
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json)
Hash identifier: KE3vzZuSOp/PycZgCnsPekOJh0m3n84LX42L9ZJ190E=
Subject key identifier: 00:14:76:47:13:ED:FA:4A:D0:67:CD:5D:15:63:27:E5:D1:A4:BC:A2
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 0705
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
Manifest number: 06DE
Signing time: Sat 24 Oct 2026 22:21:12 +0000
Manifest this update: Sat 24 Oct 2026 22:21:12 +0000
Manifest next update: Sat 31 Oct 2026 22:21:12 +0000
Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: jN3ds/9Ga8/aGRzDg64MNvxNvNZkGnndv8gDOonQ01s=)
2: 319A6658973111F19629FCFF3211F970.roa (hash: uGWiPzSYSnO6tuG2TrmWNNBLkDPP/OV6Gup6x+/duQI=)
3: F8CA86BCB73A11F1B21647E33611F970.roa (hash: GnGk481NQQLZ/hCbT6hDAhr9ixHD1GnbPqB3+iMMrps=)
4: 55701668973111F1A86A43863311F970.roa (hash: 4AkJSPCDbxSCUj6zIWHV/UqezUnyVX5aoFyn1J7EAKI=)
5: FB1416BA9C7611F1B1FB27074F11F970.roa (hash: kGLvX6v4HwEmRHitJyuuarMOr66jnQmsQ4lWRdtliyM=)
6: DF8DD8A098C411F19E6AA2476D11F970.roa (hash: 14F9WTUD/PfBJg487TPSNTEElC9rBzCL/zbpZ86aXZw=)
7: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: Y0h1wMVU3nPUU7anlaBflboBuMorRlVX6dChJjP+QRY=)
8: AFC035669D3111F1992D1A564911F970.roa (hash: yreAz5amTvN5ouWtoFad7yVbaRVHOOIswLn/c43044w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Oct 24 22:21:12 2026 GMT
Not After : Oct 31 22:21:12 2026 GMT
Subject: CN=6add2f58-f2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:5e:e5:f4:e9:39:b7:42:b3:e2:0a:11:ab:
a6:7d:64:9c:b6:15:9d:52:80:b7:1f:74:8d:67:04:
de:7d:7f:c1:3b:c8:e4:13:9a:f8:a7:2d:97:4e:c2:
d9:22:1a:96:1e:c7:4d:4c:10:48:cb:1a:03:75:47:
54:a0:3b:78:97:78:dc:bb:33:3c:9b:22:4d:f5:e0:
f4:72:9a:c7:be:cc:53:68:0e:fb:d1:60:9a:d5:ce:
9e:24:a2:9c:a9:ce:1c:ae:e2:39:fb:51:49:cb:a5:
dc:c9:5f:0d:7e:d3:98:a6:62:26:a9:b3:67:93:40:
63:0c:01:a8:46:52:32:be:23:8b:57:ce:51:fb:c9:
5c:b4:90:af:0b:72:aa:76:52:b5:77:d4:2a:1b:77:
87:e2:64:f9:27:2d:a2:35:42:61:d0:f8:cc:6f:68:
1f:17:f2:6d:1e:b8:df:2d:d1:81:08:74:8e:06:f7:
ff:fd:8f:fa:88:43:7b:d4:31:d7:3f:18:fa:1b:a5:
1a:a7:e1:65:80:b7:8b:c4:10:f8:c4:3b:76:f7:ef:
29:a8:59:a9:66:81:7a:60:94:78:a3:7d:24:e5:97:
0e:28:95:d2:31:d0:fe:25:d7:44:12:c6:35:51:2c:
65:3c:c0:42:ed:cf:47:52:ef:42:6e:3a:13:76:3b:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:14:76:47:13:ED:FA:4A:D0:67:CD:5D:15:63:27:E5:D1:A4:BC:A2
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ff:f1:65:4b:8d:ae:f3:99:db:de:f8:eb:4e:e7:2d:b7:51:
fc:50:b2:ba:bd:8f:df:76:0f:10:86:f2:24:b6:8c:20:e8:63:
c4:67:ea:94:ea:4e:00:2f:c7:62:00:a0:07:80:d3:54:77:cb:
68:58:b4:ab:07:69:b6:c9:81:c4:2e:43:80:1e:72:ae:7b:a8:
82:50:1b:36:4a:ab:eb:2c:25:74:f2:8b:4b:54:69:77:0c:b1:
4b:8a:46:12:0c:01:44:fc:9c:89:c8:aa:17:8d:b7:53:bb:32:
75:fc:89:65:8b:47:53:89:ba:86:1f:f6:12:d4:80:62:a7:e4:
74:f6:2d:72:98:7e:8f:3d:c3:39:2e:45:48:cd:43:81:f0:80:
07:16:eb:ad:94:f9:5b:99:bc:f5:df:6b:1c:e0:b5:18:eb:d7:
d3:54:1d:a2:7b:96:54:14:56:9c:1c:dd:cd:d7:17:49:15:04:
97:db:78:21:cb:51:55:9d:34:1f:46:ba:7d:4b:99:f6:a4:9b:
a9:5b:22:cb:fb:13:79:42:48:f5:ec:91:8f:ae:c3:28:28:f5:
bd:cf:11:69:00:69:f0:1c:5c:9b:0b:81:42:b1:90:db:b9:f8:
11:54:15:e4:63:cf:aa:98:fd:36:8c:45:a3:19:d6:62:37:00:
5f:75:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:51:00 2026 by rpki-client