
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json)
Hash identifier: /NG8jJ62o3oBpguVPTqX7i38W18/vg+gT2U0HoFNFJs=
Subject key identifier: 92:42:7F:E4:2F:84:34:7E:EE:21:5E:5E:99:B0:1E:FF:A8:85:16:1B
Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Certificate serial: 0657
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
Manifest number: 064A
Signing time: Wed 14 Oct 2026 23:04:54 +0000
Manifest this update: Wed 14 Oct 2026 23:04:53 +0000
Manifest next update: Wed 21 Oct 2026 23:04:53 +0000
Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: u8rwJLZkDIynG78+nYR8+aSxK/3hrJ6UIYuh4wLkDAM=)
2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: VDech5jPNGmdLMydFhvBmeMj/+3X8iHs7o3tOUHRvXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 23:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1623 (0x657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Validity
Not Before: Oct 14 23:04:53 2026 GMT
Not After : Oct 21 23:04:53 2026 GMT
Subject: CN=6ad00a96-8212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:8a:61:fb:25:41:57:3c:34:e1:c0:f7:87:
66:8e:0f:13:3c:b9:0b:45:03:9f:72:20:e2:8a:b6:
84:7c:42:62:55:bb:f7:5c:f2:31:68:69:8a:6e:89:
38:3e:98:64:03:ff:17:ff:f3:d7:10:10:66:44:ca:
71:ea:72:bb:4d:74:05:fc:05:57:35:01:04:64:4a:
d4:33:0e:cb:48:33:67:dc:13:62:1b:0d:52:3c:bb:
ee:e7:2c:db:ef:11:8d:23:12:0a:c1:6c:ea:b2:86:
5c:ff:01:71:52:41:5c:f3:d5:07:27:11:5c:af:d7:
18:bf:77:85:a8:37:2e:bd:44:d3:33:3e:dd:6b:46:
c6:6b:35:c6:e6:e1:1c:34:d4:cd:e1:10:d2:28:75:
cc:15:f8:cb:bd:26:bd:b7:3b:02:0b:3e:bf:7f:47:
2e:1d:25:27:a1:12:92:bb:6f:73:e4:18:15:ea:64:
82:1d:92:dc:71:02:b7:d0:06:93:e9:ed:6d:5f:41:
da:51:23:59:48:cf:1a:e2:7b:e5:70:d1:5f:8f:36:
eb:59:59:82:18:2a:74:16:92:5a:ec:69:32:46:4d:
69:8a:d3:01:46:e3:da:f5:d9:4a:8b:a6:a0:0d:ac:
29:a7:5f:1b:13:6d:45:26:8f:87:c1:af:52:23:17:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:7F:E4:2F:84:34:7E:EE:21:5E:5E:99:B0:1E:FF:A8:85:16:1B
X509v3 Authority Key Identifier:
keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7a:6f:a0:23:cf:34:f3:20:e5:e6:bc:2f:75:99:a3:5b:8d:
0c:08:63:39:06:ed:02:0f:ef:12:6c:86:49:d3:e0:e3:a2:0e:
c9:5b:ab:bd:5d:ec:67:d6:5a:50:04:84:c1:84:9c:c5:77:bf:
e2:8f:1c:b5:22:96:d1:04:7e:ca:88:87:16:f2:f0:0c:ed:05:
8a:a5:49:6e:3a:cd:eb:87:4f:77:d9:98:ab:5a:25:97:c4:1c:
c4:50:3d:9e:46:2f:71:a9:40:a4:87:6b:c0:ea:00:a0:d4:73:
84:af:98:27:c8:a7:3d:08:10:96:5a:91:e9:fc:b7:46:ea:b7:
cb:0f:49:d8:aa:28:b4:15:eb:0a:ca:df:be:fa:14:26:c3:58:
b5:79:e5:82:32:67:7a:85:9d:c3:15:27:96:57:31:2e:99:94:
55:63:97:c4:56:c1:e9:cd:f7:a6:8e:50:b1:c2:28:2e:a2:74:
9d:e5:d5:4e:e2:18:ed:a6:e8:34:97:cf:d3:17:a5:3a:f6:7d:
bb:78:36:1e:e5:0b:62:f7:b1:90:79:a3:39:31:0f:dc:41:df:
c4:ff:ac:74:a6:ef:fa:47:d5:ad:f2:b6:b6:98:d3:a0:84:44:
93:b4:12:09:02:43:c3:ac:33:8d:80:bf:be:0a:ed:07:1e:89:
3d:d3:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:00 2026 by rpki-client