
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
File: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json)
Hash identifier: mIuKons3wEQqWfGfzuZo17v9jh+KYTwchqr052cLATQ=
Subject key identifier: 98:8C:AA:2A:13:2B:6C:78:FE:8B:C8:CC:F6:5D:5F:BB:F2:0E:7F:7C
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial: 0788
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
Manifest number: 0769
Signing time: Fri 30 Oct 2026 21:48:44 +0000
Manifest this update: Fri 30 Oct 2026 21:48:43 +0000
Manifest next update: Fri 06 Nov 2026 21:48:43 +0000
Files and hashes: 1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: c23cW5jWPIW3ypvjJP7dwXb7wdyGCQtkxky22qrKjIg=)
2: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: qXGDfI73IfnHMAp4HxrY2CaG3uaWhC+oKVSUMLz1LFQ=)
3: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: 48L080JyJlktjDJm5JUMWcLPjjHEK1WWZAsxDZsWQPg=)
4: 399EDDAA823F11F0895C5843C4F9AE02.roa (hash: n+OBMglPTvErv+P6ZUgv6kKsWJf1PaCgzoYVPi34f1Q=)
5: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: XoRUOC4UUdsqAWL8b8mRp3Lb8qKoXQVLqNUMMLIx7wI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 17:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928 (0x788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Validity
Not Before: Oct 30 21:48:43 2026 GMT
Not After : Nov 6 21:48:43 2026 GMT
Subject: CN=6ae510bb-6d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:07:b9:29:03:18:cd:2f:6d:fa:8f:42:b5:
2c:f0:a7:bf:ba:f8:bb:13:d6:dd:8b:89:52:02:fd:
17:bb:8c:ae:48:b4:91:0f:9e:84:c6:d3:c6:7c:a4:
b0:95:8b:e2:66:39:ba:50:a1:49:fe:56:71:a2:8c:
8e:eb:2b:d8:80:32:18:4c:36:de:cc:45:6c:1e:eb:
1d:77:b8:52:e2:eb:61:1f:f5:0e:26:10:d6:95:71:
7c:4e:09:c4:5b:9e:5a:23:e3:c6:5a:cb:96:fc:6d:
b3:6e:de:29:a6:8e:c6:04:0e:90:2c:b8:2e:46:7f:
1d:d5:bc:07:9e:05:86:44:3c:96:5f:a7:66:6a:4b:
76:1e:6d:11:56:6b:ed:96:ab:ec:f4:8a:87:06:27:
77:a5:9a:05:21:83:b9:ab:37:ae:25:8d:fe:69:37:
ac:a2:f5:94:11:4e:6e:8a:ac:39:44:f4:45:81:bc:
85:35:59:bc:c1:15:51:da:be:42:5a:cc:69:f8:28:
20:70:de:bc:76:92:33:76:b3:e6:ca:c6:9a:35:fc:
fa:b5:63:fa:3b:e3:6f:77:26:2c:ea:fd:52:28:8b:
e7:4a:ba:4d:cc:4f:57:b1:dd:8b:c3:2b:69:40:d2:
c6:fc:8a:ef:4d:cc:13:ac:91:c7:df:ba:f0:83:b0:
99:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8C:AA:2A:13:2B:6C:78:FE:8B:C8:CC:F6:5D:5F:BB:F2:0E:7F:7C
X509v3 Authority Key Identifier:
keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:4c:34:56:a4:05:4e:16:35:e7:a5:53:aa:83:0c:ad:75:0b:
9e:a4:98:70:60:ee:3a:d9:5e:a8:3b:a1:a5:42:53:18:e4:2b:
5a:b1:1c:11:47:f3:c3:ef:19:9c:f2:e4:9d:8b:c1:8b:4a:ab:
c9:4f:2a:a1:7c:9a:89:74:2d:37:e9:0e:f6:7d:a6:f2:14:4e:
be:15:ac:2b:cb:78:d2:ab:19:61:de:c9:15:aa:f0:0f:21:42:
f4:14:2a:a3:b1:a4:73:8c:8e:5e:e8:20:a1:a6:e6:fe:1d:7e:
8e:4b:90:68:1d:72:a6:49:2d:50:66:a4:96:36:a3:08:7a:ae:
89:57:47:93:94:a9:18:bd:8a:b5:be:04:53:0b:63:5d:09:aa:
49:fd:2f:e1:ea:f4:93:72:98:3c:46:9d:f4:9a:60:24:ee:66:
6c:ba:10:97:0a:a9:f8:1b:ea:a6:4c:0b:f9:38:7b:f0:88:57:
ad:56:08:9f:b9:a3:1a:12:18:a0:0f:79:22:37:67:2f:be:de:
66:df:10:8c:cd:81:fb:c0:a6:6e:7f:37:33:fb:44:cd:9d:5f:
af:e1:e0:4e:ca:1e:68:ce:91:0c:b3:4c:44:28:c6:fd:d9:75:
7c:18:c9:9e:58:d0:c6:a9:cc:b1:6d:5a:16:45:00:db:5a:e4:
e9:78:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:21:48 2026 by rpki-client