
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
File: wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json)
Hash identifier: kBmAUiuKxp/UbVfdThPtn1itWTvwJjPuNlSA+2qhYtI=
Subject key identifier: E2:6B:83:2B:C4:B5:42:F9:F5:94:81:C0:DE:CA:A0:4D:F4:58:E0:1C
Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
Manifest number: 0198
Signing time: Mon 19 Oct 2026 04:58:24 +0000
Manifest this update: Mon 19 Oct 2026 04:58:23 +0000
Manifest next update: Mon 26 Oct 2026 04:58:23 +0000
Files and hashes: 1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: xdIZvXjNBIc8tFZPDzZzNIoxmA+Zvs4Dxe7Q/AhjWFA=)
2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 3kKLH2dh3NoZsnikYJXVB0WU3OSFbnBQPnp1FjK94bg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl
rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 04:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8
Validity
Not Before: Oct 19 04:58:23 2026 GMT
Not After : Oct 26 04:58:23 2026 GMT
Subject: CN=6ad5a36f-d814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:a7:ab:d0:c5:6a:6e:97:ee:19:fc:ad:07:
c5:e3:8c:79:76:38:7e:5f:35:32:eb:70:aa:f8:32:
78:46:3d:76:83:f7:d1:d0:ec:0c:fd:4e:fb:00:51:
60:5c:09:80:14:73:48:4c:cb:dc:be:71:44:8b:53:
a6:84:12:a4:de:1b:43:de:86:f8:d9:0d:31:e8:ac:
11:18:3d:51:62:71:e5:21:26:ea:7a:f8:5c:2f:8b:
42:2e:b5:22:60:dd:6c:76:7d:b5:39:b0:3c:c0:91:
eb:f2:1e:31:bc:ed:da:61:28:93:38:51:1b:b8:c7:
f2:da:41:43:d3:36:a3:f6:15:be:64:fc:e7:49:80:
d8:05:e1:0d:a5:ee:01:19:87:85:ce:22:3d:82:19:
95:99:15:09:f3:68:7b:c2:9d:46:8b:a8:c6:e3:0d:
49:00:f9:d6:2f:ac:65:f6:ab:98:2b:53:a6:ee:3e:
a3:06:d4:6b:0a:ad:fe:30:fa:02:f2:08:10:e6:e7:
4e:ab:5a:67:ea:ea:3c:4f:da:e8:8f:ef:78:2b:15:
53:61:34:c2:e1:62:b4:19:ce:32:bd:9b:ad:f1:d6:
b1:e0:ab:af:f3:60:66:08:6d:08:a6:e3:2a:57:b1:
2f:09:ad:2c:64:0d:08:7d:d9:1e:82:e1:8a:e8:90:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:83:2B:C4:B5:42:F9:F5:94:81:C0:DE:CA:A0:4D:F4:58:E0:1C
X509v3 Authority Key Identifier:
keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:af:70:bb:59:2d:94:da:8b:62:37:9b:6f:61:1a:95:52:0f:
bb:2c:9d:aa:de:d0:93:90:d6:ff:38:dd:e9:a0:0b:0c:fc:53:
d2:34:2f:15:74:87:1f:76:bc:a8:9c:6d:5f:29:98:db:db:c4:
f4:d9:5e:ef:10:2e:05:56:e8:47:e2:4a:75:f6:ba:5f:f9:95:
ae:8e:b8:b0:92:0c:ae:45:43:c6:b1:29:2b:ad:4d:85:df:3d:
7d:db:74:10:90:46:cb:da:e5:1c:46:a9:69:71:4e:23:25:99:
e7:1e:17:dd:1b:75:0b:64:97:42:ef:41:e3:9e:e8:64:f1:f1:
f6:5d:1d:b0:cf:07:fb:3f:17:af:e2:40:60:fc:6e:f0:55:78:
10:f9:59:d0:69:cf:02:7d:49:29:7b:71:68:31:7b:da:2b:4d:
28:5b:09:4e:d4:27:ce:31:e7:c2:2c:8d:11:3e:bb:bd:d4:7a:
8f:e1:82:08:b6:17:e9:be:0d:a6:28:3b:68:e7:c8:ee:c8:91:
63:82:3a:53:85:a2:e4:0b:11:89:f0:54:c7:d9:44:46:38:18:
17:f2:8c:07:94:13:e9:47:e6:6b:7b:4d:42:78:70:13:e1:42:
83:0f:97:9e:be:7b:4f:42:8f:12:03:8c:22:b9:b7:6e:76:2a:
4c:1c:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:12:51 2026 by rpki-client