
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
File: N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json)
Hash identifier: YXi9hLVEoayptp2PS0IjrgCseWxojJVTyjlf/aPitBc=
Subject key identifier: 24:C8:F5:F4:AD:6F:90:BE:97:37:1F:7A:72:C7:C6:C8:5F:5A:A9:E1
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial: 04BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
Manifest number: 04A3
Signing time: Wed 07 Oct 2026 00:04:55 +0000
Manifest this update: Wed 07 Oct 2026 00:04:55 +0000
Manifest next update: Wed 14 Oct 2026 00:04:55 +0000
Files and hashes: 1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: tLP1ZfeCip9t52gMx6P/S/g07vTEomzWPxzFtfD2jdA=)
2: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (hash: 5EmYH4PL7If9iQaTBS6uiCPHCEB5O4Gusf0J1J4Birc=)
3: 46A569387DA911EFAC4E642AC4F9AE02.roa (hash: mcXIAP2fsaDV17Hrdu0Lw91utbcPAgeHEuZ1Pwf9XqU=)
4: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (hash: 4NeNFnTO7iWU2mdZ6+8S8qHDcXWudyOvXGQDZC7IDjE=)
5: 99C173847DA711EFBC48DB25C4F9AE02.roa (hash: dJbhmllOKV7AZbIU1/JQS/CcODEVlrqXiJPK108SF2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Validity
Not Before: Oct 7 00:04:55 2026 GMT
Not After : Oct 14 00:04:55 2026 GMT
Subject: CN=6ac58ca7-b2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:a3:58:00:18:9f:de:6f:01:47:8d:e3:bc:
24:c2:0d:ca:55:bf:cf:fd:5a:ec:1d:bf:ae:1c:f5:
e8:99:83:28:70:7e:9d:86:aa:84:94:b9:6e:09:c4:
de:8f:a0:a1:11:60:d7:55:e8:de:8e:2a:d3:35:39:
bd:92:ec:2e:c9:8d:f6:e3:de:34:b0:ae:99:5c:ba:
48:1b:90:3f:98:be:07:f7:5d:cf:46:75:a7:da:b5:
20:e3:10:f8:d4:be:69:12:7e:10:33:66:ce:3c:08:
e6:52:25:38:19:33:4d:10:92:63:e2:0a:33:45:58:
4f:7f:cc:d6:00:06:be:e0:91:70:19:3c:5f:58:c4:
59:10:4a:28:6b:d9:3e:5e:f0:0d:b2:ae:92:c4:78:
a7:af:88:0d:97:f2:1d:f9:cd:49:12:9e:e2:52:d1:
bc:bd:fd:dc:c2:ec:b3:62:d9:aa:9a:05:d3:88:9f:
8a:4d:40:4b:55:db:ff:75:b6:14:1d:f4:22:0e:1f:
3d:3a:93:f2:a6:9f:9c:5f:5b:19:93:05:9a:b3:9c:
f5:83:1e:1b:d5:5c:f7:9a:57:39:a1:29:65:91:98:
1b:25:1a:8a:d4:e8:ce:87:73:d8:5c:fb:2e:4c:80:
98:01:f9:05:00:c4:8f:31:ee:ec:81:2b:28:62:bf:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:F5:F4:AD:6F:90:BE:97:37:1F:7A:72:C7:C6:C8:5F:5A:A9:E1
X509v3 Authority Key Identifier:
keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:03:0a:e1:5a:ba:ec:db:71:c7:e5:00:c2:cb:8f:8f:f5:9e:
89:ff:9c:7e:a4:f5:62:ce:0c:a7:b1:f3:d9:c8:61:b2:3d:a6:
e1:d5:66:2a:e2:38:60:ff:fc:f4:7e:a7:f2:7f:3d:64:c4:03:
2f:50:18:c7:9e:c1:a7:98:09:6c:d5:27:f8:b8:8a:2f:d0:b1:
0d:b8:84:61:7e:56:35:bb:e3:62:3f:21:32:ea:65:08:d0:07:
1d:35:43:01:65:1a:26:8c:06:53:61:ce:de:d4:71:a6:6f:c8:
17:ed:3f:c9:98:90:85:e9:4b:74:32:bf:a2:c6:fc:a2:54:ef:
e3:46:17:e0:76:07:a8:b6:a9:b8:3e:30:12:a3:6f:01:26:c6:
3d:c8:e7:68:7f:27:d5:5a:e5:6d:08:f6:66:f7:fb:a0:96:e7:
4f:7e:37:d6:f5:fa:a4:e5:3d:a1:5c:60:d2:06:4e:5e:60:d7:
23:f5:76:41:b0:b9:9f:bc:aa:5f:2b:4e:4f:53:fa:66:ca:99:
a3:6f:a1:a2:06:53:56:52:6c:3a:09:29:e3:d9:fe:b6:cd:43:
b7:be:a6:07:bb:22:3a:5b:b5:74:0a:71:68:80:35:9f:a9:3a:
ae:4a:d1:37:c6:e3:00:66:4a:44:62:46:54:cf:cc:1c:3b:3e:
76:4c:2b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:40 2026 by rpki-client