
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File: i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier: PIxaza/YbZ7zEKhOW0rMHoJwFdbklhSTIevB0QYklQc=
Subject key identifier: FA:A3:B1:8F:F3:4C:1C:35:41:86:65:3D:47:01:CA:1F:44:E3:A5:E3
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer: /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number: 017D
Signing time: Wed 07 Oct 2026 05:10:09 +0000
Manifest this update: Wed 07 Oct 2026 05:10:08 +0000
Manifest next update: Wed 14 Oct 2026 05:10:08 +0000
Files and hashes: 1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: vJVrWXru5+IOOEHuxvppRmx35PYz/2yv2EUZeuAPb5s=)
2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: 8733fh928LbtYGWDLLErO8pq4RhE94MOETM0OBe0s9s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Validity
Not Before: Oct 7 05:10:08 2026 GMT
Not After : Oct 14 05:10:08 2026 GMT
Subject: CN=6ac5d431-9d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:08:25:c6:e7:b2:a8:50:6c:eb:7c:aa:bd:
9f:14:42:0a:ed:35:3c:55:fa:5a:1e:06:9c:1d:1e:
68:28:bf:b8:fb:ce:9c:f5:f6:e3:42:47:b4:1e:f1:
7b:ac:a3:8e:96:fb:0f:d3:d9:d4:3e:49:d1:6c:3f:
47:26:c5:d2:37:fd:9d:88:f6:b3:9f:3b:b4:a8:8a:
38:57:c2:9a:f4:da:61:ac:34:ee:47:32:ef:b0:a8:
f0:f5:3f:5b:7b:d7:76:df:59:1c:ca:c3:5a:29:88:
35:a3:90:12:bf:e1:66:83:77:ab:33:cd:c5:1f:e9:
66:fe:38:d6:15:8a:7c:34:dc:54:25:9c:ba:38:5f:
d3:36:14:e3:c0:16:1c:95:11:af:ed:4d:64:4d:7f:
fc:86:be:11:b1:d5:7b:0f:4a:26:95:92:7b:c6:bd:
72:b7:d7:26:f0:96:ed:aa:2c:37:e1:aa:84:bc:06:
99:f0:6f:96:f2:38:fe:be:78:dd:91:c4:d1:4e:e2:
f9:09:c1:70:ce:3c:a9:2a:2a:b2:7e:91:b3:1d:22:
9e:63:96:17:5e:0b:78:37:94:d6:03:3b:22:2c:dc:
20:48:38:64:c7:30:3c:c9:43:15:91:c9:13:ee:ef:
a4:6d:fc:21:1c:57:2a:4b:a9:80:dc:af:2d:40:1c:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A3:B1:8F:F3:4C:1C:35:41:86:65:3D:47:01:CA:1F:44:E3:A5:E3
X509v3 Authority Key Identifier:
keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7d:96:c2:db:e9:7c:10:13:26:0a:4c:7c:b0:1d:da:02:91:
9a:5e:79:62:cd:99:fe:43:a0:53:23:08:0c:79:cf:06:67:d0:
8d:4e:98:9a:b9:9a:1b:5a:57:10:b2:e9:46:92:f3:a8:26:bc:
c3:f7:44:59:56:72:60:a7:a3:bc:2c:f1:62:99:7e:b4:d2:88:
78:a7:29:73:10:35:9b:0d:79:3c:66:c7:3e:55:db:30:8b:16:
22:20:2b:f4:04:9c:b3:8a:a3:95:de:9c:de:dc:21:95:68:0a:
d9:10:4d:15:a6:e0:64:e4:c5:b9:5c:1b:0d:7b:78:27:3f:80:
d8:ba:93:bd:a4:b5:b9:38:7c:8d:db:ee:3b:bd:37:d8:64:72:
93:16:e2:da:05:38:3b:1f:0a:08:80:6f:19:e7:0d:7c:7d:f0:
34:7a:75:a2:8e:c8:c3:30:38:c5:68:0d:ed:ee:65:c7:b0:33:
42:49:c9:f9:27:ec:27:63:b0:c9:e6:dc:d7:46:80:07:c5:40:
77:95:d1:67:25:8b:75:46:d8:70:11:2b:03:38:6f:14:b9:67:
68:51:66:22:eb:73:89:ae:6d:3c:8b:1c:a4:0d:87:e5:20:06:
9b:e0:9e:2b:43:89:e6:dc:f9:86:be:ee:fe:57:8e:b2:a1:45:
87:5d:61:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:35:40 2026 by rpki-client