
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json)
Hash identifier: T2N1qPCSRgn1w1bnmHoCfXCG/ioY5i2loYlvu9W9HpA=
Subject key identifier: FC:B8:95:D8:D2:E6:C9:70:5C:B7:51:B0:36:92:9F:FA:0F:61:DA:A2
Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Certificate serial: 1085
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
Manifest number: 1062
Signing time: Sat 24 Oct 2026 17:22:36 +0000
Manifest this update: Sat 24 Oct 2026 17:22:36 +0000
Manifest next update: Sat 31 Oct 2026 17:22:36 +0000
Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: NSI1hK0sMmzcieyxnt786R5SSFbJpilOYr0EcKwY9HU=)
2: F0F0DEC2C43411F0836DBC7DC4F9AE02.roa (hash: LMzi/nUop3Zg3Ri+ttMW1AIJQZt36oNcqeMlHwO8Bco=)
3: 4E05A11CA29511F1A58BD2117011F970.roa (hash: iovmDQFeUgMExa+ObKm6ePmLB8Un8IRAlJOPHRPzmKc=)
4: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: /jxk5arOtk8XX4x0oqH6WonBrSttsEFSJuqdd1pQsXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 17:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4229 (0x1085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Validity
Not Before: Oct 24 17:22:36 2026 GMT
Not After : Oct 31 17:22:36 2026 GMT
Subject: CN=6adce95c-b560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:48:20:91:94:c1:90:b0:38:b7:ea:ac:47:
8b:01:dd:a3:22:46:be:c5:c2:40:cb:24:9e:e9:c8:
16:88:90:25:8c:e3:9b:47:5a:e4:90:22:13:f0:37:
e1:e6:f6:50:2f:c4:1e:0f:22:6d:5f:57:bf:f3:52:
c5:bb:e5:48:db:f8:79:9f:73:6b:d7:f9:68:2a:13:
72:9d:19:aa:9d:3a:4d:4b:30:85:9e:05:71:02:fc:
4e:22:60:af:b1:3c:dc:40:39:d6:f1:b2:10:3c:20:
4d:27:56:08:72:e6:92:55:49:c5:06:4c:b2:90:95:
41:15:6f:84:a9:66:9d:ac:25:2b:31:1a:44:39:9d:
29:5d:4e:62:33:da:21:3a:3c:d2:57:a5:89:ec:48:
1c:a3:07:15:78:ed:8b:e2:c1:ee:87:0e:79:ac:8b:
5b:c3:ec:24:66:72:09:bd:2a:b6:65:af:d1:b3:9e:
0b:1c:fc:38:b2:71:ca:8f:61:b7:b4:99:76:45:79:
da:21:9b:33:60:89:d8:d9:27:18:82:5f:92:99:5d:
10:de:f0:3e:0a:98:d7:62:81:39:49:0f:1e:e0:48:
77:e9:b7:01:3e:bc:d5:73:ba:c5:fb:1e:be:e5:e8:
73:b4:98:12:c4:83:2e:93:73:ab:ea:f4:2f:cd:ca:
bf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B8:95:D8:D2:E6:C9:70:5C:B7:51:B0:36:92:9F:FA:0F:61:DA:A2
X509v3 Authority Key Identifier:
keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:81:36:90:35:dd:a2:5b:49:24:ff:fd:5c:0b:bf:c2:e1:9c:
9f:a3:4b:19:28:00:2f:df:90:c3:34:9e:4e:68:9f:9e:f0:90:
4d:04:2b:ae:93:34:32:cc:55:b7:97:53:91:69:c6:b3:ae:e8:
ce:7f:3f:a0:18:a1:ae:34:7d:98:5c:3f:c5:d2:87:aa:01:df:
12:1b:0c:2f:48:0d:93:b3:9a:6e:bc:62:f0:23:40:b1:a5:a4:
cf:f0:3d:d1:4c:dd:dd:7d:35:85:c8:ce:b9:d6:c1:c9:7f:41:
92:18:cf:01:c6:d9:98:79:e0:03:c5:fb:2e:06:9b:ef:25:e7:
92:73:fa:f4:56:e4:ea:78:c2:da:79:c8:af:07:fd:7d:2e:07:
4e:6c:23:d5:00:33:df:56:5c:6a:28:34:80:5d:ef:94:50:32:
28:7d:f2:bd:f1:ea:b3:26:1a:8c:8e:aa:53:e5:01:fb:08:62:
7e:e6:08:9c:c6:45:1a:ec:2f:5e:34:60:0c:c7:31:db:8c:da:
18:ed:68:03:a3:f4:ed:6f:56:26:69:2f:f6:8c:42:d3:fa:de:
6f:2f:ab:b6:1e:f0:f4:15:56:2d:4a:d8:9a:24:bc:00:31:a3:
c7:61:75:97:e2:c8:b0:d3:c2:8d:52:1d:0b:83:21:b0:20:97:
ac:e5:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:42:15 2026 by rpki-client