
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
File: 0PiwBllsfAN8tUkwWzlpAACq6KQ.mft (raw, json)
Hash identifier: tnLaE/tdUSmKx/2ULuvHPoYqrbR4+T3hVQ5icnnkjn0=
Subject key identifier: 82:B1:6F:31:36:23:66:02:DA:25:A3:DB:5B:47:07:0B:99:F0:6F:35
Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4
Certificate issuer: /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
Manifest number: 01FD
Signing time: Sat 31 Oct 2026 03:38:18 +0000
Manifest this update: Sat 31 Oct 2026 03:38:18 +0000
Manifest next update: Sat 07 Nov 2026 03:38:18 +0000
Files and hashes: 1: 0PiwBllsfAN8tUkwWzlpAACq6KQ.crl (hash: uOsHimmjkhi3EyXYk/g35N+aR12XLt/5mpC1FtU0jEQ=)
2: E19693E093E611F1AFD042853411F970.roa (hash: POKwXV70aseSaP4H7afy/lx6ehjdPpKHKKYS+lcHLlU=)
3: 6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa (hash: tbhcExPyMdasBxcbE73h7b5HlPi0div8uaJX4sMb5Ow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl
rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 03:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91754C0, serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4
Validity
Not Before: Oct 31 03:38:18 2026 GMT
Not After : Nov 7 03:38:18 2026 GMT
Subject: CN=6ae562aa-0980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:e6:de:31:4e:d6:87:8f:e7:1e:35:26:6d:
a1:43:e4:e3:88:f8:b3:d5:f0:dd:59:7a:78:8d:84:
59:d1:3d:58:80:ba:9a:af:61:c5:91:77:36:16:66:
8d:bd:42:85:ce:66:2c:39:11:f4:2f:53:60:16:59:
8c:35:9b:44:33:83:c6:ea:f8:7a:fd:30:bb:e8:3f:
74:79:c8:99:f5:f9:c1:15:7c:a1:ed:d7:77:49:4b:
73:aa:c4:5f:c9:53:1e:3f:11:46:cc:0b:60:2f:52:
83:74:13:e9:94:a6:93:0f:c1:76:b2:43:b6:d3:35:
43:94:5c:b1:e7:1d:06:e5:b3:fe:0d:0b:b2:9e:70:
79:e2:59:8a:e8:32:b1:ff:fe:79:91:dd:b7:61:52:
24:13:eb:d6:77:c7:5b:3c:73:ff:7c:1d:ec:8a:8d:
fc:01:ba:e3:1f:47:0c:83:7a:8a:15:cc:ff:2c:02:
30:4c:f3:dc:65:55:38:e8:04:6c:85:55:e7:18:02:
e5:cb:ee:4f:e2:79:6c:00:89:26:b4:c2:1e:29:e9:
c9:18:e0:08:88:e4:07:16:ab:1e:aa:71:fa:6a:e8:
7b:44:e0:ca:ba:0d:93:ca:c2:57:1c:79:ba:2b:fc:
70:64:20:b2:2c:48:f5:38:7e:da:96:5a:97:65:9e:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B1:6F:31:36:23:66:02:DA:25:A3:DB:5B:47:07:0B:99:F0:6F:35
X509v3 Authority Key Identifier:
keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0c:b0:33:39:84:58:33:6b:64:f0:0b:aa:66:8a:74:2a:d6:
56:bd:08:53:b7:5a:6d:66:1a:e8:67:c5:4f:d3:6b:0a:a1:d9:
ce:c6:bf:4f:21:de:b8:71:78:7c:e3:d8:3f:ea:80:9d:da:62:
ae:c7:71:77:dc:6e:a0:9d:c2:5e:26:22:a5:49:98:f8:a0:ae:
d3:7d:e0:bb:89:a1:1f:48:b6:02:ad:af:5a:9c:ce:3f:14:38:
e3:e4:48:3b:33:b1:aa:50:ae:a6:8f:f0:e3:d1:ad:0e:c7:2f:
bf:9a:d0:21:a3:1e:c9:b3:00:e5:f9:2a:e9:af:0a:00:0f:2e:
4b:b5:f7:33:27:02:0d:84:88:61:a5:84:91:35:38:a2:15:58:
fd:f9:0f:25:c9:b7:69:b2:51:93:b5:83:23:43:b0:0e:7f:4f:
22:6e:ca:65:6e:30:44:c4:5e:85:be:44:53:bb:e7:8b:8a:3d:
b9:e6:07:54:52:23:b8:b2:d1:34:69:f2:f4:72:63:a0:ef:d5:
59:91:77:c6:8f:97:8a:db:6e:f3:74:e3:24:59:c4:98:f6:0f:
b2:b8:a1:0d:d8:31:55:13:6f:e6:9c:9e:4e:ad:53:3a:82:3f:
c7:8e:fe:ba:28:35:21:68:47:05:e2:ae:f5:43:ba:7d:ab:f3:
e4:90:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:40:55 2026 by rpki-client