
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
File: aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft (raw, json)
Hash identifier: jNJCY3vJx5+yoJHhAf0FYEj85f0+/OAtAA9+ScECHB0=
Subject key identifier: E6:67:F5:9C:75:70:DB:AE:D2:AD:F2:FA:77:C4:44:DD:3B:57:97:F1
Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
Manifest number: 013F
Signing time: Mon 05 Oct 2026 05:55:33 +0000
Manifest this update: Mon 05 Oct 2026 05:55:32 +0000
Manifest next update: Mon 12 Oct 2026 05:55:32 +0000
Files and hashes: 1: aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl (hash: Vvf9H1ETx9XQS8Zq6kkpnAontRcKUQ7W7DsrcAcdJBI=)
2: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (hash: 3Xg1AaNg4FRgN/jJovwLAdi1iupqR9Y5UnYEwAQubeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Validity
Not Before: Oct 5 05:55:32 2026 GMT
Not After : Oct 12 05:55:32 2026 GMT
Subject: CN=6ac33bd5-416a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:53:02:99:e8:98:1d:80:c6:cf:d4:3f:2f:a8:
9d:c9:d7:71:54:82:6d:c1:3b:ea:ec:fc:b7:de:b9:
9c:61:22:28:ae:57:b1:3b:24:ee:02:74:1d:d4:d3:
e6:bc:9f:e1:08:b3:71:61:4f:d5:21:0c:98:6b:37:
66:9a:76:c6:8d:36:23:80:e7:16:23:31:0f:29:24:
b7:36:fd:4d:d5:d0:ee:2a:ab:a2:e1:13:b2:7e:eb:
17:99:f7:1d:a9:50:61:af:e2:85:50:57:d9:57:32:
db:7c:5d:df:1b:b5:cc:c4:12:81:3d:94:04:b1:46:
1a:4a:ba:b1:4a:16:a8:36:e2:75:7d:1e:04:f3:51:
67:01:77:38:2c:52:06:ad:91:5a:f4:b0:99:fc:6e:
ff:38:2f:fd:cd:68:c7:df:3e:d3:f0:09:20:bd:63:
91:2a:15:34:54:97:27:36:73:bc:f6:c2:05:f8:a4:
b0:51:12:ee:41:d0:9b:6f:82:77:fc:0c:c3:8e:58:
03:27:73:4b:ce:87:54:a6:90:d3:c6:e9:14:85:e2:
3b:1d:68:4e:cf:ed:1c:e1:4a:a2:f4:cd:be:23:34:
52:3f:54:bb:bb:80:97:b4:36:88:8c:85:f6:20:e7:
d5:b8:af:4a:e9:ab:3e:c4:2f:c7:b8:e1:55:92:31:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:67:F5:9C:75:70:DB:AE:D2:AD:F2:FA:77:C4:44:DD:3B:57:97:F1
X509v3 Authority Key Identifier:
keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:0d:11:f2:3e:78:ad:2a:44:85:cc:58:3c:f6:75:f6:95:fb:
a2:0c:01:35:4c:4f:f4:0b:6d:99:50:c6:5f:a3:ec:71:c7:3d:
53:8a:96:22:af:5a:89:9a:2e:65:43:30:01:93:13:5a:3a:06:
0f:a7:00:94:97:6f:30:bd:c7:00:f4:4f:35:e5:36:36:11:da:
d3:c7:31:ea:7a:6d:af:50:20:37:0c:a7:91:ca:96:74:c4:dc:
5e:ec:23:10:d4:a3:11:e4:4f:a8:6a:ea:5f:a8:79:29:1b:b4:
ed:ba:e4:62:72:29:17:ce:46:4b:81:3e:c0:bd:d8:48:d1:14:
4f:27:45:91:7f:c0:a9:ed:22:ff:3d:b2:07:3d:82:41:bd:09:
c4:13:4c:2b:38:2b:c9:a6:cc:58:56:2e:14:e0:be:49:eb:d6:
33:e8:44:ae:5e:9b:1f:d5:85:a5:b4:67:b1:a1:88:9e:b4:c2:
7e:b0:2a:b0:a2:60:7f:cd:a4:30:b7:47:25:9d:0e:12:ca:9b:
78:20:f4:6a:aa:18:a8:a2:87:0e:e4:c7:ca:3b:ef:f0:07:1a:
31:2b:fb:0f:c5:4f:8d:2a:52:f0:e5:82:54:82:15:7c:aa:95:
2c:4f:93:e1:56:90:09:a4:46:13:28:31:cb:9b:74:b9:6f:3a:
c2:3e:4d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:15:12 2026 by rpki-client