
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json)
Hash identifier: RoP0YHGpW+fZZFv63Gzn3esPC4MYHZy0LuDrBcU0Ib8=
Subject key identifier: 47:D2:5F:83:93:22:AB:D6:93:80:1E:AA:F1:A7:74:57:78:01:71:D4
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial: 07A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
Manifest number: 078B
Signing time: Sat 24 Oct 2026 21:35:17 +0000
Manifest this update: Sat 24 Oct 2026 21:35:16 +0000
Manifest next update: Sat 31 Oct 2026 21:35:16 +0000
Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: UTMsjugiEJstretUbyZKG2r6MoCQCyf0ZwxLRHUocEQ=)
2: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o=)
3: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: W7HbZgiurIous/dkOII7Zs+KL83NW7eUE5Qjtxcpxno=)
4: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: E4mvIp0TY49n7Ku16oPaGsPeRK5kr/jdVq6qAjBUp9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 21:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Validity
Not Before: Oct 24 21:35:16 2026 GMT
Not After : Oct 31 21:35:16 2026 GMT
Subject: CN=6add2495-69d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:71:bc:d0:18:ec:f9:cb:51:12:5a:a5:38:
d4:24:cf:49:d8:76:e9:32:2e:63:6e:c9:fa:4c:ce:
38:7b:23:c1:14:72:4c:fd:06:9a:d1:d1:be:bf:f2:
d3:77:91:40:7a:9a:61:af:5a:3c:3a:a4:a1:1c:bc:
eb:08:d3:0e:fe:ed:37:2e:a2:7e:b6:eb:03:f0:32:
81:b8:16:2e:6f:58:c5:35:39:44:0c:62:ee:45:9f:
86:b9:e5:7d:03:70:9d:7e:19:7c:0a:e5:f1:88:dc:
ff:43:c3:f1:e9:45:b9:90:c2:d0:54:3e:90:b4:76:
f6:54:61:46:98:99:37:8b:43:d4:b0:43:dd:23:13:
40:a9:35:27:f3:26:23:29:20:3a:4d:16:6b:ce:0c:
89:d2:48:b5:37:63:89:1f:6a:0a:62:94:7b:46:f4:
60:06:83:12:89:bc:5c:0e:b3:1c:13:96:2c:90:24:
05:c3:09:32:47:e6:88:2d:15:f7:70:79:c8:41:7b:
b1:c4:ae:fd:d7:c1:4c:7d:d1:5a:a7:7d:f0:6a:93:
6a:e6:f6:85:8d:05:0f:bb:c9:76:44:23:14:12:90:
6b:e4:f2:45:cb:7d:08:23:7f:73:aa:e3:1f:c7:f1:
7f:20:7a:b2:25:5f:0e:41:75:b2:5e:01:17:a7:7f:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D2:5F:83:93:22:AB:D6:93:80:1E:AA:F1:A7:74:57:78:01:71:D4
X509v3 Authority Key Identifier:
keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:ab:62:1e:24:53:09:3b:03:57:f0:d1:19:4c:24:74:16:60:
de:5a:64:81:51:a3:51:7b:6c:5a:60:95:fc:39:7a:f3:ed:b6:
70:76:60:ed:40:01:34:ae:95:96:25:2d:f7:60:9d:c1:d1:15:
67:7e:1a:1a:e1:96:a9:b1:5c:0b:4b:b3:a1:e7:79:30:87:19:
c3:31:98:8a:10:bd:0a:1c:be:b7:d4:24:d9:77:a3:2c:b7:ac:
6e:8c:4f:47:d7:4b:35:5d:64:29:1b:3b:ac:23:e2:5e:54:14:
d6:8f:c8:28:7c:1f:69:d6:22:a2:cc:42:36:f9:f9:2f:aa:23:
f7:d1:8b:26:18:8d:4b:e2:95:b1:ff:f2:1d:d8:b3:08:c6:f7:
17:35:55:89:d9:2b:8c:95:1d:a2:3d:b0:7b:9c:04:9f:da:9d:
cc:e8:6a:d5:bf:79:b8:6a:13:b2:f6:9a:ea:f1:24:91:6a:ce:
05:97:0d:1a:26:22:ce:93:65:a7:17:a5:26:5a:32:b8:fb:07:
f8:17:d6:92:6b:e6:97:b0:90:2a:15:95:29:d7:ea:f7:0b:60:
aa:a7:27:7e:a5:48:5e:3f:89:ae:0b:8f:86:26:5f:be:8a:4b:
49:17:1c:4e:75:12:a4:29:a0:a0:6e:0d:42:84:0a:56:4c:6a:
1a:32:1b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:31:23 2026 by rpki-client