+5g0hOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 18:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3622 (0xe26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Oct 26 18:47:26 2026 GMT
Not After : Nov 2 18:47:26 2026 GMT
Subject: CN=6adfa03e-7067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:84:60:fe:de:a4:e0:43:36:92:0d:76:a8:
de:dc:95:55:57:c8:50:ca:e0:e4:8a:3e:7e:8e:8c:
48:0e:ae:81:df:f7:a9:5f:ea:84:1b:65:c0:ad:d9:
97:c0:78:d7:03:74:1b:84:d6:d5:3d:44:67:a4:1a:
e3:c0:cb:fa:48:57:4d:79:5f:6f:21:20:1f:32:04:
0d:59:0d:d5:a5:8c:f9:c8:0d:f1:67:94:96:dd:a7:
5f:90:01:28:c5:61:9f:64:35:a1:8a:7f:36:d9:28:
10:c5:c1:8a:af:f9:28:26:e7:26:7c:91:50:2d:fd:
3a:4f:74:27:41:4d:96:5b:31:67:de:1b:fc:21:27:
71:44:df:d9:db:9d:9c:e2:fc:c1:80:48:82:a8:08:
a6:10:c1:43:c5:55:55:17:fa:7f:d4:0a:6c:c8:95:
1f:60:16:12:7c:30:fe:4a:e7:1a:30:d1:5f:d7:d3:
72:36:b6:5f:a6:3d:93:0e:0e:a4:4e:ba:4d:b1:e7:
37:95:20:6e:71:a3:94:44:4e:57:d7:b7:05:5c:40:
a2:8c:57:99:73:62:6c:6e:ba:86:6e:72:0c:05:0f:
6a:6b:f1:ec:d5:33:02:d2:c0:9a:82:39:c0:6e:69:
f3:34:d8:c1:0e:33:3a:65:c8:f5:82:d6:36:49:ec:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:FA:4F:59:52:5D:43:9C:6A:2B:4C:F7:7F:9A:8C:C0:3D:8A:BB
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:32:aa:b0:79:18:5d:56:43:a4:7e:be:0c:ae:89:38:f5:40:
e4:f6:3c:f6:8a:12:dc:43:e7:57:fa:91:2c:95:0c:28:30:97:
58:d4:f1:3f:d2:b2:a0:83:fd:1e:aa:5b:a7:b8:26:96:b4:76:
0b:39:de:9e:a1:84:10:e3:9e:66:61:f0:5e:70:3d:37:4c:8b:
34:3d:0c:4f:bb:ce:df:41:bb:5c:aa:54:60:e1:62:1e:f2:47:
57:9d:18:62:fe:83:26:69:94:91:a5:b6:2b:33:58:84:43:dd:
1c:ed:02:cd:c4:04:51:97:61:39:c3:ef:71:19:38:27:b4:0b:
71:34:f1:00:26:e0:39:7e:72:79:47:5c:02:15:59:ed:51:f0:
15:3f:3e:ce:b2:3e:df:41:00:5e:73:9e:29:2c:d7:97:3c:5b:
b6:8c:85:ef:d7:ff:29:44:39:e3:a3:16:c4:b9:e5:2e:a3:80:
b3:a5:6a:36:75:4a:37:06:f3:e3:98:0a:80:12:d4:08:18:0d:
8d:d2:14:9d:a2:f3:3b:0e:a9:54:11:57:c2:07:91:2a:ba:f1:
c4:42:fa:c3:78:41:63:02:a0:93:00:c7:74:3a:1c:55:ec:9d:
1e:01:27:24:29:5c:f4:87:f7:a5:74:0f:48:84:7f:a5:bc:5a:
3f:00:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:16:45 2026 by rpki-client