
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
File: ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json)
Hash identifier: kVrUN2QPrw6tlIwFKjMDkjFlk0GXgNJSjkY4lyjSIG0=
Subject key identifier: 74:E0:B7:11:2C:ED:BB:F2:B3:8D:45:6F:C7:CD:EE:F8:A8:0A:C8:80
Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
Certificate issuer: /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Certificate serial: 0E3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
Manifest number: 0E2A
Signing time: Tue 06 Oct 2026 17:54:32 +0000
Manifest this update: Tue 06 Oct 2026 17:54:32 +0000
Manifest next update: Tue 13 Oct 2026 17:54:32 +0000
Files and hashes: 1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: 5sSdoUQNn+g3cquWsAPSuKzXD/b/BEsCTdzUmN0Ltqg=)
2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: h8Yq1El+9tmCY/aSU/vFeXJAQYEI+HLkPqW4KvJG1Ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 17:54:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3645 (0xe3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1857, serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Validity
Not Before: Oct 6 17:54:32 2026 GMT
Not After : Oct 13 17:54:32 2026 GMT
Subject: CN=6ac535d8-493e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:24:1a:3e:a5:6e:bb:bf:8f:db:db:dd:90:
19:b4:8a:06:08:b5:2d:61:ef:5a:97:db:e5:04:cc:
45:e8:46:6d:e6:1d:7e:59:c2:2e:66:e4:0a:c2:3e:
55:af:f5:d7:50:64:c4:9f:04:1d:31:01:e0:42:34:
52:28:8f:3b:e9:51:17:ab:86:67:01:13:db:b9:5a:
e7:88:dc:fc:7b:9d:39:1a:2e:0e:70:58:03:89:a9:
18:13:9e:99:1a:8e:69:76:b5:86:8b:fe:f7:38:c4:
05:88:fd:4d:08:47:ed:e8:b6:cc:38:ce:8f:20:5a:
94:17:dc:4d:14:40:19:e5:cb:7c:6f:75:14:f0:90:
ba:44:fb:fc:d4:8a:3e:9e:e5:ac:7a:49:c8:3e:eb:
df:f4:83:d1:dc:da:8c:cf:8f:8a:56:6c:31:e1:ed:
bc:0d:48:1d:c3:ec:66:cb:55:70:50:55:3a:d5:ae:
af:f3:06:cc:45:cb:8b:f1:bb:99:cd:2f:51:0b:09:
44:2c:39:2a:37:dc:b4:61:e3:2b:8d:0d:f8:79:b7:
d9:d4:23:be:60:cc:1f:6e:92:5e:17:91:73:1b:d5:
6a:db:d2:d3:8a:21:bd:bb:8c:0b:88:7c:9e:f9:bd:
95:a2:c6:a9:96:38:8a:f8:5a:f7:82:36:47:30:19:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E0:B7:11:2C:ED:BB:F2:B3:8D:45:6F:C7:CD:EE:F8:A8:0A:C8:80
X509v3 Authority Key Identifier:
keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:3c:2e:0f:43:91:d5:6b:0c:30:71:fb:25:0e:5c:f4:42:69:
30:60:6f:71:ff:e1:d7:0c:96:a6:40:e9:5f:29:ba:e1:d6:fc:
37:1f:c9:56:7f:2d:73:81:48:30:35:81:70:b6:0b:b6:ab:50:
a5:80:6b:66:3b:c8:d2:d3:54:f6:e6:40:c7:0c:3e:65:b3:f9:
dd:bb:40:91:e4:a5:72:82:14:57:14:32:53:ab:3c:70:d3:2c:
f5:12:8e:ed:7d:f0:89:2a:54:42:76:d3:a4:02:3e:11:eb:69:
b0:5c:0e:af:87:fc:b1:dd:d9:3d:39:72:81:9f:cb:a2:8a:fc:
3c:f2:8f:af:4b:ec:d8:80:eb:e3:6a:c7:3d:db:1f:e9:09:60:
b8:80:ef:87:e0:1a:97:3d:aa:7c:a6:15:2b:c7:80:b3:89:81:
a6:42:1b:23:5f:d5:87:32:c3:07:16:e5:23:98:aa:71:60:b2:
a2:2c:6d:b8:a0:26:d4:00:e6:69:4e:ec:3c:bc:d9:d9:67:c8:
d6:99:4b:b5:31:57:cd:a1:12:a5:8c:09:45:3c:c0:d6:11:7d:
8f:8f:b5:f6:88:fb:e8:a4:c3:98:63:95:52:34:7e:3b:ce:f7:
4a:ad:69:99:1b:4d:28:03:12:8c:96:27:5a:48:14:6e:4d:58:
03:82:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:08:01 2026 by rpki-client