
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json)
Hash identifier: hiEOKDDlqC1BaXdaO708H0BFYpU7SyV3ACwSNRBi+qg=
Subject key identifier: 1E:91:EE:E3:1B:65:87:D4:C7:32:4C:EB:2A:15:05:FC:E1:57:EB:8D
Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Certificate serial: 063E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
Manifest number: 0631
Signing time: Wed 26 Aug 2026 22:36:20 +0000
Manifest this update: Wed 26 Aug 2026 22:36:19 +0000
Manifest next update: Wed 02 Sep 2026 22:36:19 +0000
Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: b1+hxWb/P71H1YuX2XbYZ3WAIzNqBRLXqofHMDJCKhY=)
2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: VDech5jPNGmdLMydFhvBmeMj/+3X8iHs7o3tOUHRvXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 22:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1598 (0x63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Validity
Not Before: Aug 26 22:36:19 2026 GMT
Not After : Sep 2 22:36:19 2026 GMT
Subject: CN=6a8f6a64-a199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4f:cc:d2:08:4d:d4:a0:22:be:80:bc:70:a3:
95:26:ac:6b:44:d4:33:4b:1b:74:5e:b1:1f:a1:eb:
fc:ff:71:ec:15:8d:6d:8b:93:27:bc:9e:90:89:04:
39:59:86:8b:f8:db:2e:3b:50:3e:14:2d:9c:5d:db:
6f:82:fe:40:00:44:d1:e9:cc:ac:16:34:09:0b:a8:
e2:ea:b3:dc:78:fe:67:3f:66:91:a1:d3:60:ac:1a:
64:38:22:23:f0:a3:f6:2d:a8:f8:a9:e7:fe:8d:aa:
63:28:25:d6:41:0d:2c:75:ef:78:8c:d3:a7:b6:5a:
13:05:30:04:e0:26:b5:be:9c:86:82:5c:de:18:bb:
22:75:03:b9:ec:6b:7d:c5:79:0f:e3:b1:17:d8:6f:
0a:cb:79:87:9a:58:d7:1e:cf:be:c4:f8:9e:1a:3b:
ee:91:67:bf:44:b3:cf:11:75:0c:9a:0a:bf:f5:ad:
29:15:e0:37:24:87:12:22:f6:95:fe:5e:86:f7:d3:
e6:fb:e7:0f:0d:82:f5:07:70:9f:2c:5f:73:53:9e:
89:b8:2d:a3:db:86:54:08:c1:44:a5:6e:6a:64:00:
c4:11:46:db:ba:ab:3c:5c:b5:96:8c:c0:b9:65:d1:
dc:71:c0:ff:59:20:ce:90:25:8c:39:76:8a:52:6d:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:91:EE:E3:1B:65:87:D4:C7:32:4C:EB:2A:15:05:FC:E1:57:EB:8D
X509v3 Authority Key Identifier:
keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:49:56:ba:16:0e:0c:8f:6b:8b:ee:26:c3:34:a9:a4:53:e4:
74:fd:e0:f6:42:46:1d:b3:03:06:d7:75:fa:a1:eb:cf:e0:05:
b4:a7:59:91:80:88:06:0a:6f:07:8e:dc:06:34:17:a0:44:c7:
43:ab:ff:6f:07:e6:36:c2:46:dc:e9:fe:07:b2:1f:5d:d1:0d:
bc:1e:a2:54:21:af:ef:79:1d:b1:d5:c1:57:b5:19:8d:5e:69:
b4:a3:cc:4a:42:39:e3:60:b8:b2:84:9b:89:5f:4b:27:c0:85:
e9:0d:00:3f:ed:0e:eb:24:6c:ab:be:6c:3d:88:fd:2a:14:85:
ff:3b:92:0e:42:ed:61:c9:2f:c9:1c:d7:d9:4f:39:be:c2:2e:
7c:91:c5:8b:b8:71:e0:21:44:6d:21:19:38:d3:e4:d6:0c:dd:
1e:d4:fe:b4:41:fd:86:b7:79:bc:9b:92:56:80:a8:4f:5a:54:
f2:74:79:cb:21:75:69:03:86:d0:be:89:25:58:ed:3f:b7:23:
5e:18:99:92:33:23:9e:be:fa:5d:0b:9e:6e:1e:09:9c:ca:89:
01:42:cc:3a:5e:3d:55:e5:40:a7:59:35:4c:97:64:92:8b:38:
17:9b:97:4f:79:6c:56:8b:7f:90:78:3d:e9:56:4c:d2:03:dd:
95:77:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:25:34 2026 by rpki-client