
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
File: aMK1iNFoWlh0LYouGIhl2zEQPPc.mft (raw, json)
Hash identifier: 8uGHc8aNba6FQqDrKWoQ9kknbG/aUDOw3fnwaPixx7o=
Subject key identifier: 83:23:F2:34:0E:7F:CD:1F:43:05:9A:71:EC:D1:74:9E:7C:E7:D3:AC
Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
Certificate issuer: /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
Manifest number: 0160
Signing time: Thu 27 Aug 2026 04:35:59 +0000
Manifest this update: Thu 27 Aug 2026 04:35:59 +0000
Manifest next update: Thu 03 Sep 2026 04:35:59 +0000
Files and hashes: 1: aMK1iNFoWlh0LYouGIhl2zEQPPc.crl (hash: SyWy0o0d04q9kIo+CbYuHGn9cxNJbb4TzndWrv1omqQ=)
2: B2D0D768766011F08F4AF05AC4F9AE02.roa (hash: AFwVZfcUHzwe9j0UrSqlyKnxLzWcBfDiYKBuQr8Nbjs=)
3: 01BA52A28CF411EFAE6F7F10C4F9AE02.roa (hash: EUtWxQAE1BFRn9M5BHJ1aea0TybMQyltaStUs+wgA48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Validity
Not Before: Aug 27 04:35:59 2026 GMT
Not After : Sep 3 04:35:59 2026 GMT
Subject: CN=6a8fbeaf-11c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:85:29:9d:87:7d:6f:49:20:e9:0c:e9:c8:
f0:06:6a:a2:23:e7:4d:f3:e2:ab:3d:5b:21:18:ec:
e9:03:8f:1f:03:04:6c:62:c8:41:7a:92:55:e5:41:
5e:7f:69:f9:dc:f3:a8:67:83:bb:e2:db:89:5b:db:
30:b3:a7:1a:cb:27:3a:ec:1a:e9:c9:20:0d:c4:6e:
fd:2c:d7:f3:21:e3:92:cf:0d:90:78:b5:df:68:75:
52:fd:cd:87:0f:49:4e:d5:51:5c:83:23:aa:f1:00:
3b:d8:33:f0:e7:24:aa:b7:08:be:28:4e:fa:3c:aa:
73:16:a9:e4:b0:ad:a5:98:af:90:35:6b:24:b2:09:
19:bc:b0:42:9f:02:61:8a:bd:01:f8:30:6e:2b:73:
6f:a8:5d:d6:aa:ea:c2:dd:d7:43:78:a6:20:93:e5:
43:2b:de:b9:4b:bf:b0:ce:d7:a3:92:72:06:4e:60:
a7:f8:d1:21:a0:50:36:e9:98:ef:48:39:78:9f:e2:
b0:78:52:a6:5f:38:44:2e:28:ef:78:aa:d2:12:4b:
f5:18:39:46:99:b4:70:81:f0:ce:1d:4e:8a:07:79:
47:f7:b7:ff:2a:69:20:02:ea:9f:e6:02:e5:c8:99:
0c:50:02:29:5e:45:33:60:5a:d1:85:e4:90:b9:1a:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:23:F2:34:0E:7F:CD:1F:43:05:9A:71:EC:D1:74:9E:7C:E7:D3:AC
X509v3 Authority Key Identifier:
keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:14:e8:8a:4d:da:36:a4:12:65:be:9b:9c:86:4c:2e:61:f4:
1b:e4:c2:ad:37:5d:6a:60:92:a1:e7:05:c6:09:7b:50:fa:83:
96:7e:ea:74:d6:a2:8d:d9:9c:9f:0f:77:46:a9:7a:a2:af:26:
01:d0:46:d8:cb:e1:e2:81:50:ae:23:bf:fe:77:ef:96:3d:ee:
a0:64:29:56:aa:c0:d6:7a:d1:cd:12:f2:68:c8:83:ab:4e:a7:
19:35:36:65:eb:fb:65:44:7f:b1:ab:ab:87:e0:af:a0:8f:49:
50:f9:0c:87:b9:01:b0:23:f0:aa:98:d9:1c:c2:9e:18:6f:33:
6c:be:d9:49:f5:ec:be:eb:3b:78:96:4f:25:66:cf:84:9a:cc:
43:7e:58:3d:fe:0b:04:70:d4:34:5d:14:78:f7:c8:2f:eb:7a:
10:f1:3b:48:47:64:5e:87:7e:ae:43:94:f0:27:bf:71:b0:4f:
1c:eb:5d:c7:bb:2d:5c:e0:ff:5f:47:b0:de:05:f4:49:61:e7:
16:ed:c7:0e:07:a9:dc:0d:26:d9:86:39:6e:6a:3c:d1:0f:ce:
27:16:1f:ff:66:28:6a:b1:cb:fc:03:6c:96:18:bb:c3:57:8a:
65:f7:5f:32:93:5c:0b:49:41:05:26:d9:3c:f5:20:6b:58:e2:
bc:f4:15:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 04:06:43 2026 by rpki-client