
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
File: iWZCPuKkFWMfevMU5NiEAHqEaLY.mft (raw, json)
Hash identifier: zQkXtAtuVxRWsVwLLlwi9pbeoRg5GgcHcwXj+oHs8cA=
Subject key identifier: 00:7C:11:58:44:B8:4C:D2:70:17:4B:70:50:61:2B:54:9F:96:7A:1F
Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
Certificate issuer: /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
Manifest number: 0137
Signing time: Fri 09 Oct 2026 06:13:17 +0000
Manifest this update: Fri 09 Oct 2026 06:13:17 +0000
Manifest next update: Fri 16 Oct 2026 06:13:17 +0000
Files and hashes: 1: iWZCPuKkFWMfevMU5NiEAHqEaLY.crl (hash: sRWTCwcmselzQVsMnPKhl6ZMLV/QUyuIQT5Z07rx55k=)
2: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (hash: yxcEwj+JBBXiVTX+aFQc5ddxq/vEi232S7B1rwDfWO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Validity
Not Before: Oct 9 06:13:17 2026 GMT
Not After : Oct 16 06:13:17 2026 GMT
Subject: CN=6ac885fd-8535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:74:e9:d3:06:32:a7:73:2b:a3:37:fc:68:
70:d1:62:24:dd:c2:24:e8:68:4b:ed:53:ba:40:a8:
62:1f:eb:66:b0:82:75:bb:e5:93:af:cf:05:54:fe:
bd:41:0f:b9:94:97:0e:40:45:db:be:5e:30:94:25:
44:d5:c6:32:3d:83:75:5c:63:ae:98:4f:aa:c7:92:
d9:b5:a5:dc:2f:c1:68:c8:74:c3:34:44:ae:c4:3d:
8f:c6:04:80:c6:9c:0b:ea:c4:ee:9b:e1:c2:4d:23:
02:6e:6c:d3:bc:1a:02:c4:c8:f2:90:f7:40:3c:1c:
4c:e6:e3:b1:d9:4c:e0:5d:db:26:e7:c5:b2:5e:f6:
d7:f1:a0:60:3b:f2:6a:11:99:eb:d6:fd:25:86:9e:
c9:e4:e6:8a:c0:db:d7:04:56:1b:f5:8a:0a:8a:27:
76:3f:51:0b:24:9c:22:40:63:4f:05:ba:5f:c6:7f:
7a:8f:ec:75:31:35:48:8d:8c:a6:0e:80:47:c4:c9:
29:22:3c:a9:b7:62:ef:ae:43:e5:66:0e:7a:cd:63:
7f:af:a4:51:7a:13:30:60:e3:20:86:eb:54:74:d1:
ef:f9:e2:e7:3d:92:44:37:e4:6e:8b:0f:bb:37:28:
aa:3e:9d:0c:63:76:1c:73:6c:0b:f1:56:65:eb:5d:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7C:11:58:44:B8:4C:D2:70:17:4B:70:50:61:2B:54:9F:96:7A:1F
X509v3 Authority Key Identifier:
keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:a9:9d:76:2c:53:ac:96:8b:22:b2:15:7c:6e:a7:74:be:2c:
58:b1:4f:ef:47:32:ef:f8:33:e1:b8:a9:ef:0d:0d:bd:4f:ab:
d8:f4:22:8e:c7:12:59:0d:b9:82:66:4f:36:e1:4d:36:4f:01:
9c:2f:15:74:e4:1f:33:76:9d:d2:3f:91:2a:02:66:0d:c4:70:
fb:ce:69:10:c9:dc:2f:d5:0e:59:52:2e:f1:12:e2:47:de:7e:
d6:57:bc:c0:3b:1e:f7:f0:f1:60:67:d4:35:5c:6e:be:67:c0:
71:69:31:29:21:02:d5:e7:44:4b:52:a5:2b:2e:62:cb:9e:fa:
ce:14:ad:90:04:2c:e6:43:4d:3b:c9:17:bb:5a:8e:f6:48:dc:
d7:a0:ae:8b:e5:8a:ec:d7:8e:49:de:1a:94:49:0b:59:67:7d:
c0:9c:27:fe:b8:58:1d:bf:6e:8c:60:78:f9:6f:19:e0:09:ac:
d8:9b:ef:2b:54:46:39:e5:0a:2c:1b:d0:41:8f:ef:78:dc:60:
57:2a:ab:2c:b7:b4:02:46:73:d0:d6:04:8a:bc:4e:57:fe:86:
9d:ac:eb:c7:bc:b0:3d:35:52:ad:3d:be:2b:7a:c0:d3:01:2b:
c6:ce:c3:1f:a7:ce:70:99:ec:f2:92:c4:8a:45:92:01:22:90:
c0:d4:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:37:19 2026 by rpki-client