
$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier: Pc521svFPTKtCSPHFJbAbe5RcHev3RV8GM90AkX4ywA=
Subject key identifier: 66:87:B3:E1:D3:04:AE:FE:A4:4F:75:CC:A3:3D:75:0F:82:7E:8A:97
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial: 0DA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number: 0D8D
Signing time: Tue 18 Aug 2026 18:10:45 +0000
Manifest this update: Tue 18 Aug 2026 18:10:44 +0000
Manifest next update: Tue 25 Aug 2026 18:10:44 +0000
Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: 6CvTDtUjd1kAdDkr6m1UnzvLpk+sy58Y7TK3o5VceDI=)
2: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: utJ70W8kwk0UrAZBtfvLLdbnNC7YzT3hBvwvulsC1zU=)
3: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: jSGQxP09SiqSKhxNXc5lw5g218RQ1wLEioMxa2d9E88=)
4: 3AED03D23F0211F186B62790C8833773.roa (hash: O/S7ipxs7LAaw3lfKf/6hOXusOP9np78Uf6jI39ajNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3495 (0xda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Validity
Not Before: Aug 18 18:10:44 2026 GMT
Not After : Aug 25 18:10:44 2026 GMT
Subject: CN=6a84a024-ca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:93:89:03:2b:92:ac:65:a4:87:60:00:d0:
d7:de:bf:ee:fa:ab:43:b8:66:d3:72:a9:7c:3c:37:
39:36:fd:fc:55:e4:cc:52:23:f7:f1:ee:57:f0:67:
9a:44:e3:10:a3:0f:69:71:a6:8b:75:c4:69:f3:c6:
e4:3d:44:c7:a8:02:49:74:70:c3:29:c8:5f:14:2b:
2e:71:11:45:8a:7a:d6:09:75:55:6b:3e:80:b2:52:
b2:e1:0d:07:08:31:08:1e:03:af:a8:48:05:73:07:
07:c5:2c:5f:09:88:48:a9:f5:47:3c:3c:9b:b2:ff:
ad:88:75:fc:6f:81:ce:65:96:5e:ba:3b:db:ce:6d:
a6:45:f9:a3:6b:a0:b5:11:e1:a0:8c:8a:d5:71:83:
db:02:93:dc:b9:83:24:78:f8:4b:53:f8:d6:5f:37:
61:a4:ec:8e:1f:5b:63:7e:c3:8c:2e:ed:70:27:f4:
3c:c5:7f:fc:31:62:e7:a6:0b:cd:b2:ed:44:9c:c2:
79:7c:cc:1d:ba:da:a0:f2:c6:3e:76:d6:be:87:e5:
84:84:77:22:04:12:8f:95:61:c3:ac:33:92:4a:34:
b0:ca:5d:19:93:31:e7:67:b1:ca:b9:50:a9:7d:35:
b3:72:a9:4c:25:ad:10:4b:6c:f1:e3:3c:47:03:78:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:87:B3:E1:D3:04:AE:FE:A4:4F:75:CC:A3:3D:75:0F:82:7E:8A:97
X509v3 Authority Key Identifier:
keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:53:c8:9a:84:1c:f7:15:62:ac:f6:be:3b:f8:cb:70:27:80:
65:49:47:13:b3:e8:e3:d9:13:c0:44:c5:70:5a:1c:4a:fd:c7:
78:e2:9a:2d:9a:30:ea:02:e1:80:ac:6f:8b:25:39:94:ae:63:
08:06:e3:a0:59:14:a3:e4:00:ed:8b:9c:b3:d4:f9:58:a3:8e:
da:65:20:23:c8:99:40:84:55:b4:0b:de:38:fe:c0:61:6a:14:
25:fe:1b:f3:03:c1:34:91:d8:8e:97:f8:15:9d:a0:0c:ce:88:
cc:13:f6:31:3c:6d:06:9c:48:bc:42:46:1b:fd:e5:de:e8:09:
ae:8c:e5:1e:a9:56:57:be:ef:f6:5c:6d:32:eb:26:3c:09:89:
c9:52:f9:f6:50:86:fd:4c:2a:f3:bd:4c:73:9b:e2:a8:49:1c:
5b:cb:de:0f:3c:f4:32:f5:c0:86:18:9c:c8:e4:89:ed:84:31:
da:df:ac:7c:49:06:02:ac:ea:43:f1:b1:bf:b5:8e:63:f3:f9:
d7:41:f8:e0:42:01:16:88:2f:b3:13:f0:c3:d7:dd:01:a6:85:
97:8c:a0:48:7b:b9:74:ab:4e:bc:7d:f9:fd:0f:8b:3c:0d:5a:
91:f0:c5:5a:9a:ff:60:4b:63:f1:2a:53:7c:67:17:2f:47:52:
b7:17:3c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:01 2026 by rpki-client