
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
File: aMK1iNFoWlh0LYouGIhl2zEQPPc.mft (raw, json)
Hash identifier: 3fITi5usMUvp3boKKtj7rQM2iobbNo3y20ynZqdhZsw=
Subject key identifier: D1:03:5C:84:12:60:9C:74:F3:47:08:AB:3D:F7:BF:2A:CD:97:CD:2E
Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
Certificate issuer: /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
Manifest number: 017F
Signing time: Fri 23 Oct 2026 05:16:17 +0000
Manifest this update: Fri 23 Oct 2026 05:16:17 +0000
Manifest next update: Fri 30 Oct 2026 05:16:17 +0000
Files and hashes: 1: aMK1iNFoWlh0LYouGIhl2zEQPPc.crl (hash: rib7hkmeYocoqYq9o/AZXA4m38OO29t71RbB7I2ZBNw=)
2: B2D0D768766011F08F4AF05AC4F9AE02.roa (hash: Zd6EOJOQWrL4SQgD9iMqOoFa/KkFBauJTV2e7xJlSJA=)
3: 01BA52A28CF411EFAE6F7F10C4F9AE02.roa (hash: 9DmK5tLd4L+uqsJPi/6teMKizcUwf78rVPCnrcU6QZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Validity
Not Before: Oct 23 05:16:17 2026 GMT
Not After : Oct 30 05:16:17 2026 GMT
Subject: CN=6adaeda1-2d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:57:3c:25:16:09:49:e7:7f:ce:b6:61:50:
67:1c:d4:dc:36:73:c5:a6:51:77:50:c4:b4:fb:e7:
80:4d:2f:a2:b8:e4:d4:2d:4a:70:01:65:e4:73:f7:
ea:0a:13:99:cb:e4:d5:6b:79:a7:5b:d8:60:06:02:
39:49:ad:1f:b6:32:57:cc:a7:e6:b2:df:fe:84:b0:
f4:cb:d6:48:c6:8f:df:bb:f0:83:26:94:c5:9b:b3:
a9:76:b6:71:a4:80:7d:fa:03:92:e6:21:99:43:50:
16:e1:d0:08:e5:cf:66:a3:87:bb:9b:61:1a:4b:e6:
1d:4c:e8:7b:ae:76:82:bd:b3:c3:e3:3a:f1:97:34:
c2:21:6b:53:51:69:bb:3a:e6:f3:3c:c5:30:ee:7c:
31:2d:bd:a4:b1:b7:2f:d8:cf:af:d6:9e:04:5b:d7:
36:cb:31:f6:30:5a:5b:75:49:52:01:d0:01:36:4a:
70:58:f7:bf:66:44:67:b0:c9:a9:0b:48:cc:9c:c0:
dc:95:75:d3:8b:81:c9:3c:70:ea:a7:98:1c:1a:1b:
61:8e:f0:0a:9c:ac:81:07:0c:49:04:c4:d6:7d:34:
de:96:6e:4d:fe:68:72:31:9d:93:50:e2:40:12:b2:
af:55:45:b1:64:4c:85:2f:1a:64:96:96:dd:7d:e4:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:5C:84:12:60:9C:74:F3:47:08:AB:3D:F7:BF:2A:CD:97:CD:2E
X509v3 Authority Key Identifier:
keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:da:a2:eb:fb:3f:90:be:e5:0e:f0:dd:99:84:1f:58:18:ab:
22:d4:48:66:b9:2c:77:51:56:1e:8b:47:6f:cf:c7:f7:d9:3b:
38:97:3d:91:8a:f6:5c:11:ac:af:90:06:4f:34:3a:13:c9:79:
7d:e9:ea:e2:9a:ac:fa:fe:f6:52:fc:d3:06:56:a3:15:07:92:
12:14:32:0e:01:75:68:b2:aa:e8:ba:ae:ab:2d:fe:4e:3e:a7:
08:b9:c6:bd:55:a9:d3:84:a6:46:85:37:4f:05:b0:19:d2:33:
0c:b9:42:65:89:29:5f:2c:6a:2c:20:c0:c8:51:fe:3f:a8:70:
ce:a4:2d:e6:e6:8e:7f:b1:ea:9d:4d:87:68:d2:c7:2e:06:14:
2c:23:09:a1:f3:9f:84:c1:ad:4d:85:f3:6b:e2:ca:98:5c:7f:
fe:a4:73:23:06:40:f0:6b:a0:a8:10:d3:48:3c:d1:b7:1d:d9:
16:f4:37:74:eb:17:36:cc:b1:ec:66:bd:75:f5:30:3c:6b:db:
46:0b:85:f6:cd:fd:0d:ea:51:62:46:ca:f7:ed:89:55:4a:7c:
64:33:29:77:a6:fc:54:ea:11:8b:fe:6e:b8:7a:d2:b5:23:bc:
47:76:17:16:e1:ef:b0:48:60:82:ee:25:b5:90:8f:57:f4:8f:
00:55:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:17 2026 by rpki-client