
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier: +ZksDx9YKgAZlyiDKRP6pqzxs6WtVeKx7b249yYsxEI=
Subject key identifier: 79:DD:D2:19:E8:D8:4B:C0:C5:FC:61:58:5F:F6:AB:5B:EA:97:E6:E8
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number: 01DB
Signing time: Thu 29 Oct 2026 04:16:56 +0000
Manifest this update: Thu 29 Oct 2026 04:16:56 +0000
Manifest next update: Thu 05 Nov 2026 04:16:56 +0000
Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: HEMZ+DliOjlbUlGGUPxGbw12nqtmuaE8QviaDJ9TOb8=)
2: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: 5D/Ry/8ZP2E54WupdxSy/KsQmqjx8wwM6c9M/jH7pYs=)
3: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: +2GaHe5cWbVmXD0EaHkbTYfFj1TTwinsmIfZx+qjcRc=)
4: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: SsVxQtDk/Oa1shqSFxMi2LpzccLXqJhR2Mhs5lXheR4=)
5: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: vRQ6HdkSj/Wf7+vduG5A9cFn7YJoyEBj6p0aYIaPJ/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 04:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Validity
Not Before: Oct 29 04:16:56 2026 GMT
Not After : Nov 5 04:16:56 2026 GMT
Subject: CN=6ae2c8b8-a4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:d1:e5:e5:11:2c:aa:63:b6:cd:47:42:29:
a2:2c:bb:e9:4d:2d:16:0b:44:2f:ce:75:49:a8:c6:
09:e5:57:83:20:bf:40:30:a2:c7:56:72:4c:8c:53:
5e:b4:a8:2f:b9:f2:25:81:ca:3d:40:9d:c4:74:30:
85:a0:6d:5e:67:68:81:a8:e5:9c:dc:3f:4e:c9:90:
04:0f:2a:e7:3e:84:48:c5:86:3a:15:09:68:a7:d3:
84:91:30:93:48:5c:dc:f9:c7:04:14:f4:29:78:8e:
d9:6a:cb:9e:c5:f6:9e:43:20:8f:48:85:e0:39:8c:
67:c7:85:d3:23:2f:34:e7:4e:26:06:d2:3d:1e:b2:
5d:fb:0d:60:fd:70:8f:65:67:19:1c:44:75:53:5a:
a8:a3:6f:51:d0:e5:28:4f:07:92:70:4d:de:5f:6a:
e2:4c:01:af:1e:0b:2e:07:57:e3:a9:b0:05:0f:d2:
25:d9:36:28:75:cc:ec:e1:2d:36:2f:70:9e:f3:7f:
3c:14:1f:a1:a8:68:65:53:96:68:83:5b:7b:2c:1b:
71:27:61:86:df:02:7a:21:ad:cc:93:f2:96:1d:04:
79:67:0d:a6:0f:fd:89:7a:64:11:58:9e:cf:c1:c9:
c5:60:88:03:8e:c0:79:9d:87:21:88:81:5b:63:94:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DD:D2:19:E8:D8:4B:C0:C5:FC:61:58:5F:F6:AB:5B:EA:97:E6:E8
X509v3 Authority Key Identifier:
keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:da:23:b1:f1:ba:64:cd:3c:6a:25:22:6a:99:55:34:f8:27:
75:99:89:4b:42:60:72:15:f7:21:db:01:ed:d5:b6:7f:61:4b:
e8:f6:3b:be:fb:c3:a1:8f:da:a8:d3:db:26:46:e6:51:90:66:
43:3d:60:63:a0:14:4a:b0:3a:50:97:03:2b:11:e1:fc:7a:65:
d5:df:c0:1f:1f:08:64:19:1b:79:9a:3a:fc:58:fb:c4:ba:9d:
11:1b:77:9d:27:71:2c:ae:ac:b4:6d:9c:fb:4f:cb:18:5b:ca:
ad:2c:dc:2f:3f:82:10:1e:ae:0c:3d:43:fd:ef:86:22:31:ab:
2f:de:42:23:97:76:91:39:c6:45:2a:10:12:fe:6e:62:4c:19:
42:7e:59:71:83:58:31:07:c6:15:84:95:52:6c:b4:50:b3:d5:
14:a9:23:a0:f8:83:7c:57:a9:0b:9d:05:13:4f:a2:40:e6:0b:
cf:d0:97:70:36:d1:35:d8:1c:43:25:2d:3e:45:fd:f6:21:f9:
9b:54:a7:62:c9:dd:cc:9b:53:f8:8d:b1:84:4c:a9:bd:6c:40:
39:66:36:05:2b:f9:cb:f1:1e:35:40:dd:10:75:fb:99:a6:e4:
23:0c:d5:61:17:39:11:30:93:57:5a:ae:70:10:a5:fb:f3:4c:
5e:9f:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:12:57 2026 by rpki-client