
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier: QCWOYXNU2DBob5KroYNtkOWy17MdSRVqlfR942co+G8=
Subject key identifier: EF:DA:BE:B6:FB:82:80:D5:BB:D4:FC:51:5B:AC:2F:3B:11:9A:B4:CB
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial: 0AEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number: 0ACD
Signing time: Tue 06 Oct 2026 19:34:01 +0000
Manifest this update: Tue 06 Oct 2026 19:34:01 +0000
Manifest next update: Tue 13 Oct 2026 19:34:01 +0000
Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: MztYuie5Bey259EEEBIg32xP0ftoQccr3Q4jqZE7IbU=)
2: 2ACA766C751511F18829B6FC70A30FBC.roa (hash: fC6Nc+Jtk1WvyemJtWNOUp/N1CwROSxHeCpLb+/dGnY=)
3: D520BC1A7F2511F193FF4ECD8AA30FBC.roa (hash: cYVs4UtWMOUgw+pmidHUQjILVWpjgcEIdNe72N7OhlM=)
4: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: Vj7o88kIi1gzoKZrYduw49KYBvPlvY9XiAyKSejHJoM=)
5: 0A5A5A8C868611F1834D6ADF67A30FBC.roa (hash: EnnfgpQNdSPaqBnvSKsk/cfhTzDdzQOYchOp4FDnxR8=)
6: D61FACAC7F2511F193FF4ECD8AA30FBC.roa (hash: Jy4Oj/aitMJWrPnGk37BzvM5yrFoetv9y1SnJ11uK70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2794 (0xaea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Validity
Not Before: Oct 6 19:34:01 2026 GMT
Not After : Oct 13 19:34:01 2026 GMT
Subject: CN=6ac54d29-b19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:85:28:c1:a9:79:e1:59:65:24:ea:17:35:
b4:72:55:25:08:3e:ed:3b:89:cb:b1:3f:a7:86:ca:
64:47:df:78:46:26:17:a4:7e:92:3a:c4:30:d3:41:
93:57:62:7d:ff:ba:29:a3:7a:78:5b:dd:c9:01:93:
47:c0:9f:90:97:89:15:a3:5f:8e:59:4a:e8:c5:69:
4f:82:37:c2:cd:2a:08:e4:36:e7:87:ae:9c:52:11:
46:da:37:98:1d:7c:c2:27:28:85:e0:8a:c2:8b:fa:
e3:62:64:d6:68:53:be:bb:fd:e1:5b:c7:55:16:63:
f8:1d:23:45:48:73:bd:8a:3a:68:5e:7c:fb:af:28:
34:0b:9e:31:81:94:ea:03:d2:ed:28:78:cc:68:05:
e2:10:cc:39:56:f1:f9:c7:74:64:65:d7:2a:49:a6:
9a:7e:c2:fe:05:20:23:a7:1a:dd:03:7d:4f:16:b0:
5b:07:ce:a4:dd:f6:d9:9f:0a:7f:f6:c9:29:95:18:
45:cf:a2:69:fb:6a:ee:e2:64:16:b4:b9:d2:a8:a3:
9a:09:9b:a8:cf:dd:4d:90:11:30:f0:42:2a:34:bc:
44:01:73:6f:dd:41:89:81:7b:95:2c:38:e9:f7:49:
13:2b:66:fe:d4:66:40:79:5a:7a:6d:4a:ba:fa:a2:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DA:BE:B6:FB:82:80:D5:BB:D4:FC:51:5B:AC:2F:3B:11:9A:B4:CB
X509v3 Authority Key Identifier:
keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:20:72:a1:97:6f:57:2d:34:bf:fe:a4:06:32:26:ad:de:d2:
03:20:3b:46:9f:8c:01:2b:c0:cc:44:42:0a:e0:aa:82:5d:a7:
3f:ef:51:bb:d4:9f:ee:f8:48:57:cf:b9:f5:4d:41:38:a2:51:
25:28:4b:c2:2c:ee:7d:36:cc:a4:54:0a:3f:0c:16:51:b2:49:
3d:c5:26:da:8c:ec:2b:9c:5c:9d:25:d0:2a:20:cc:80:38:63:
4a:2a:ce:7a:0e:5e:4a:9d:51:20:01:cf:54:a4:7b:25:00:38:
06:23:3f:de:b0:d8:00:d5:28:e1:56:e7:57:79:70:a0:d2:63:
a1:83:fe:03:4e:a6:2c:eb:07:34:09:11:08:54:46:28:b5:64:
cd:14:43:92:76:66:59:ce:6c:04:83:2a:4e:e8:8e:11:90:ee:
63:71:dc:ca:4b:ec:14:93:8c:47:45:e0:23:09:99:c2:10:80:
72:87:4a:dc:15:d3:6c:14:e7:1a:67:7e:38:74:1e:75:7f:63:
f0:2e:84:1c:65:05:cb:9d:6a:30:1b:7d:0d:e1:1f:98:aa:09:
1a:47:b9:fa:6e:f3:57:5e:a4:11:33:19:4f:f6:75:df:84:dd:
cb:c0:35:f9:a7:31:b4:73:8c:c6:93:1a:46:11:fa:4d:27:96:
fa:ab:34:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:44 2026 by rpki-client