
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json)
Hash identifier: G3CW05LXuaeEU9VkP/iUXY9Ij+icauHvOKg3wiM84ZI=
Subject key identifier: 2A:56:BD:9A:AD:B1:21:11:CC:FA:FE:9A:B4:58:1A:DB:F7:90:D5:26
Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Certificate serial: 085B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
Manifest number: 084A
Signing time: Tue 06 Oct 2026 21:09:14 +0000
Manifest this update: Tue 06 Oct 2026 21:09:14 +0000
Manifest next update: Tue 13 Oct 2026 21:09:14 +0000
Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: xvzw+/2ZoPrGu9kcofNZRSHUUvNxH+ZRpbK2az6uhhk=)
2: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: 9YsIlIllhbjKELWofqw1jKbJ9ZMkFk/KGAHeyjk+MvM=)
3: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: dGQ2Shga7JyItz/gX367HOAIx3zB2wdadpgo2oiYCAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2139 (0x85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED
Validity
Not Before: Oct 6 21:09:14 2026 GMT
Not After : Oct 13 21:09:14 2026 GMT
Subject: CN=6ac5637a-b1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:65:64:c1:63:74:7b:10:46:99:1f:60:c1:
78:b0:d2:1a:0c:9f:fc:78:b5:19:75:55:15:f9:eb:
07:a9:2c:1d:cc:9a:75:c4:6f:a8:6e:77:5e:8e:74:
41:f9:1b:87:75:c5:69:42:a4:60:6f:bc:40:1c:f6:
13:c9:a8:d1:2b:5f:5c:48:d7:fc:4e:17:7b:3e:7c:
c9:04:73:69:5f:46:37:66:62:89:34:d6:ee:44:e0:
ec:2d:10:b0:7f:1d:5e:5c:27:29:3e:99:47:b0:c8:
7d:cf:0a:c9:c9:a6:bc:67:92:a0:00:43:e0:d2:59:
cf:05:a0:f3:bf:ea:63:23:84:18:57:76:12:61:cd:
24:77:c1:73:20:01:db:cd:1e:65:c7:61:78:41:69:
96:c0:d7:0d:aa:67:6c:b7:04:ca:c9:63:30:80:5d:
14:9b:06:18:0c:c7:f6:ff:fd:2e:88:95:ed:e4:eb:
44:85:41:f9:b5:e3:bb:ce:9c:16:12:45:f9:87:63:
b4:ac:25:a5:48:6c:7c:fc:62:af:0e:ac:b9:87:3b:
02:0b:ab:55:75:e2:82:6c:67:d9:91:32:86:45:17:
83:5c:7e:fa:8c:56:6c:dc:13:87:c4:9b:ec:ec:1f:
57:ef:5c:68:00:8d:25:be:f5:ca:ec:5d:e1:10:db:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:56:BD:9A:AD:B1:21:11:CC:FA:FE:9A:B4:58:1A:DB:F7:90:D5:26
X509v3 Authority Key Identifier:
keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:b5:8d:a3:7b:40:96:33:8c:b2:fc:a1:fd:36:44:86:9f:b3:
fb:34:2a:18:25:05:b7:c1:ed:0f:ef:ae:00:cb:73:ff:f1:f3:
37:43:73:59:27:06:f5:8c:2d:9a:c6:61:78:cb:e1:54:da:e0:
e4:37:96:7c:c3:99:48:ad:06:f5:a9:ec:ad:9c:9f:c8:52:46:
b0:2a:99:c6:eb:8b:c7:21:e9:a0:08:52:f8:c6:85:4f:c1:cb:
3d:e6:a5:9c:22:bc:b4:02:d5:38:74:76:93:41:19:d1:d4:1b:
c4:b7:a3:ee:51:5b:0a:40:78:3e:00:be:56:77:27:00:2f:80:
ba:07:0b:4a:0f:a9:e1:26:78:6a:20:c2:bb:8d:09:ab:9e:6d:
b4:c8:b1:52:7d:65:c0:27:c3:4d:a2:65:bd:62:56:a6:db:99:
03:17:ff:f8:05:89:42:60:a8:be:50:8c:b6:ec:78:96:64:99:
d4:9c:3d:c6:56:f9:8d:01:88:63:5c:6d:72:cd:0d:b0:10:ca:
1a:93:83:58:af:9c:3a:83:3a:70:b4:6b:07:8e:9e:41:fc:58:
2e:08:f9:d8:98:69:24:37:16:a2:15:86:87:62:a2:bf:bc:ab:
3a:c9:3f:23:7e:6a:11:30:fe:49:a1:44:4a:ad:8a:cd:f6:66:
89:d4:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:29:29 2026 by rpki-client