
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft
File: V2i_S72Luw3lwVz_jwqRSKCyLtU.mft (raw, json)
Hash identifier: h4RK5erX1XgHcpyb5PUwmL9BesfSf7Ln8pwGzXDOkko=
Subject key identifier: C3:F0:9C:D5:8A:F4:47:1B:67:6C:D5:4D:32:5A:1F:19:17:48:67:83
Authority key identifier: 57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5
Certificate issuer: /CN=A91538E7/serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft
Manifest number: AA
Signing time: Sat 24 Oct 2026 20:34:16 +0000
Manifest this update: Sat 24 Oct 2026 20:34:15 +0000
Manifest next update: Sat 31 Oct 2026 20:34:15 +0000
Files and hashes: 1: V2i_S72Luw3lwVz_jwqRSKCyLtU.crl (hash: NpoMH58eSMroMPu/bUtXZ7YzkF3i2HMOvzh66cnVAfs=)
2: CEDA6062150911F1B271807B1E3D8C67.roa (hash: 5+Y9YzSMax1GuLcAhCIgRYvQ+xj/kl1boUJm7Dh+PIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl
rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5
Validity
Not Before: Oct 24 20:34:15 2026 GMT
Not After : Oct 31 20:34:15 2026 GMT
Subject: CN=6add1648-d5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:3d:50:54:7d:bc:a2:58:d9:2e:bd:2e:b7:
bf:0e:8e:9e:b7:16:33:ca:9b:a5:5b:87:e8:c0:ae:
50:f7:ae:f8:26:56:58:68:1d:97:ff:7a:98:0e:1e:
9a:52:c5:e3:50:80:3a:af:40:b7:6e:65:99:81:a1:
16:74:99:65:a3:88:08:67:79:29:53:f7:7c:bd:3e:
2c:ac:13:f2:3a:ab:d7:b7:ec:c4:f8:94:cf:42:bb:
43:f9:c9:c8:1d:01:f9:4b:5f:ca:9d:d8:b4:83:64:
53:00:81:83:4c:23:0c:f9:6a:12:9b:6f:62:ec:83:
70:d2:56:d4:2d:1a:19:14:52:91:e1:09:fa:b4:eb:
1f:d0:0a:6a:3e:5f:7f:31:3d:9d:4c:b3:14:7d:e5:
53:52:23:69:41:20:58:1f:94:37:67:51:61:da:ac:
54:1c:8a:d4:c2:0f:7c:b2:ba:86:20:bd:e0:c3:e6:
94:7a:22:c3:a4:60:dc:4a:31:d8:b7:76:c3:aa:c5:
e9:e4:6b:3c:6c:14:6f:df:9e:31:e7:6c:7e:11:f3:
da:2e:a6:f4:f3:7f:c4:c6:a6:2c:c9:54:a5:9a:69:
64:37:0b:c5:16:d4:de:bc:a5:d9:01:f4:64:0b:e6:
ac:b2:c4:74:79:c6:1c:36:a0:7c:1b:24:66:5e:21:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:9C:D5:8A:F4:47:1B:67:6C:D5:4D:32:5A:1F:19:17:48:67:83
X509v3 Authority Key Identifier:
keyid:57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:7a:14:67:61:55:fb:9f:4b:b0:f9:32:f4:33:57:e7:e8:47:
9b:8c:e6:18:5a:69:c2:f2:f1:6d:34:f3:c1:1f:8d:8c:3a:8f:
8e:c8:bf:b9:12:e6:cb:92:c4:d7:49:2b:58:18:95:02:27:1e:
84:10:20:92:0e:d8:ae:04:b3:7d:ae:77:45:0e:e2:07:1d:72:
77:e8:c6:b5:34:2e:c7:a3:9b:cf:f6:47:b3:4a:65:b8:26:8f:
b2:11:92:fa:ab:bc:da:c8:2a:be:5d:24:1d:9a:6b:bd:ba:8b:
b4:f7:09:46:09:9d:32:5c:7b:17:2f:79:cf:2f:ca:4f:10:14:
7c:45:a0:50:67:29:e9:bd:d1:98:c6:ca:5a:ac:db:f7:78:3d:
d2:a4:83:81:a2:b3:da:fe:6b:36:0a:6b:84:8d:f5:0e:fd:78:
15:37:14:11:59:3e:0e:a7:77:84:84:1a:37:ee:9d:d7:2b:7d:
2b:84:b3:57:4c:8f:bc:33:ae:67:a9:22:7f:08:cb:65:6a:d0:
2b:33:19:e7:f1:7b:b6:ef:d2:c5:21:fa:04:2f:e5:f0:d8:28:
f5:21:64:fe:ca:7d:29:8f:bc:eb:23:a2:c8:55:7c:2e:f4:7c:
e1:90:96:f2:86:5b:1f:4b:64:40:4d:82:4f:d2:15:6b:0b:20:
d1:83:cf:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDU3NjhCRjRCQkQ4QkJCMERFNUMxNUNGRjhGMEE5MTQ4
QTBCMjJFRDUwHhcNMjYxMDI0MjAzNDE1WhcNMjYxMDMxMjAzNDE1WjAYMRYwFAYD
VQQDEw02YWRkMTY0OC1kNWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz0M9UFR9vKJY2S69Lre/Do6etxYzypulW4fowK5Q9674JlZYaB2X/3qYDh6a
UsXjUIA6r0C3bmWZgaEWdJllo4gIZ3kpU/d8vT4srBPyOqvXt+zE+JTPQrtD+cnI
HQH5S1/Kndi0g2RTAIGDTCMM+WoSm29i7INw0lbULRoZFFKR4Qn6tOsf0ApqPl9/
MT2dTLMUfeVTUiNpQSBYH5Q3Z1Fh2qxUHIrUwg98srqGIL3gw+aUeiLDpGDcSjHY
t3bDqsXp5Gs8bBRv354x52x+EfPaLqb083/ExqYsyVSlmmlkNwvFFtTevKXZAfRk
C+asssR0ecYcNqB8GyRmXiHJewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPwnNWK
9EcbZ2zVTTJaHxkXSGeDMB8GA1UdIwQYMBaAFFdov0u9i7sN5cFc/48KkUigsi7V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy8wMTRDODhGQUUx
MDYxMUYwOUNGNkNCMzQ5NkVFNTI4RS9WMmlfUzcyTHV3M2x3VnpfandxUlNLQ3lM
dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy
RkQxRkYyL1YyaV9TNzJMdXczbHdWel9qd3FSU0tDeUx0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzhFNy8wMTRDODhGQUUxMDYxMUYwOUNGNkNCMzQ5NkVFNTI4RS9WMmlfUzcyTHV3
M2x3VnpfandxUlNLQ3lMdFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZXoUZ2FV+59LsPky9DNX5+hHm4zmGFppwvLxbTTzwR+NjDqPjsi/uRLmy5LE
10krWBiVAicehBAgkg7YrgSzfa53RQ7iBx1yd+jGtTQux6Obz/ZHs0pluCaPshGS
+qu82sgqvl0kHZprvbqLtPcJRgmdMlx7Fy95zy/KTxAUfEWgUGcp6b3RmMbKWqzb
93g90qSDgaKz2v5rNgprhI31Dv14FTcUEVk+Dqd3hIQaN+6d1yt9K4SzV0yPvDOu
Z6kifwjLZWrQKzMZ5/F7tu/SxSH6BC/l8Ngo9SFk/sp9KY+86yOiyFV8LvR84ZCW
8oZbH0tkQE2CT9IVawsg0YPPhQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:08:05 2026 by rpki-client