
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier: X/tYhnfYVk3KhkTczfCELc11JwLcTQWc6G4uTF5Nu2Q=
Subject key identifier: 0D:CA:38:5E:9E:0D:E7:70:16:87:0B:E5:7A:81:E3:E3:73:9E:3A:DD
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 02EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number: 02A9
Signing time: Mon 05 Oct 2026 02:23:53 +0000
Manifest this update: Mon 05 Oct 2026 02:23:52 +0000
Manifest next update: Mon 12 Oct 2026 02:23:52 +0000
Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: rMIad9r3oEoD1124tONFrB1we+C7VzBORlTBI1Lqlyw=)
2: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: Tz3+hdgyWtYc1/HUoUjEsmhsHMVSkBuU+zwj3+lRJ4Y=)
3: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: BEQq2adPF9DtUnPGJHJJfgnf6dGwneA1V3UD4qTY/sk=)
4: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: /2oZAnJe5MS3Gc5JLji4AqiTQoX9Gmdygu0nAIyf1NE=)
5: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: QcfGkLYWjAnaAIuPRWdouuM5MQwIc64e/KwwHNAejyQ=)
6: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Qt9iDMNj4N3ReIVZuI3czqq9ixUtCUuaWxevQugerDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747 (0x2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: Oct 5 02:23:52 2026 GMT
Not After : Oct 12 02:23:52 2026 GMT
Subject: CN=6ac30a39-bd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:c1:ac:32:02:6b:b8:a8:74:93:d8:5e:24:
74:4e:66:c4:5c:01:a2:b2:6a:20:ff:ee:55:7c:cc:
9e:be:74:0e:ba:ab:3a:0c:c1:2b:5d:82:37:a7:22:
c3:25:02:04:95:3c:5f:82:e3:76:20:6d:ea:56:43:
bb:4f:86:c5:09:5e:de:98:94:52:1d:1f:2a:82:a3:
ad:6c:39:9a:2a:4a:af:75:dd:84:c7:91:e9:b7:10:
80:43:0b:3d:28:5e:8e:b5:25:32:aa:21:f2:cb:43:
e6:cd:32:46:00:7d:98:b4:03:87:af:72:68:8f:cf:
7e:24:7c:a5:1b:d8:1a:1b:6e:51:37:58:3b:d2:d7:
aa:a1:44:65:01:cf:4e:91:ae:f7:d2:75:ca:44:fc:
2d:3c:8d:d4:5b:f7:7d:76:a1:aa:1f:6b:c8:d9:48:
97:95:d1:f0:6a:8c:4d:32:b3:e6:54:6b:80:33:f9:
1b:d2:20:d4:18:2a:62:0b:27:45:15:90:62:28:89:
c0:26:e3:dc:09:35:c7:91:85:65:cc:d5:4a:2f:9b:
5d:a1:dc:57:03:e3:b5:80:6f:1d:45:fa:f9:bf:49:
9b:1e:03:dc:11:f0:e2:01:e5:4c:db:45:be:47:be:
e1:61:4e:81:a4:b7:64:23:ac:8b:b9:6e:91:be:64:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CA:38:5E:9E:0D:E7:70:16:87:0B:E5:7A:81:E3:E3:73:9E:3A:DD
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:66:bb:d8:4f:a2:5b:a7:42:2c:a5:18:09:7b:87:84:c7:e4:
3b:ba:5b:bd:57:6f:71:4f:18:af:d7:71:ad:cc:e9:25:e3:a2:
29:34:dd:18:15:9c:06:ba:ba:96:c7:42:69:ce:5c:1b:a2:73:
04:59:56:cf:e4:92:19:7b:10:b8:9c:54:72:ce:f7:7c:ad:7b:
e5:6d:6e:3b:26:18:00:8a:b0:22:37:a7:fa:bd:30:45:6f:05:
fa:65:0f:9a:ad:91:e4:50:ae:85:9d:50:fe:7d:91:6b:19:b5:
3f:22:8c:56:aa:61:1a:3f:da:19:06:04:79:10:49:ca:2d:ff:
d9:da:3a:c3:1d:78:08:c1:12:1b:74:5b:e0:86:9f:1d:ee:ae:
43:4a:b9:c3:94:1e:9d:97:38:61:05:36:5a:4e:b7:32:ed:7e:
98:e2:3f:d4:3f:ec:bb:7e:d8:67:41:dd:89:f4:49:e8:58:f0:
db:d4:2e:43:d6:52:a1:6b:ea:b5:87:b5:ed:fe:39:ca:0c:87:
41:df:09:cb:41:5c:aa:7c:b3:e9:d2:aa:f6:6d:e6:a9:9a:33:
7e:45:1d:3f:c5:65:07:6c:f9:97:d3:af:e5:94:e8:a9:ed:6b:
9e:45:60:81:fb:a4:ca:99:2b:7f:ce:44:be:bd:d8:56:7a:54:
6a:e4:52:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:42:36 2026 by rpki-client