
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json)
Hash identifier: UIfhuqY8ZqbslanSmBZ3wJYNymreLSIpzIwLTMqoSxo=
Subject key identifier: B3:60:C4:EB:BC:B1:F0:29:C6:51:CA:90:43:4E:11:98:2E:33:60:71
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial: 13BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
Manifest number: 13A7
Signing time: Wed 28 Oct 2026 16:59:54 +0000
Manifest this update: Wed 28 Oct 2026 16:59:53 +0000
Manifest next update: Wed 04 Nov 2026 16:59:53 +0000
Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: 9ImQGRWwa601DAl82Ay3nsMZ6mSfkLlD8/IAefyMrfI=)
2: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: GnlfRpN0Q2j+B4AJ/Xomgb1CKwG1WuNWYrLjmKqch0M=)
3: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: V5ktLH4Czw+pnIMpuCPY+6sVgXH7i4p99Or3277tWXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 16:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5055 (0x13bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Validity
Not Before: Oct 28 16:59:53 2026 GMT
Not After : Nov 4 16:59:53 2026 GMT
Subject: CN=6ae22a0a-cc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:69:5b:ff:b7:be:ce:30:02:bd:cd:96:9e:
7b:01:09:18:be:df:df:50:68:c7:be:56:47:69:f6:
9f:ce:44:c0:5d:02:ec:59:91:3c:17:9c:fb:76:b5:
ee:40:8d:e9:74:a9:27:e1:2e:b1:93:fa:a4:6f:41:
6a:1a:f0:f5:ec:9e:43:57:04:b5:0b:c0:b7:13:63:
ee:b0:cc:17:c2:96:4e:8c:0a:0e:3b:dc:b2:b9:ea:
20:d3:fb:63:35:ea:33:e7:70:a4:b4:d1:94:23:19:
fc:e3:65:10:1d:12:ef:65:e8:bf:ff:7e:b6:6c:a4:
ea:10:1a:aa:f1:9b:da:3e:8e:f5:eb:e6:b6:9d:81:
99:ac:31:97:57:d8:00:b8:fa:36:43:f5:53:de:f0:
65:89:23:0c:53:9c:55:4d:ba:3b:75:c2:8b:5e:d5:
80:54:05:99:1e:71:cb:b5:88:50:92:8e:ec:3a:0b:
71:13:1a:c2:ba:ad:f1:b8:3e:bd:9f:fe:e9:68:a2:
7a:62:20:fa:8f:30:8b:22:ad:a6:7b:e2:ea:df:f7:
1e:bf:5e:58:e1:9c:98:50:02:bf:83:0b:5a:0c:7b:
a2:51:db:da:ef:26:ce:72:4c:9b:01:93:f1:36:de:
41:a0:cf:ed:8a:c2:e6:1c:7a:9f:b9:c9:85:b5:3b:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:60:C4:EB:BC:B1:F0:29:C6:51:CA:90:43:4E:11:98:2E:33:60:71
X509v3 Authority Key Identifier:
keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:7a:2b:d3:37:27:c6:bd:87:71:c0:31:94:2e:58:4e:7a:e9:
ae:72:55:90:f5:64:ce:21:8c:c5:c3:90:f6:93:07:67:be:50:
4f:16:76:44:d2:d0:90:04:d6:db:60:13:e1:7d:69:1b:11:32:
8f:dd:12:05:cf:2d:b5:b7:a5:36:2c:ed:69:ef:8e:c5:4e:f0:
90:1c:c3:43:bb:fd:80:db:ca:b0:7a:fc:68:6f:8b:a1:23:e2:
dd:23:89:07:2d:51:88:76:01:0d:43:67:e1:57:6e:a4:a4:07:
4b:5a:f7:bd:5e:8e:0a:4f:58:8b:c1:3b:40:1c:9b:06:6a:7d:
88:4e:66:f1:68:6c:59:ad:08:18:a5:d1:60:92:21:74:4d:71:
65:12:1b:52:ba:0c:4c:18:2b:e3:71:63:3a:fa:0f:ea:9f:b8:
c4:2f:b6:df:2f:80:4f:5d:c0:dc:7c:96:65:4f:04:76:ae:26:
ec:f7:b1:94:51:e1:43:43:a5:92:87:c2:b1:07:64:c8:6d:94:
09:ec:32:f3:36:20:2b:e1:35:29:d0:2c:8e:f2:9e:df:5d:63:
59:e2:23:68:7a:fa:04:c6:ea:ee:4b:9d:c5:59:10:82:59:67:
77:14:ef:28:40:5f:fe:ef:35:05:a8:3d:e8:b4:3c:7f:93:87:
b1:15:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:49:34 2026 by rpki-client