
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
File: d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json)
Hash identifier: s4dH0gM1ubTE4P0d/9x8amvAIgn4VojesRNMWt1Oz3k=
Subject key identifier: 7F:CD:8F:1F:A9:00:78:9A:B9:41:8D:1C:47:91:AF:18:69:86:C8:14
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
Manifest number: A8
Signing time: Sat 03 Oct 2026 07:53:46 +0000
Manifest this update: Sat 03 Oct 2026 07:53:45 +0000
Manifest next update: Sat 10 Oct 2026 07:53:45 +0000
Files and hashes: 1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: jAGCods9LeMbc1A4Ye8cV8kJ3F6ezJ9J8Y/7XaJkCms=)
2: 681269F8087811F19439B7C20A3D8C67.roa (hash: YMJQ6t3KOlMeCDMclcyI4S2K0MLQ5+kLB3/HRpyIzBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Validity
Not Before: Oct 3 07:53:45 2026 GMT
Not After : Oct 10 07:53:45 2026 GMT
Subject: CN=6ac0b48a-5b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:2d:d0:6b:e4:93:5c:13:24:a9:53:12:e0:
12:9c:45:3d:e5:97:4c:89:a3:5e:e3:9c:7d:ee:fe:
c0:f2:db:de:69:a4:c4:53:6b:dd:13:0b:34:67:c3:
e9:96:1d:af:fb:68:67:48:f4:b0:86:0a:fd:68:75:
2b:0a:86:7a:2d:67:30:b1:9c:1b:9d:2d:a7:e8:eb:
c7:97:00:f8:5d:60:c4:0d:d4:8f:dc:0e:91:f5:c7:
bc:45:60:b9:fd:99:36:81:8a:ec:b6:54:a5:d5:e3:
7a:b9:f5:72:25:66:23:42:8c:3d:5f:27:3b:0a:f6:
5e:ee:ee:ce:59:da:5a:58:a7:f8:d5:4d:a9:66:d5:
cc:b7:d1:34:42:b8:67:40:9c:78:39:80:d9:f1:bb:
d5:e2:9b:7e:e4:cc:39:43:83:40:8b:3e:cd:8f:00:
53:bc:fe:c9:93:59:90:14:49:f7:bf:f5:89:d2:98:
f0:8b:7d:56:6f:fc:24:8c:3b:5f:4d:67:b1:b5:48:
9c:32:47:6a:60:b5:16:40:aa:a8:a2:a6:6e:eb:62:
00:95:3e:e9:91:55:73:4b:8a:75:bb:e3:72:d2:a0:
f8:4a:27:eb:ec:b2:05:8b:d9:67:6d:ee:5a:c8:ed:
87:78:ad:14:78:f0:12:0a:f7:d1:58:c6:38:25:aa:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:8F:1F:A9:00:78:9A:B9:41:8D:1C:47:91:AF:18:69:86:C8:14
X509v3 Authority Key Identifier:
keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:a5:f2:3f:f1:b1:c5:17:db:d1:b9:02:cb:3d:cd:15:a4:64:
1a:14:36:4e:2b:a6:6e:db:fd:13:6b:b3:3c:17:84:46:12:c9:
8a:e4:37:94:e5:81:2e:cd:3d:0e:bc:9b:ef:66:7e:e5:63:00:
b7:16:a7:29:eb:4f:95:b6:38:78:ed:1a:bc:d6:dc:a3:ea:07:
c7:88:99:b6:07:c2:fc:fe:b5:c8:10:5f:84:6d:d0:71:40:fa:
42:8c:da:83:80:aa:2b:0c:d1:88:83:eb:97:7c:97:83:e6:c1:
a3:cd:55:c4:b0:00:a8:3a:f9:c1:d0:4a:09:c0:c3:fc:03:89:
07:2d:05:12:1d:e0:d7:34:fc:20:92:01:b0:47:b1:81:01:2e:
43:72:4f:0c:44:bc:2f:1a:73:98:c0:2d:08:52:2e:e0:70:23:
43:d6:8f:72:20:58:9b:37:55:9d:c5:d7:73:1f:94:1b:ec:70:
29:40:a4:be:47:3e:55:58:75:9a:c8:9a:e5:96:97:15:f2:28:
6b:87:44:6d:9a:7c:fa:94:f0:41:6b:55:3a:a7:ec:58:7e:2a:
48:dd:b1:08:ed:d6:7d:f1:da:6b:f1:91:81:be:1e:26:31:b6:
f6:b2:2b:0d:c8:ee:ae:36:e6:b2:5b:42:40:f9:2e:33:91:ef:
e3:93:8d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:27 2026 by rpki-client